Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File:                     t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier:          LQLLxuq7NWtwJpq12rGhs6sZoRifXVQqrmXw9tRU7TQ=
Subject key identifier:   1D:17:91:12:FB:82:65:31:B0:4B:49:8A:85:57:E7:47:DD:1C:5D:63
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer:       /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial:       019F8FB59E10657179883CDE1633BFDF4DFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number:          167A
Signing time:             Thu 23 Jul 2026 16:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:12 +0000
Files and hashes:         1: 2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa (hash: VpwFMCxf02N3s6qbKcrB7OwUNutAGhYjp7y72GSVaW4=)
                          2: fZqDSJnUbHG62IvLERx4tiEWKgg.roa (hash: GDZnevYXZ2UVLkiVPlwZRqNZ2Bo/evXbLjj481Slbr4=)
                          3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: +JDQNlA/qv/I93nOa1LZGZg7AkTsiLCZZo48mCtLOF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:9e:10:65:71:79:88:3c:de:16:33:bf:df:4d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
        Validity
            Not Before: Jul 23 16:01:12 2026 GMT
            Not After : Jul 24 16:01:12 2026 GMT
        Subject: CN=1d179112fb826531b04b498a8557e747dd1c5d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:bb:52:34:a8:cd:cd:32:ce:51:29:7d:3d:
                    3d:6e:46:27:10:90:f6:8f:7a:d0:5a:5e:6d:63:51:
                    65:65:5f:ef:41:66:af:45:fb:61:ca:16:3e:89:47:
                    3c:18:a9:f1:99:6a:27:59:9d:fe:6a:24:7d:e3:75:
                    9a:c3:5c:c5:e7:47:8f:76:86:7a:ac:1a:ba:b7:ab:
                    f0:46:40:78:08:c0:81:77:e5:ac:6b:7a:53:c6:d0:
                    0f:90:04:a0:dd:0d:db:50:c4:77:a0:4b:f8:8c:f0:
                    7e:8b:ce:b8:94:db:03:50:76:0d:76:16:e5:28:8e:
                    5a:25:56:cb:30:c5:c3:d5:37:9b:b7:d1:a8:43:34:
                    18:ec:73:b6:7e:c8:d0:93:ff:87:c0:95:51:70:87:
                    3b:ee:c3:c4:9c:50:4c:95:83:1b:62:d1:0d:1d:e2:
                    0b:f7:4a:47:f9:93:dd:d6:43:45:dd:58:3e:c7:39:
                    62:2d:40:13:f1:98:8f:95:0a:16:cf:da:b0:82:92:
                    b7:4b:02:94:bb:1b:ef:a3:75:6d:b3:c6:81:cc:bd:
                    65:60:e5:63:de:5e:8f:3d:10:1f:bd:06:8f:5e:45:
                    8a:ec:90:fb:af:7b:7c:7d:14:62:2e:4f:3e:b0:d0:
                    ab:6c:cf:cf:d5:bf:41:0a:66:fc:ca:18:a2:04:b5:
                    93:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:17:91:12:FB:82:65:31:B0:4B:49:8A:85:57:E7:47:DD:1C:5D:63
            X509v3 Authority Key Identifier:
                keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:8d:c9:bf:a1:a3:af:c5:9b:00:dc:36:28:c5:c4:dd:b9:dd:
         d1:de:93:05:54:6f:ec:fc:5b:07:e4:7a:8e:8d:b7:83:a0:a5:
         5c:96:cd:2f:3d:f5:65:08:a1:5f:09:d8:83:b3:7b:38:67:5a:
         72:10:2c:19:39:01:6f:b6:fa:93:5e:7d:84:cc:6d:33:a3:fb:
         32:6d:39:40:5e:23:6b:34:94:28:3a:34:89:da:98:54:1f:a5:
         97:15:f0:4b:f2:e0:41:9a:47:3d:69:2b:5f:8e:73:2d:c6:00:
         a0:4f:b2:33:71:e1:ce:b5:c0:d9:d0:68:b9:68:76:68:1f:c6:
         5a:18:9d:85:55:03:62:99:c4:25:e5:9d:c8:0c:cd:2f:aa:30:
         d5:5b:ee:a3:ab:f5:ac:8f:49:82:bd:1a:fe:ac:71:90:81:71:
         af:7c:90:46:b4:4f:0f:eb:20:93:73:3c:0e:7b:5f:17:de:b2:
         d1:c4:07:99:b7:ad:c6:a6:cd:0b:d4:18:01:21:7f:e2:01:fb:
         83:88:c3:84:82:6b:17:4c:f4:1a:21:37:95:dc:9f:fb:e4:f5:
         50:8d:6c:1d:53:11:8b:1c:e6:3c:3f:49:be:ff:dd:58:82:b8:
         42:09:eb:8b:33:71:27:57:0f:25:88:96:1e:e1:3e:60:55:e4:
         59:91:4b:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtZ4QZXF5iDzeFjO/303+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OGNkZGJmYzc2YmRhMjZhMDI5ZWE4MGM4OTg3Nzk4NzQ1
ZjFmMDIwHhcNMjYwNzIzMTYwMTEyWhcNMjYwNzI0MTYwMTEyWjAzMTEwLwYDVQQD
EygxZDE3OTExMmZiODI2NTMxYjA0YjQ5OGE4NTU3ZTc0N2RkMWM1ZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAe7UjSozc0yzlEpfT09bkYnEJD2
j3rQWl5tY1FlZV/vQWavRfthyhY+iUc8GKnxmWonWZ3+aiR943Waw1zF50ePdoZ6
rBq6t6vwRkB4CMCBd+Wsa3pTxtAPkASg3Q3bUMR3oEv4jPB+i864lNsDUHYNdhbl
KI5aJVbLMMXD1Tebt9GoQzQY7HO2fsjQk/+HwJVRcIc77sPEnFBMlYMbYtENHeIL
90pH+ZPd1kNF3Vg+xzliLUAT8ZiPlQoWz9qwgpK3SwKUuxvvo3Vts8aBzL1lYOVj
3l6PPRAfvQaPXkWK7JD7r3t8fRRiLk8+sNCrbM/P1b9BCmb8yhiiBLWTCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0XkRL7gmUxsEtJioVX50fdHF1jMB8GA1UdIwQY
MBaAFLeM3b/Ha9omoCnqgMiYd5h0Xx8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMGI4ZTktZTdkNC00MGNjLWFkNWYt
M2M3NDEyMjBlYTAwLzEvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMGI4ZTktZTdkNC00MGNjLWFkNWYtM2M3NDEyMjBlYTAw
LzEvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqY3Jv6Gj
r8WbANw2KMXE3bnd0d6TBVRv7PxbB+R6jo23g6ClXJbNLz31ZQihXwnYg7N7OGda
chAsGTkBb7b6k159hMxtM6P7Mm05QF4jazSUKDo0idqYVB+llxXwS/LgQZpHPWkr
X45zLcYAoE+yM3HhzrXA2dBouWh2aB/GWhidhVUDYpnEJeWdyAzNL6ow1Vvuo6v1
rI9Jgr0a/qxxkIFxr3yQRrRPD+sgk3M8DntfF96y0cQHmbetxqbNC9QYASF/4gH7
g4jDhIJrF0z0GiE3ldyf++T1UI1sHVMRixzmPD9Jvv/dWIK4QgnrizNxJ1cPJYiW
HuE+YFXkWZFLDw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:39 2026 by rpki-client