Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
File:                     E--253AYyTVaU4hW1OueUGl19TU.mft (raw, json)
Hash identifier:          MFvZy4PrzXIZunVPSgSD42VAlimcmW6NnCdvD03AQu0=
Subject key identifier:   48:41:C2:97:2F:17:66:26:D0:A5:54:1E:56:78:92:CC:66:EA:BF:9C
Authority key identifier: 13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35
Certificate issuer:       /CN=13efb6e77018c9355a538856d4eb9e506975f535
Certificate serial:       019F9692B18163447B7606C75E0BB4C33D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
Manifest number:          0281
Signing time:             Sat 25 Jul 2026 00:00:23 +0000
Manifest this update:     Sat 25 Jul 2026 00:00:23 +0000
Manifest next update:     Sun 26 Jul 2026 00:00:23 +0000
Files and hashes:         1: E--253AYyTVaU4hW1OueUGl19TU.crl (hash: OLyUYWv064K7aSeL+/YtdIrr8u8KRczi3Pxe/rIGWP8=)
                          2: pn0eecPtI3ydGJyzmDixGdijU0M.roa (hash: hsAKDf191EtjscgSuEpFCHm/Jr/4jq8uJLk58v0knFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:92:b1:81:63:44:7b:76:06:c7:5e:0b:b4:c3:3d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13efb6e77018c9355a538856d4eb9e506975f535
        Validity
            Not Before: Jul 25 00:00:23 2026 GMT
            Not After : Jul 26 00:00:23 2026 GMT
        Subject: CN=4841c2972f176626d0a5541e567892cc66eabf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e1:80:38:d4:de:24:b4:8e:22:0d:bd:68:94:
                    77:ec:d1:ed:79:e3:90:c4:30:33:e2:81:8a:fa:0a:
                    a5:ff:07:48:b7:52:b5:2a:60:b4:49:3f:2c:95:b0:
                    b6:a2:9c:61:9a:33:b8:3a:4e:45:4e:af:fe:75:00:
                    df:6e:f1:bf:ab:33:88:56:05:f4:24:b2:64:89:21:
                    a0:73:8a:6b:1f:d7:20:ef:7d:b7:93:02:87:62:6f:
                    68:94:03:5c:04:72:a2:14:1e:79:ea:0c:b5:c0:4c:
                    e7:37:0a:d8:3f:ad:54:ea:90:6b:c3:b3:7a:0b:6e:
                    ed:a1:cf:6b:b0:c8:83:be:8d:7a:a4:5a:8f:10:af:
                    7b:ea:55:95:62:3d:d7:e9:bb:ce:ea:dd:01:76:ca:
                    67:02:47:cd:23:97:76:59:a6:c1:61:5e:49:1e:df:
                    a9:63:d6:5b:fc:03:c0:04:8d:47:18:aa:e5:c3:43:
                    4d:55:00:d3:d2:24:1a:08:cf:54:b0:02:87:55:6f:
                    17:7c:20:ff:fe:fb:f3:fc:33:43:e5:48:c6:e1:12:
                    1c:28:f4:6f:b8:20:3c:a1:57:63:91:cd:c2:07:5a:
                    30:6b:8d:4d:ba:46:98:ac:c4:d2:bb:8e:c8:ee:23:
                    c2:93:4c:3d:d0:8b:ae:7c:01:e3:d1:7d:b3:1d:d3:
                    61:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:41:C2:97:2F:17:66:26:D0:A5:54:1E:56:78:92:CC:66:EA:BF:9C
            X509v3 Authority Key Identifier:
