Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File:                     4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier:          xt1nnXBt1qMjRPg54SLPru9q7VPU0+0i27lJSMheFOo=
Subject key identifier:   F6:1B:24:7E:D0:1A:04:A8:25:AA:42:6C:CE:F6:75:A3:C7:93:B6:A1
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer:       /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial:       019F91A441575905F79593F5EF1B3DF7F944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number:          18C1
Signing time:             Fri 24 Jul 2026 01:01:28 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:28 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:28 +0000
Files and hashes:         1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: dIiQx6lLfpV+AkBJF2YsAWJFw65JjZM+fV8dggMYIV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:41:57:59:05:f7:95:93:f5:ef:1b:3d:f7:f9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
        Validity
            Not Before: Jul 24 01:01:28 2026 GMT
            Not After : Jul 25 01:01:28 2026 GMT
        Subject: CN=f61b247ed01a04a825aa426ccef675a3c793b6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:2c:93:8b:a7:63:05:95:f7:2e:62:97:49:
                    02:d5:e8:2a:5c:06:f6:b1:ef:11:56:42:89:62:5c:
                    d1:a4:5d:1d:6c:ec:23:47:86:dd:44:7c:7c:8f:98:
                    2f:ed:50:56:31:9b:2f:37:0c:1e:b2:55:7e:d9:09:
                    be:10:48:e5:0b:09:9d:de:d3:e5:8d:4e:fb:9c:1d:
                    6c:af:f7:1e:61:23:b9:5a:a5:05:7a:4d:5e:35:f5:
                    28:66:ff:61:f6:8b:6d:62:d1:f2:8b:c7:2a:83:fc:
                    eb:e9:29:48:bc:11:f3:95:a0:a8:28:4a:ae:a8:ed:
                    cd:e2:85:84:e5:97:c1:99:23:5a:05:fe:a3:c8:5b:
                    47:1b:e5:6b:ec:a3:a5:7d:9e:60:d4:d0:43:3e:1b:
                    bb:0f:f6:6f:2b:1d:29:f8:a0:32:24:19:84:76:d4:
                    12:6e:a3:7e:0a:d8:30:3d:58:1c:57:0c:96:ce:29:
                    6a:02:9a:11:cf:bf:c5:b2:e2:32:d1:19:3c:1d:54:
                    80:c6:90:22:80:f5:45:e3:37:f7:f3:62:f1:07:f8:
                    e0:bb:db:79:4a:82:ab:c9:73:bf:5e:e0:50:6a:2c:
                    83:fc:ba:92:be:4d:67:2d:b4:48:e5:11:da:54:53:
                    62:28:1e:d7:07:f0:0e:d0:e9:c4:11:46:47:55:d6:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1B:24:7E:D0:1A:04:A8:25:AA:42:6C:CE:F6:75:A3:C7:93:B6:A1
            X509v3 Authority Key Identifier:
                keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:08:6d:8c:00:d2:f0:0f:b5:17:af:92:11:d4:4b:54:66:b0:
         ec:ae:a3:1b:8e:15:17:26:be:47:c0:f4:30:a3:42:4f:6e:9b:
         67:48:cf:a5:8e:e0:7d:57:8c:b1:2b:d4:ac:d3:74:4e:14:36:
         0f:8d:48:8b:03:a5:6a:15:a6:9f:3c:b4:66:c3:fb:db:e4:32:
         c6:46:3b:13:bb:25:ea:1c:7c:12:e7:65:98:9a:e1:78:e8:55:
         d6:77:26:74:4c:5a:b7:54:7c:2f:b8:df:ac:76:16:ef:c2:13:
         1b:8e:a7:74:51:7d:c3:54:f9:71:d6:ca:f3:7c:6d:a2:23:e4:
         d3:33:3d:ad:0e:2e:e8:bc:83:d2:3c:9a:c1:42:f1:11:ca:f1:
         c5:80:db:93:81:88:2a:80:a9:f3:7c:db:41:a7:c5:4e:f5:ff:
         78:f5:8e:22:47:7a:4a:bb:61:5c:61:31:ea:d4:ca:ae:5d:f7:
         b4:d9:3e:dd:30:60:d2:13:4c:62:52:b2:6e:52:74:6e:53:c7:
         e9:14:cd:9e:66:57:1b:c9:c3:1d:90:f4:42:15:27:69:de:04:
         e3:b3:b7:1e:65:1b:88:16:03:f6:42:1c:e5:9b:1a:d6:f5:a9:
         57:b2:21:91:f2:48:fa:df:0a:ce:75:74:2d:69:3f:5b:06:80:
         5e:c7:3c:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpEFXWQX3lZP17xs99/lEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTUwM2IxMWI5OGE1ZjU4ZDRmNTVlZmFlYTNhZDJiMjFh
YWVjODMwHhcNMjYwNzI0MDEwMTI4WhcNMjYwNzI1MDEwMTI4WjAzMTEwLwYDVQQD
EyhmNjFiMjQ3ZWQwMWEwNGE4MjVhYTQyNmNjZWY2NzVhM2M3OTNiNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGIsk4unYwWV9y5il0kC1egqXAb2
se8RVkKJYlzRpF0dbOwjR4bdRHx8j5gv7VBWMZsvNwweslV+2Qm+EEjlCwmd3tPl
jU77nB1sr/ceYSO5WqUFek1eNfUoZv9h9ottYtHyi8cqg/zr6SlIvBHzlaCoKEqu
qO3N4oWE5ZfBmSNaBf6jyFtHG+Vr7KOlfZ5g1NBDPhu7D/ZvKx0p+KAyJBmEdtQS
bqN+CtgwPVgcVwyWzilqApoRz7/FsuIy0Rk8HVSAxpAigPVF4zf382LxB/jgu9t5
SoKryXO/XuBQaiyD/LqSvk1nLbRI5RHaVFNiKB7XB/AO0OnEEUZHVdbwYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYbJH7QGgSoJapCbM72daPHk7ahMB8GA1UdIwQY
MBaAFOFVA7EbmKX1jU9V766jrSshquyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYt
MzVhNWEyNWYxNDAxLzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYtMzVhNWEyNWYxNDAx
LzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaghtjADS
8A+1F6+SEdRLVGaw7K6jG44VFya+R8D0MKNCT26bZ0jPpY7gfVeMsSvUrNN0ThQ2
D41IiwOlahWmnzy0ZsP72+QyxkY7E7sl6hx8EudlmJrheOhV1ncmdExat1R8L7jf
rHYW78ITG46ndFF9w1T5cdbK83xtoiPk0zM9rQ4u6LyD0jyawULxEcrxxYDbk4GI
KoCp83zbQafFTvX/ePWOIkd6SrthXGEx6tTKrl33tNk+3TBg0hNMYlKyblJ0blPH
6RTNnmZXG8nDHZD0QhUnad4E47O3HmUbiBYD9kIc5Zsa1vWpV7IhkfJI+t8KznV0
LWk/WwaAXsc87w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:31 2026 by rpki-client