Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.mft
File:                     2IS_vbMjVA5ckMAJ495sA9a_zNM.mft (raw, json)
Hash identifier:          AXcL6/DAQXKldpH4jkRAVtYHR94h6b/IV5jmdnzDABE=
Subject key identifier:   A4:B6:F3:4D:D2:54:77:14:CF:4A:75:58:0A:9E:D2:47:E6:D3:79:36
Authority key identifier: D8:84:BF:BD:B3:23:54:0E:5C:90:C0:09:E3:DE:6C:03:D6:BF:CC:D3
Certificate issuer:       /CN=d884bfbdb323540e5c90c009e3de6c03d6bfccd3
Certificate serial:       019F8FEC2EC8F2FB44253C5F2A52A1E25646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2IS_vbMjVA5ckMAJ495sA9a_zNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.mft
Manifest number:          E4
Signing time:             Thu 23 Jul 2026 17:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:48 +0000
Files and hashes:         1: 2IS_vbMjVA5ckMAJ495sA9a_zNM.crl (hash: jMsXQnsu+hf9Zdjdrxc5vn1iCh3rtXa4IbApJL6uGhQ=)
                          2: 4Qc-yn1UzAkfErKkrOplIM1TXXc.roa (hash: c+WtB+oW1ahwXZOb81bw0sgcuUJbYdw60b7M9e0cWc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2IS_vbMjVA5ckMAJ495sA9a_zNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:2e:c8:f2:fb:44:25:3c:5f:2a:52:a1:e2:56:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d884bfbdb323540e5c90c009e3de6c03d6bfccd3
        Validity
            Not Before: Jul 23 17:00:48 2026 GMT
            Not After : Jul 24 17:00:48 2026 GMT
        Subject: CN=a4b6f34dd2547714cf4a75580a9ed247e6d37936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:df:4f:de:06:46:8c:2a:4b:8b:7e:5b:93:11:
                    37:f2:95:38:a4:92:03:9c:b5:32:5a:91:75:d3:ad:
                    85:2d:e1:fb:04:1d:8d:39:fd:68:c7:6d:49:09:32:
                    f8:52:49:45:fb:db:08:96:0f:39:8e:31:8d:1f:f4:
                    14:fc:c6:b7:f4:24:61:08:f6:00:78:4a:37:28:68:
                    f1:2b:88:91:d8:4f:ae:35:8f:34:5e:76:ae:df:a2:
                    26:43:71:95:fa:ec:b7:ab:70:86:3c:0b:8f:a6:a1:
                    30:86:eb:72:ab:03:06:c6:fa:0d:c4:96:88:8d:91:
                    38:e7:1c:f7:de:c5:7e:4c:ab:32:cb:8c:d1:54:d2:
                    45:77:63:e8:97:ae:3b:77:a1:ad:65:1b:c5:ee:95:
                    68:7f:ea:e8:41:ce:c7:ed:3c:89:7e:58:74:3b:fe:
                    42:47:64:4b:12:4e:39:02:30:74:79:2e:05:f1:31:
                    35:05:d9:d2:d7:04:2e:1e:1f:b9:1c:2a:5a:c3:ad:
                    7a:2f:27:9e:19:7d:56:75:db:4d:96:74:91:0e:4c:
                    60:68:f6:c9:b3:c9:46:f9:ae:6b:f2:0d:a8:86:02:
                    df:07:91:74:43:d2:7e:15:12:d0:80:03:2b:6a:70:
                    b2:b8:b1:87:24:69:fb:82:aa:8e:47:2f:6c:5a:e3:
                    64:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B6:F3:4D:D2:54:77:14:CF:4A:75:58:0A:9E:D2:47:E6:D3:79:36
            X509v3 Authority Key Identifier:
