Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File:                     4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier:          +MQ6ag9tzhrIECzFx2hPrup7ur00yt+OE0SFmEWvky0=
Subject key identifier:   D6:A7:9F:06:D8:EA:FF:D5:14:BF:E6:EA:DD:4B:A8:B1:F9:1D:BE:2C
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer:       /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial:       019F916D7E9341D3F7327ADAAC340928B584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number:          10D5
Signing time:             Fri 24 Jul 2026 00:01:39 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:39 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:39 +0000
Files and hashes:         1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: mIm2oAg5YL3htw9VrVO5TuD9u0lZ5MTzPQkWWOPYlSI=)
                          2: C2p4m5oAHBR4b9U98n94_vKEpDw.roa (hash: k7x5kSsiwndiFj3n5RLjj9QM21o5JvrjtmVJtRBC0sk=)
                          3: Rxb43DOTKVOmi4goggBKGgm61i4.asa (hash: //HomCPkgLqtqfTXCv3j8181AokJrm6q+KQdYo1h/Z8=)
                          4: fzfszWt-kJZcfbCPsxciTP6C4Dk.roa (hash: Xaxe3Hu1PY1WZ5xZc3wZj9w0NSOK2DQVeSn4qSIA58I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:7e:93:41:d3:f7:32:7a:da:ac:34:09:28:b5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
        Validity
            Not Before: Jul 24 00:01:39 2026 GMT
            Not After : Jul 25 00:01:39 2026 GMT
        Subject: CN=d6a79f06d8eaffd514bfe6eadd4ba8b1f91dbe2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fc:3d:92:ac:eb:90:e9:ad:97:e6:3f:af:4f:
                    b7:e6:91:da:d6:f0:e6:de:e9:9b:13:94:fa:f5:a6:
                    a9:33:be:78:5a:46:b7:f6:50:a6:04:ff:56:81:e9:
                    bf:9f:89:fd:fa:d1:30:9b:5c:47:29:dc:8f:08:be:
                    ea:df:b4:a4:b9:8b:80:d7:dd:c5:8a:c0:26:97:b2:
                    2b:ba:6e:07:68:b1:03:a6:83:76:7a:85:67:01:1d:
                    b9:b5:f4:c5:56:d8:17:80:51:22:f8:67:7d:59:f0:
                    36:88:82:a0:a6:d2:97:6d:40:12:d5:e5:76:0b:a7:
                    80:3f:9c:35:1e:17:55:09:7e:4e:ab:ca:53:20:b3:
                    84:11:f9:27:f5:3d:84:86:7d:b6:f7:df:c6:ba:f5:
                    e2:9e:11:9b:62:35:47:d0:20:5a:17:f1:e0:48:7b:
                    f2:ca:3d:50:c1:30:7a:76:50:bb:b5:a1:d5:28:c0:
                    59:dc:18:8c:9a:f9:93:4a:52:a2:dc:39:92:c3:6a:
                    77:2c:d0:bf:e7:53:69:b8:08:e9:7e:cb:34:0f:bb:
                    b0:84:b4:79:ae:f1:9b:45:86:69:05:ee:d4:38:e4:
                    ce:ac:1c:17:75:dd:36:f6:c9:c5:91:bd:da:9e:58:
                    c4:2b:9c:87:83:69:b9:7a:d9:c2:ee:10:65:46:1e:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A7:9F:06:D8:EA:FF:D5:14:BF:E6:EA:DD:4B:A8:B1:F9:1D:BE:2C
            X509v3 Authority Key Identifier:
                keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:02:32:70:6c:40:b6:91:eb:32:29:21:92:00:bf:4e:98:38:
         bf:35:c1:65:40:3e:af:8f:4b:08:dc:64:9a:f9:8b:e6:a1:ae:
         ee:09:f6:ef:41:cc:0b:c7:20:3b:56:c9:fb:f1:3b:b7:42:78:
         1a:2b:0e:31:9b:b4:cd:55:87:bc:4a:19:23:12:be:47:3e:45:
         69:77:78:14:3a:e3:4e:cb:fe:60:6d:ae:32:3e:1d:5f:64:16:
         79:5f:f8:7f:17:08:38:2a:76:b0:3b:58:2c:9d:3a:31:99:60:
         3d:0c:49:64:c2:48:30:08:c6:42:65:70:f3:94:e5:c4:7b:42:
         d0:1d:eb:36:10:14:cc:49:dc:e3:51:47:69:48:6b:3b:dc:b8:
         84:e7:96:e5:e5:32:18:4d:ce:3b:e5:a8:45:cd:41:d5:7e:61:
         9f:3e:d8:3f:f8:e0:70:d4:08:ab:f2:ce:e9:32:66:48:66:59:
         5e:9e:2d:5d:b4:25:5e:1e:97:13:d2:7d:41:03:03:4a:32:72:
         ca:86:14:2e:53:72:1d:88:72:52:8e:8b:78:5f:ac:e7:46:f6:
         b0:d7:02:42:ac:56:42:b3:40:b5:04:22:b8:40:a4:b4:a7:28:
         c3:a0:ae:6a:94:79:3b:43:35:83:cc:8b:80:9e:73:16:27:bc:
         aa:3e:70:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbX6TQdP3MnrarDQJKLWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0
MmY1MGQwHhcNMjYwNzI0MDAwMTM5WhcNMjYwNzI1MDAwMTM5WjAzMTEwLwYDVQQD
EyhkNmE3OWYwNmQ4ZWFmZmQ1MTRiZmU2ZWFkZDRiYThiMWY5MWRiZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/w9kqzrkOmtl+Y/r0+35pHa1vDm
3umbE5T69aapM754Wka39lCmBP9Wgem/n4n9+tEwm1xHKdyPCL7q37SkuYuA193F
isAml7Irum4HaLEDpoN2eoVnAR25tfTFVtgXgFEi+Gd9WfA2iIKgptKXbUAS1eV2
C6eAP5w1HhdVCX5Oq8pTILOEEfkn9T2Ehn2299/GuvXinhGbYjVH0CBaF/HgSHvy
yj1QwTB6dlC7taHVKMBZ3BiMmvmTSlKi3DmSw2p3LNC/51NpuAjpfss0D7uwhLR5
rvGbRYZpBe7UOOTOrBwXdd029snFkb3anljEK5yHg2m5etnC7hBlRh5Y4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNannwbY6v/VFL/m6t1LqLH5Hb4sMB8GA1UdIwQY
MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt
MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl
LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAIycGxA
tpHrMikhkgC/Tpg4vzXBZUA+r49LCNxkmvmL5qGu7gn270HMC8cgO1bJ+/E7t0J4
GisOMZu0zVWHvEoZIxK+Rz5FaXd4FDrjTsv+YG2uMj4dX2QWeV/4fxcIOCp2sDtY
LJ06MZlgPQxJZMJIMAjGQmVw85TlxHtC0B3rNhAUzEnc41FHaUhrO9y4hOeW5eUy
GE3OO+WoRc1B1X5hnz7YP/jgcNQIq/LO6TJmSGZZXp4tXbQlXh6XE9J9QQMDSjJy
yoYULlNyHYhyUo6LeF+s50b2sNcCQqxWQrNAtQQiuECktKcow6CuapR5O0M1g8yL
gJ5zFie8qj5wmw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:50 2026 by rpki-client