Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File:                     ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier:          hNIGc4gu4mi5bq5qwvR+ldJx2zyvrm4nI2zyVrhVpiA=
Subject key identifier:   41:4B:88:4A:01:D4:82:A9:2C:87:37:D5:50:13:9D:70:5B:58:A3:ED
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer:       /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial:       019F9211816B32B097D780A79B62C3C9570E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number:          079F
Signing time:             Fri 24 Jul 2026 03:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:48 +0000
Files and hashes:         1: K3S0XoV9uTdcPwSeYNQbNAsf14Y.roa (hash: loHuoVuquEI4tAT3rW7VS3mainPoNo4WAoOqCbKbYJk=)
                          2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: jg4T/0Tb3vyYI0l34h4fO3uBgWR2U2tOkFDyiku9Spk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:81:6b:32:b0:97:d7:80:a7:9b:62:c3:c9:57:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
        Validity
            Not Before: Jul 24 03:00:48 2026 GMT
            Not After : Jul 25 03:00:48 2026 GMT
        Subject: CN=414b884a01d482a92c8737d550139d705b58a3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cf:5e:45:e0:91:22:25:b7:42:50:81:03:f8:
                    74:3e:1e:b6:35:75:29:62:6a:b4:e0:4d:41:75:81:
                    74:0a:69:25:7f:2e:27:40:83:db:cc:79:a0:5c:97:
                    07:3a:f9:e8:81:1e:e3:54:a6:24:c0:13:0b:4e:de:
                    08:fa:a8:6b:8d:3b:16:38:d1:44:a1:33:80:13:5a:
                    af:27:b2:2f:d7:ef:80:a1:a1:8b:e5:f0:46:3f:53:
                    d6:87:40:1f:84:74:df:5f:85:c0:e3:d9:b0:33:08:
                    04:71:17:96:bd:8a:d8:63:f9:71:0b:96:ba:bc:18:
                    3b:b5:eb:44:f3:2b:45:0c:ca:5c:77:83:c1:e4:d8:
                    a6:76:50:13:62:df:18:25:38:07:79:26:b9:d3:c4:
                    93:72:89:f8:b1:00:b3:72:64:95:6f:1e:3a:d0:21:
                    b5:f4:60:92:a4:7c:02:d8:58:44:99:d5:2f:c8:60:
                    d9:2f:92:95:20:b0:dd:49:8a:50:16:3f:73:41:42:
                    28:e2:29:eb:e5:e8:ee:31:57:7a:73:9e:9d:77:ae:
                    81:63:8b:0b:ed:d4:3e:33:e6:f5:d4:51:5e:c0:78:
                    dc:f8:50:ef:2c:2b:6e:72:fa:1c:9f:05:12:68:40:
                    41:49:16:e1:2d:de:8d:a5:49:99:f6:ae:01:0d:ed:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4B:88:4A:01:D4:82:A9:2C:87:37:D5:50:13:9D:70:5B:58:A3:ED
            X509v3 Authority Key Identifier:
                keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:68:b2:7d:72:f8:d8:c7:a6:aa:cc:c5:02:a4:1c:39:60:
         e0:8f:61:a4:51:78:f3:16:79:e1:a9:ef:1e:84:92:9c:d2:04:
         a4:4d:63:62:0e:4d:30:1f:62:70:96:a4:8e:96:83:c3:9c:93:
         82:c6:06:6b:fc:8b:1c:05:b1:b6:2d:fb:66:3a:0c:9f:ba:9c:
         35:99:d1:65:e6:e7:61:90:e9:7d:f5:5d:74:59:c0:e9:14:4d:
         be:e8:22:22:be:56:98:60:5d:8d:9f:b2:5a:e8:b5:d9:5d:1c:
         3a:ff:07:3c:d7:ac:78:c1:cd:16:bb:ea:bd:39:a1:12:f9:71:
         b3:18:a2:50:81:17:12:33:f6:c7:50:fc:de:48:e3:32:65:ef:
         e2:88:20:75:34:39:e1:46:73:a3:13:97:5b:1f:f2:2d:3f:f4:
         cd:8a:bb:0f:1e:85:cc:59:f1:21:36:2d:6c:cd:fe:34:10:21:
         aa:86:f6:62:96:9f:7f:e8:8c:31:5c:c5:31:f7:b3:a4:69:56:
         1b:ce:9d:4c:b1:19:6c:ae:94:2a:d7:1c:91:57:c3:f4:0d:38:
         6f:f1:e7:84:f6:4a:99:93:aa:29:b5:0f:40:e6:09:67:1d:6e:
         48:96:96:e6:dd:1e:b5:d2:2b:db:26:4a:40:cc:08:b1:2a:ef:
         39:88:7f:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEYFrMrCX14Cnm2LDyVcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2N2UwZmU3M2VlZTc1OWI3NzFmYjcyMDIzYzU0YTc5YzBh
NjE3MTcwHhcNMjYwNzI0MDMwMDQ4WhcNMjYwNzI1MDMwMDQ4WjAzMTEwLwYDVQQD
Eyg0MTRiODg0YTAxZDQ4MmE5MmM4NzM3ZDU1MDEzOWQ3MDViNThhM2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c9eReCRIiW3QlCBA/h0Ph62NXUp
Ymq04E1BdYF0Cmklfy4nQIPbzHmgXJcHOvnogR7jVKYkwBMLTt4I+qhrjTsWONFE
oTOAE1qvJ7Iv1++AoaGL5fBGP1PWh0AfhHTfX4XA49mwMwgEcReWvYrYY/lxC5a6
vBg7tetE8ytFDMpcd4PB5NimdlATYt8YJTgHeSa508STcon4sQCzcmSVbx460CG1
9GCSpHwC2FhEmdUvyGDZL5KVILDdSYpQFj9zQUIo4inr5ejuMVd6c56dd66BY4sL
7dQ+M+b11FFewHjc+FDvLCtucvocnwUSaEBBSRbhLd6NpUmZ9q4BDe3CDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFLiEoB1IKpLIc31VATnXBbWKPtMB8GA1UdIwQY
MBaAFJZ+D+c+7nWbdx+3ICPFSnnAphcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEt
N2FlOTNmZDJhZDA0LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEtN2FlOTNmZDJhZDA0
LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNBosn1y
+NjHpqrMxQKkHDlg4I9hpFF48xZ54anvHoSSnNIEpE1jYg5NMB9icJakjpaDw5yT
gsYGa/yLHAWxti37ZjoMn7qcNZnRZebnYZDpffVddFnA6RRNvugiIr5WmGBdjZ+y
Wui12V0cOv8HPNeseMHNFrvqvTmhEvlxsxiiUIEXEjP2x1D83kjjMmXv4oggdTQ5
4UZzoxOXWx/yLT/0zYq7Dx6FzFnxITYtbM3+NBAhqob2Ypaff+iMMVzFMfezpGlW
G86dTLEZbK6UKtcckVfD9A04b/HnhPZKmZOqKbUPQOYJZx1uSJaW5t0etdIr2yZK
QMwIsSrvOYh/0A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:01 2026 by rpki-client