                keyid:D8:84:BF:BD:B3:23:54:0E:5C:90:C0:09:E3:DE:6C:03:D6:BF:CC:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IS_vbMjVA5ckMAJ495sA9a_zNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ba:4b:51:82:29:ad:3f:c4:6e:70:b3:d0:9f:6f:e0:df:34:
         03:db:83:a4:87:84:c7:5e:a0:0d:4a:20:ea:8c:03:f9:9c:24:
         ce:87:46:f8:5d:12:2a:af:47:a6:a6:32:e6:34:85:9c:10:b1:
         64:30:b6:fb:be:5f:dd:a9:c3:80:2e:30:e4:fe:f8:ea:3b:f1:
         92:ec:cf:c9:68:ab:fa:39:fb:a4:ba:81:ed:b0:54:29:6b:8b:
         b2:ec:54:40:32:6e:e4:ca:39:79:16:b7:61:87:a8:d7:68:73:
         9d:b9:24:72:1a:dd:2c:03:61:97:65:bc:05:55:20:16:c4:e4:
         c7:6a:ee:15:35:fa:fa:c0:76:a2:50:e1:4f:dc:59:d3:78:b4:
         af:cd:d6:ce:6d:0a:8f:63:c7:71:1e:1c:11:7a:fa:db:6f:da:
         11:b4:c4:4e:6e:49:a9:c1:15:e5:45:06:b9:a3:6b:89:1b:a5:
         e3:4f:ea:65:40:40:ee:f2:4e:09:c0:ce:7d:99:da:54:52:15:
         28:2d:27:01:15:8e:00:76:c1:b9:12:42:85:6a:3b:ba:63:d0:
         e7:18:7c:90:4c:b8:9f:e5:87:1e:08:e2:cc:01:78:b1:df:3e:
         22:a0:98:d4:2e:d6:92:58:44:d0:3b:4e:24:74:5a:42:b8:5b:
         83:11:21:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7C7I8vtEJTxfKlKh4lZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODRiZmJkYjMyMzU0MGU1YzkwYzAwOWUzZGU2YzAzZDZi
ZmNjZDMwHhcNMjYwNzIzMTcwMDQ4WhcNMjYwNzI0MTcwMDQ4WjAzMTEwLwYDVQQD
EyhhNGI2ZjM0ZGQyNTQ3NzE0Y2Y0YTc1NTgwYTllZDI0N2U2ZDM3OTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd9P3gZGjCpLi35bkxE38pU4pJID
nLUyWpF1062FLeH7BB2NOf1ox21JCTL4UklF+9sIlg85jjGNH/QU/Ma39CRhCPYA
eEo3KGjxK4iR2E+uNY80Xnau36ImQ3GV+uy3q3CGPAuPpqEwhutyqwMGxvoNxJaI
jZE45xz33sV+TKsyy4zRVNJFd2Pol647d6GtZRvF7pVof+roQc7H7TyJflh0O/5C
R2RLEk45AjB0eS4F8TE1BdnS1wQuHh+5HCpaw616LyeeGX1WddtNlnSRDkxgaPbJ
s8lG+a5r8g2ohgLfB5F0Q9J+FRLQgAMranCyuLGHJGn7gqqORy9sWuNkZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKS2803SVHcUz0p1WAqe0kfm03k2MB8GA1UdIwQY
MBaAFNiEv72zI1QOXJDACePebAPWv8zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMklTX3ZiTWpWQTVja01BSjQ5NXNBOWFfek5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ZWY2OTgtZmI1NC00NjExLWJlODIt
ZDQ5YTJhZDZmMjIyLzEvMklTX3ZiTWpWQTVja01BSjQ5NXNBOWFfek5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82ZWY2OTgtZmI1NC00NjExLWJlODItZDQ5YTJhZDZmMjIy
LzEvMklTX3ZiTWpWQTVja01BSjQ5NXNBOWFfek5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLpLUYIp
rT/EbnCz0J9v4N80A9uDpIeEx16gDUog6owD+ZwkzodG+F0SKq9HpqYy5jSFnBCx
ZDC2+75f3anDgC4w5P746jvxkuzPyWir+jn7pLqB7bBUKWuLsuxUQDJu5Mo5eRa3
YYeo12hznbkkchrdLANhl2W8BVUgFsTkx2ruFTX6+sB2olDhT9xZ03i0r83Wzm0K
j2PHcR4cEXr622/aEbTETm5JqcEV5UUGuaNriRul40/qZUBA7vJOCcDOfZnaVFIV
KC0nARWOAHbBuRJChWo7umPQ5xh8kEy4n+WHHgjizAF4sd8+IqCY1C7WklhE0DtO
JHRaQrhbgxEhuQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:02 2026 by rpki-client