Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File:                     CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier:          6HPHooy9hnghiEpYQeSN4GSUz49CZ5G82Qow4dUd8rk=
Subject key identifier:   B4:B4:BB:7E:02:7C:44:7C:CB:7E:D1:AC:BC:28:A0:D9:51:C0:AB:71
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer:       /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial:       019F8F7E9E88D26048B024026E23D31FE68D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number:          051E
Signing time:             Thu 23 Jul 2026 15:01:07 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:07 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:07 +0000
Files and hashes:         1: 2OzQAiJ84eR942-HL-mCfiNn304.roa (hash: DoCu0JYoFviUnpmkl9K5MvFhWvoS3a+KpBFHFpRP62c=)
                          2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: Xq68ymxOgJQl5EG5Cwg3q6QRRRRbUzfN23cjSZkpqig=)
                          3: frdEDuVlBLc1KIouDp6myM9rtIA.roa (hash: G223mpKSbVeBYMKKTw6KE3IJvyTw3v+DtTphKZ5P+JQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:9e:88:d2:60:48:b0:24:02:6e:23:d3:1f:e6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
        Validity
            Not Before: Jul 23 15:01:07 2026 GMT
            Not After : Jul 24 15:01:07 2026 GMT
        Subject: CN=b4b4bb7e027c447ccb7ed1acbc28a0d951c0ab71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:dd:42:7f:fb:84:68:8e:97:d4:dd:9b:cc:
                    98:a8:a4:7f:7d:4a:43:ad:7e:5c:ea:d2:fe:c5:7e:
                    7d:a7:21:d9:89:1a:28:ff:fa:8b:cd:ee:3b:d8:e2:
                    fd:a2:41:78:40:b0:41:02:c0:ae:39:38:ae:c6:75:
                    06:75:d4:dc:b8:cf:d7:88:dd:ea:0b:57:4e:f4:88:
                    72:b7:28:05:11:1f:73:db:3b:67:9f:17:3b:8f:4a:
                    fe:47:c2:fb:1a:70:93:3a:63:bd:1a:3b:5b:e1:dd:
                    2c:1f:ef:e8:6e:b7:01:aa:2e:11:ee:4c:e7:af:51:
                    04:28:96:a6:05:27:4c:78:50:14:b7:29:d3:82:04:
                    ae:81:93:58:85:d4:9d:3f:ef:a6:e8:a5:b8:d5:0f:
                    f0:b5:06:85:18:07:ca:3d:21:4f:40:b2:5b:42:6d:
                    42:cb:6c:bf:86:9c:ea:7a:06:8b:2d:ba:42:9d:79:
                    ca:6b:53:2d:9b:c7:88:79:21:db:c9:d7:31:3b:53:
                    0e:e4:7a:d9:00:f0:c5:9e:1d:09:67:c8:1c:8a:02:
                    57:6c:30:08:9f:83:a6:77:81:4f:a1:0e:e0:6c:46:
                    16:03:62:26:c8:63:c5:8e:ec:bb:e0:3d:6b:32:41:
                    52:18:55:b6:c8:47:b8:55:38:d8:24:01:bb:c8:32:
                    af:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B4:BB:7E:02:7C:44:7C:CB:7E:D1:AC:BC:28:A0:D9:51:C0:AB:71
            X509v3 Authority Key Identifier:
                keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:80:0e:df:6a:2a:29:32:70:38:42:87:09:ea:42:22:5c:8a:
         c9:4e:2d:9b:49:8d:7c:9e:df:e4:1f:3c:a0:b3:a8:22:eb:cd:
         22:ef:c2:22:ef:89:01:29:85:d4:e0:8d:0f:7f:36:6d:aa:7e:
         67:84:3a:41:69:23:40:29:ff:58:42:5c:27:43:fc:e0:93:b6:
         bd:c7:84:66:3b:d1:6b:73:1f:cc:7f:fd:a5:bc:17:31:f5:d5:
         ce:46:cb:93:05:08:0f:80:87:36:4a:3a:72:7c:92:b0:4a:c8:
         20:3b:7d:3f:1e:82:e7:17:f0:16:16:00:da:99:05:70:ff:e8:
         56:c9:0b:17:99:19:5a:a4:59:a8:c2:3b:33:da:4d:80:15:5e:
         81:52:b4:0e:2a:91:a5:ac:0e:5a:51:38:00:9f:ae:6a:d4:df:
         ba:fa:b2:e4:e8:9d:84:7a:39:96:45:c0:92:7f:f4:10:dc:97:
         19:a9:67:b8:56:e5:a0:23:c6:a4:11:90:26:87:51:de:5e:ef:
         ce:29:c7:9a:28:1c:a2:bc:e0:40:6f:85:52:81:f0:dc:48:b7:
         9d:7b:7b:19:77:87:e1:da:29:06:6b:62:92:28:4b:f8:04:c6:
         e9:db:3f:13:95:ec:e2:31:20:5a:af:0c:07:28:f5:c0:bf:e0:
         dc:4a:2b:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfp6I0mBIsCQCbiPTH+aNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzU3ZjViZWUxODVmYzYxMTU3MDg2ZDU5ODU0ODUzNjli
MmFjZDIwHhcNMjYwNzIzMTUwMTA3WhcNMjYwNzI0MTUwMTA3WjAzMTEwLwYDVQQD
EyhiNGI0YmI3ZTAyN2M0NDdjY2I3ZWQxYWNiYzI4YTBkOTUxYzBhYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHvdQn/7hGiOl9Tdm8yYqKR/fUpD
rX5c6tL+xX59pyHZiRoo//qLze472OL9okF4QLBBAsCuOTiuxnUGddTcuM/XiN3q
C1dO9IhytygFER9z2ztnnxc7j0r+R8L7GnCTOmO9Gjtb4d0sH+/obrcBqi4R7kzn
r1EEKJamBSdMeFAUtynTggSugZNYhdSdP++m6KW41Q/wtQaFGAfKPSFPQLJbQm1C
y2y/hpzqegaLLbpCnXnKa1Mtm8eIeSHbydcxO1MO5HrZAPDFnh0JZ8gcigJXbDAI
n4Omd4FPoQ7gbEYWA2ImyGPFjuy74D1rMkFSGFW2yEe4VTjYJAG7yDKvFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS0u34CfER8y37RrLwooNlRwKtxMB8GA1UdIwQY
MBaAFAg1f1vuGF/GEVcIbVmFSFNpsqzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQt
MmY0OWVmYzVjY2IwLzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQtMmY0OWVmYzVjY2Iw
LzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoAO32oq
KTJwOEKHCepCIlyKyU4tm0mNfJ7f5B88oLOoIuvNIu/CIu+JASmF1OCND382bap+
Z4Q6QWkjQCn/WEJcJ0P84JO2vceEZjvRa3MfzH/9pbwXMfXVzkbLkwUID4CHNko6
cnySsErIIDt9Px6C5xfwFhYA2pkFcP/oVskLF5kZWqRZqMI7M9pNgBVegVK0DiqR
pawOWlE4AJ+uatTfuvqy5OidhHo5lkXAkn/0ENyXGalnuFbloCPGpBGQJodR3l7v
zinHmigcorzgQG+FUoHw3Ei3nXt7GXeH4dopBmtikihL+ATG6ds/E5Xs4jEgWq8M
Byj1wL/g3EornA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:20 2026 by rpki-client