Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
File:                     4te3649H5Sd5Ev8FjP7X2Jn8abk.mft (raw, json)
Hash identifier:          A+CGrWdulimPWMyZxbV9yT/7KPQiAY+eU1Egi0SWpFg=
Subject key identifier:   86:EE:BB:F5:7C:21:F8:24:E5:13:7E:34:1B:0E:FC:AB:CE:1B:5B:BA
Authority key identifier: E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
Certificate issuer:       /CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Certificate serial:       019F916CE5A3406ADF367C57154DA77E1C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
Manifest number:          1956
Signing time:             Fri 24 Jul 2026 00:01:00 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:00 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:00 +0000
Files and hashes:         1: 4te3649H5Sd5Ev8FjP7X2Jn8abk.crl (hash: 2txxMIGdOorOohQgWx73HIycQ8oJ2qmWT9e2H0Eumno=)
                          2: yPdEnBlETthfb3n2w6_5p1naims.roa (hash: FMus24cOQ5H8kqoUzdVY1kxUQ7CnaxtzdvTHW/XwsqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:e5:a3:40:6a:df:36:7c:57:15:4d:a7:7e:1c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
        Validity
            Not Before: Jul 24 00:01:00 2026 GMT
            Not After : Jul 25 00:01:00 2026 GMT
        Subject: CN=86eebbf57c21f824e5137e341b0efcabce1b5bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:a8:01:5e:3d:72:b0:cb:67:05:55:2a:2d:
                    31:12:1b:43:5f:b5:86:72:7a:be:85:e0:41:3d:f5:
                    cc:ee:ea:b5:fa:b8:cf:52:5a:48:88:59:b8:2d:5d:
                    93:6b:a9:fb:e9:54:f9:10:4b:ab:a8:ae:b6:ed:a5:
                    4c:a6:03:8b:64:e0:16:58:f5:c3:ab:af:83:00:77:
                    51:63:d8:a0:33:74:6b:e1:58:be:5f:fa:45:90:0f:
                    5d:ca:91:2f:6e:b6:a9:2b:0f:0f:0f:9b:f7:66:9a:
                    1f:3a:ff:89:89:08:1f:84:df:65:f2:aa:ee:34:de:
                    fd:55:da:b1:22:ba:f8:a2:1f:c9:a7:73:a4:d8:67:
                    db:61:67:cd:4e:96:2b:c0:e8:d6:a7:51:02:76:12:
                    d4:e3:69:6e:5e:f4:ab:6f:6e:2f:08:30:a1:e0:7a:
                    88:a6:42:53:fd:5a:f6:2d:c7:56:ee:9d:66:90:e4:
                    50:ed:0b:e1:7b:1b:27:9f:cd:1f:c7:65:0b:d4:05:
                    a8:a9:0e:65:ab:4f:60:72:c1:9e:a8:ad:9a:fe:c1:
                    af:d4:a6:aa:00:39:c7:8d:4d:47:72:cf:b8:7f:c1:
                    16:4f:22:b2:0b:11:ee:7e:05:e5:9e:82:60:62:a4:
                    b5:03:a0:87:4f:ef:ea:f1:50:f6:de:d1:0d:2a:22:
                    7f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EE:BB:F5:7C:21:F8:24:E5:13:7E:34:1B:0E:FC:AB:CE:1B:5B:BA
            X509v3 Authority Key Identifier:
