Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
File:                     4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json)
Hash identifier:          KrgroUU8V9jkM5PsW6mdJ2uID0oOJJ2dYn+qtPhNm/8=
Subject key identifier:   71:CC:31:19:AB:05:1C:31:8E:D3:B6:E1:C3:24:27:8F:4F:A8:2B:3D
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Certificate issuer:       /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial:       019F916D50D38856334001B2338FC6F2BFDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
Manifest number:          08C3
Signing time:             Fri 24 Jul 2026 00:01:28 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:28 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:28 +0000
Files and hashes:         1: 0SKx4uHIUqJCwzbuDVDzDNGPsb8.roa (hash: mtyUt15yu+f0GpFvD8FnDUSV4lO4SlvX/nIEW6w5cbU=)
                          2: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: J4GxH1YODrjXfX63fJn7fJDYAXrT552Y3/ye7gYLUBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:50:d3:88:56:33:40:01:b2:33:8f:c6:f2:bf:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
        Validity
            Not Before: Jul 24 00:01:28 2026 GMT
            Not After : Jul 25 00:01:28 2026 GMT
        Subject: CN=71cc3119ab051c318ed3b6e1c324278f4fa82b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:45:e3:b7:56:0c:a7:67:97:d6:87:5b:b9:
                    c4:8a:14:e6:1f:7d:78:c5:67:23:bd:30:6e:32:e1:
                    1a:80:27:1d:3a:88:56:d2:a2:72:78:93:d1:52:3d:
                    a1:d0:a2:41:54:5a:28:e9:58:eb:4b:ad:71:cb:63:
                    07:b4:0e:72:ce:bd:d9:3a:29:bd:48:7f:86:9c:2c:
                    01:90:35:78:1a:77:35:34:97:61:ce:52:00:e8:99:
                    6d:41:54:10:1f:25:b4:a1:de:b2:2d:64:6c:86:fa:
                    a3:e7:66:40:97:95:14:97:37:36:fb:29:14:8a:2c:
                    1c:65:4d:08:4d:89:52:37:0e:7e:07:25:06:73:a3:
                    75:66:63:40:73:be:1b:52:17:ba:5d:b6:ab:90:d7:
                    1c:e3:76:65:40:3d:f8:13:fe:64:0c:7b:eb:f7:28:
                    93:49:2a:df:14:e3:b8:a6:8a:9e:df:8c:ed:03:c8:
                    ab:48:48:93:16:04:77:c3:10:78:ab:c9:cd:8a:6a:
                    22:f4:d3:14:e0:24:db:1a:08:c5:db:e9:6b:eb:c2:
                    a9:40:da:dd:dc:5b:8d:42:66:6a:f2:4e:ad:17:00:
                    fb:c1:28:3b:85:df:9b:ef:ef:75:a5:d7:0e:84:76:
                    83:66:58:04:d3:74:80:5e:83:42:7b:09:fc:6f:fa:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CC:31:19:AB:05:1C:31:8E:D3:B6:E1:C3:24:27:8F:4F:A8:2B:3D
            X509v3 Authority Key Identifier:
                keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ee:c3:24:36:4d:f4:a7:26:1c:72:64:c9:a1:3f:7e:fa:e0:
         77:74:45:3f:c4:4d:96:f5:2a:6c:7f:91:ac:c3:ae:58:97:e6:
         fa:4d:2c:e1:4f:3b:1d:52:e7:56:cd:76:f0:63:a0:cc:ef:b7:
         84:20:d5:68:e1:04:85:2a:eb:ac:1d:1d:51:92:a2:76:a3:30:
         73:2f:af:73:10:35:22:73:56:6d:06:9e:f4:0d:5b:5b:21:a9:
         eb:f1:23:8f:aa:44:7b:21:39:39:63:36:3d:6c:ba:09:ef:5a:
         5f:7d:85:2e:2c:b1:23:81:e8:81:ff:2d:bd:78:fb:0e:2e:ac:
         30:f7:0b:80:b1:a2:f1:17:3b:61:f6:22:96:ba:e1:ab:9c:42:
         f4:cf:f0:7b:19:64:80:34:4a:6c:8a:f5:71:cc:88:53:e9:09:
         19:b4:7c:0e:13:e3:d6:44:99:ce:2d:62:18:96:28:b3:54:26:
         b6:58:63:f3:6d:37:12:43:5a:46:9a:ef:fc:96:ba:cb:29:28:
         43:27:45:84:21:30:fd:cc:c7:75:00:66:7f:31:b2:bc:c2:c9:
         5a:26:36:cd:c2:6f:0c:53:3d:86:02:ba:61:d5:e4:72:93:4b:
         40:a6:2f:15:2f:fc:c8:a7:7e:6d:a4:d6:3f:0a:ad:e0:74:7f:
         bf:ef:63:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbVDTiFYzQAGyM4/G8r/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjUwOTY3MmI5ZDk5OGI0NjQ5Y2MzNzZhODI5ODc5ZTZm
ZWFjYTcwHhcNMjYwNzI0MDAwMTI4WhcNMjYwNzI1MDAwMTI4WjAzMTEwLwYDVQQD
Eyg3MWNjMzExOWFiMDUxYzMxOGVkM2I2ZTFjMzI0Mjc4ZjRmYTgyYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mFF47dWDKdnl9aHW7nEihTmH314
xWcjvTBuMuEagCcdOohW0qJyeJPRUj2h0KJBVFoo6VjrS61xy2MHtA5yzr3ZOim9
SH+GnCwBkDV4Gnc1NJdhzlIA6JltQVQQHyW0od6yLWRshvqj52ZAl5UUlzc2+ykU
iiwcZU0ITYlSNw5+ByUGc6N1ZmNAc74bUhe6XbarkNcc43ZlQD34E/5kDHvr9yiT
SSrfFOO4poqe34ztA8irSEiTFgR3wxB4q8nNimoi9NMU4CTbGgjF2+lr68KpQNrd
3FuNQmZq8k6tFwD7wSg7hd+b7+91pdcOhHaDZlgE03SAXoNCewn8b/rSYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHMMRmrBRwxjtO24cMkJ49PqCs9MB8GA1UdIwQY
MBaAFOG1CWcrnZmLRknMN2qCmHnm/qynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81NDZhNTUtZGRhYS00MzQxLWI4Zjkt
M2VjNTIyNzcxZjQwLzEvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81NDZhNTUtZGRhYS00MzQxLWI4ZjktM2VjNTIyNzcxZjQw
LzEvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALu7DJDZN
9KcmHHJkyaE/fvrgd3RFP8RNlvUqbH+RrMOuWJfm+k0s4U87HVLnVs128GOgzO+3
hCDVaOEEhSrrrB0dUZKidqMwcy+vcxA1InNWbQae9A1bWyGp6/Ejj6pEeyE5OWM2
PWy6Ce9aX32FLiyxI4Hogf8tvXj7Di6sMPcLgLGi8Rc7YfYilrrhq5xC9M/wexlk
gDRKbIr1ccyIU+kJGbR8DhPj1kSZzi1iGJYos1Qmtlhj8203EkNaRprv/Ja6yyko
QydFhCEw/czHdQBmfzGyvMLJWiY2zcJvDFM9hgK6YdXkcpNLQKYvFS/8yKd+baTW
Pwqt4HR/v+9jOA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:30 2026 by rpki-client