                keyid:13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:33:c3:f2:1f:44:97:47:fe:78:e5:05:af:96:66:13:8e:81:
         ce:2f:1a:6f:a6:89:e3:9b:df:77:90:c5:5f:4e:76:4a:6b:82:
         8b:00:69:e0:7c:22:23:90:39:4b:4a:e7:0f:89:80:22:07:a7:
         c7:25:42:fc:6a:5a:f0:75:d9:91:cc:f4:36:bb:2b:2a:29:75:
         ce:68:43:45:9e:aa:e5:85:57:15:7f:34:d6:9a:3b:f9:2a:2b:
         2f:cc:3e:21:56:a9:11:0e:05:93:1f:e0:88:ca:61:00:8b:23:
         04:ae:88:d8:a9:64:74:41:ff:6f:e6:8c:35:6a:5e:13:d7:cf:
         f2:a2:5f:6f:f1:67:2e:4a:c4:ed:3f:8c:94:a8:c1:76:4e:35:
         c6:c0:6f:18:d0:26:77:f4:13:f9:a9:66:a3:30:e9:80:75:57:
         06:23:f8:90:68:6d:77:34:5a:34:83:68:87:63:2e:a6:17:94:
         5d:d0:82:b6:ae:cd:00:01:e4:09:0a:cc:e8:b0:3a:5c:34:54:
         7a:f1:8d:ef:3e:47:4e:77:3d:a6:5a:c6:3f:f1:57:46:af:3f:
         fb:58:76:7d:51:d4:e8:0c:40:97:a2:fe:a8:57:67:4c:24:78:
         71:ed:7a:24:f4:7a:fe:72:9f:c1:67:ce:8a:f7:62:f9:e7:ad:
         4f:11:77:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WkrGBY0R7dgbHXgu0wz10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWZiNmU3NzAxOGM5MzU1YTUzODg1NmQ0ZWI5ZTUwNjk3
NWY1MzUwHhcNMjYwNzI1MDAwMDIzWhcNMjYwNzI2MDAwMDIzWjAzMTEwLwYDVQQD
Eyg0ODQxYzI5NzJmMTc2NjI2ZDBhNTU0MWU1Njc4OTJjYzY2ZWFiZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+GAONTeJLSOIg29aJR37NHteeOQ
xDAz4oGK+gql/wdIt1K1KmC0ST8slbC2opxhmjO4Ok5FTq/+dQDfbvG/qzOIVgX0
JLJkiSGgc4prH9cg7323kwKHYm9olANcBHKiFB556gy1wEznNwrYP61U6pBrw7N6
C27toc9rsMiDvo16pFqPEK976lWVYj3X6bvO6t0BdspnAkfNI5d2WabBYV5JHt+p
Y9Zb/APABI1HGKrlw0NNVQDT0iQaCM9UsAKHVW8XfCD//vvz/DND5UjG4RIcKPRv
uCA8oVdjkc3CB1owa41NukaYrMTSu47I7iPCk0w90IuufAHj0X2zHdNhJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhBwpcvF2Ym0KVUHlZ4ksxm6r+cMB8GA1UdIwQY
MBaAFBPvtudwGMk1WlOIVtTrnlBpdfU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS0tMjUzQVl5VFZhVTRoVzFPdWVVR2wxOVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85MWIyZDItZGZiOS00OGQ3LTg0MzYt
ZWJjNWI2NzgyM2M1LzEvRS0tMjUzQVl5VFZhVTRoVzFPdWVVR2wxOVRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85MWIyZDItZGZiOS00OGQ3LTg0MzYtZWJjNWI2NzgyM2M1
LzEvRS0tMjUzQVl5VFZhVTRoVzFPdWVVR2wxOVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDPD8h9E
l0f+eOUFr5ZmE46Bzi8ab6aJ45vfd5DFX052SmuCiwBp4HwiI5A5S0rnD4mAIgen
xyVC/Gpa8HXZkcz0NrsrKil1zmhDRZ6q5YVXFX801po7+SorL8w+IVapEQ4Fkx/g
iMphAIsjBK6I2KlkdEH/b+aMNWpeE9fP8qJfb/FnLkrE7T+MlKjBdk41xsBvGNAm
d/QT+almozDpgHVXBiP4kGhtdzRaNINoh2MupheUXdCCtq7NAAHkCQrM6LA6XDRU
evGN7z5HTnc9plrGP/FXRq8/+1h2fVHU6AxAl6L+qFdnTCR4ce16JPR6/nKfwWfO
ivdi+eetTxF3Ig==
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:40:47 2026 by rpki-client