                keyid:E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d3:6f:7f:8a:26:3b:1e:d0:aa:01:21:8a:21:63:01:8b:15:
         98:98:06:e5:86:74:0a:e0:e5:9d:93:a7:97:be:16:a2:d3:0c:
         61:47:7c:e4:12:da:69:fa:e7:86:3f:15:28:36:87:be:14:42:
         df:12:c1:af:9c:fb:7e:4c:6d:14:95:4b:8d:83:1b:11:82:f5:
         d7:05:8e:5f:0d:8d:58:d8:57:ee:19:af:27:56:aa:aa:7d:9a:
         4b:a5:59:65:ea:77:fe:47:fd:78:b1:7c:c9:0e:4d:e6:02:fa:
         99:3e:1c:64:21:40:fc:2c:7a:89:f3:69:c3:59:d8:cf:1a:2a:
         82:4a:c6:5e:18:66:1d:3a:95:b8:f6:9a:ec:ec:b5:26:37:08:
         45:79:3a:ea:95:a1:d0:94:30:90:3d:c6:4c:4a:16:c7:82:18:
         44:1b:1f:30:dc:a8:c1:81:35:22:9e:b3:40:ac:f8:06:c0:ef:
         c8:5e:ff:8b:aa:4c:50:9f:e8:a7:49:cf:7c:de:f9:c1:61:c7:
         81:4a:20:81:68:9a:6c:6f:5e:6a:97:64:7d:8c:15:33:72:4a:
         03:93:46:8a:ba:76:47:70:87:97:17:f8:b9:a1:96:d0:65:f8:
         70:ba:bc:a8:c6:ad:d7:79:49:fb:43:43:75:72:8b:07:6b:37:
         fa:ce:62:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbOWjQGrfNnxXFU2nfhx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDdiN2ViOGY0N2U1Mjc3OTEyZmYwNThjZmVkN2Q4OTlm
YzY5YjkwHhcNMjYwNzI0MDAwMTAwWhcNMjYwNzI1MDAwMTAwWjAzMTEwLwYDVQQD
Eyg4NmVlYmJmNTdjMjFmODI0ZTUxMzdlMzQxYjBlZmNhYmNlMWI1YmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz6oAV49crDLZwVVKi0xEhtDX7WG
cnq+heBBPfXM7uq1+rjPUlpIiFm4LV2Ta6n76VT5EEurqK627aVMpgOLZOAWWPXD
q6+DAHdRY9igM3Rr4Vi+X/pFkA9dypEvbrapKw8PD5v3ZpofOv+JiQgfhN9l8qru
NN79VdqxIrr4oh/Jp3Ok2GfbYWfNTpYrwOjWp1ECdhLU42luXvSrb24vCDCh4HqI
pkJT/Vr2LcdW7p1mkORQ7Qvhexsnn80fx2UL1AWoqQ5lq09gcsGeqK2a/sGv1Kaq
ADnHjU1Hcs+4f8EWTyKyCxHufgXlnoJgYqS1A6CHT+/q8VD23tENKiJ/GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbuu/V8Ifgk5RN+NBsO/KvOG1u6MB8GA1UdIwQY
MBaAFOLXt+uPR+UneRL/BYz+19iZ/Gm5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRlMzY0OUg1U2Q1RXY4RmpQN1gySm44YWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kMzNiY2EtNzI5ZC00M2UzLTk1Zjct
N2IwNDFjNTQ1NzZhLzEvNHRlMzY0OUg1U2Q1RXY4RmpQN1gySm44YWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kMzNiY2EtNzI5ZC00M2UzLTk1ZjctN2IwNDFjNTQ1NzZh
LzEvNHRlMzY0OUg1U2Q1RXY4RmpQN1gySm44YWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtNvf4om
Ox7QqgEhiiFjAYsVmJgG5YZ0CuDlnZOnl74WotMMYUd85BLaafrnhj8VKDaHvhRC
3xLBr5z7fkxtFJVLjYMbEYL11wWOXw2NWNhX7hmvJ1aqqn2aS6VZZep3/kf9eLF8
yQ5N5gL6mT4cZCFA/Cx6ifNpw1nYzxoqgkrGXhhmHTqVuPaa7Oy1JjcIRXk66pWh
0JQwkD3GTEoWx4IYRBsfMNyowYE1Ip6zQKz4BsDvyF7/i6pMUJ/op0nPfN75wWHH
gUoggWiabG9eapdkfYwVM3JKA5NGirp2R3CHlxf4uaGW0GX4cLq8qMat13lJ+0ND
dXKLB2s3+s5i6Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:35 2026 by rpki-client