Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
File:                     E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json)
Hash identifier:          VdBG5hnxHKIQOFN28tIyIxEGJ3xjvu3YUsNGuO4b8l8=
Subject key identifier:   CF:31:2F:67:00:52:AE:ED:AC:30:DC:B6:91:C2:B6:00:92:C3:76:28
Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Certificate issuer:       /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Certificate serial:       019F9135E3DECBAD07FAD433FD5AA1D68B68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
Manifest number:          1958
Signing time:             Thu 23 Jul 2026 23:00:55 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:55 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:55 +0000
Files and hashes:         1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: D5BD5ujiuhhyifIGNXpBdXCVmFSMzuf/uEKxs62Qk2Y=)
                          2: lTILXF_5UJEPBougJpxtW4AUOSc.roa (hash: rxyPJTpQ/gl87k+22vSPyFPaWDffDg7c8Gqk+kLh1/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:e3:de:cb:ad:07:fa:d4:33:fd:5a:a1:d6:8b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
        Validity
            Not Before: Jul 23 23:00:55 2026 GMT
            Not After : Jul 24 23:00:55 2026 GMT
        Subject: CN=cf312f670052aeedac30dcb691c2b60092c37628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:b9:82:a9:c2:9e:09:d0:3c:22:84:a4:b4:
                    6c:2a:93:f5:16:5e:64:8e:79:75:ef:28:e2:8d:08:
                    db:e5:a6:0b:35:d3:24:86:2b:d3:43:78:94:0e:8a:
                    4a:bd:6c:11:c4:74:e8:ec:b5:f8:b2:1e:43:fd:80:
                    8f:4b:74:d7:af:e2:78:d2:0b:c1:74:81:d4:b4:76:
                    a0:24:5b:b6:0b:7b:44:d6:76:30:b5:b1:9e:16:e5:
                    b5:ea:8d:e3:a4:57:f7:97:02:4e:ce:dc:57:a0:48:
                    60:15:95:c9:7b:a1:e8:e3:5c:20:92:81:c1:b1:43:
                    9b:ff:8d:3a:9b:11:f1:f0:92:fe:52:92:9d:c2:58:
                    49:99:b5:c1:4a:5d:c1:b4:e8:54:48:c9:93:95:83:
                    50:68:33:f0:1a:e4:d6:b6:8e:05:3b:a4:38:4e:45:
                    eb:a4:ee:a2:85:be:9e:40:78:0c:17:30:e3:1c:f3:
                    8d:d0:f4:c1:18:67:bf:32:11:42:1f:c9:5d:ca:4b:
                    b9:ef:5d:6f:48:9e:54:fc:b7:55:f1:90:a6:57:fb:
                    d9:d2:d6:8d:81:e5:4a:2b:42:b2:46:f4:93:4a:a0:
                    9a:15:c4:73:a2:5c:5b:18:db:28:57:f2:45:00:8d:
                    2d:08:21:f0:df:83:90:e9:2f:41:d3:c4:b9:dd:8b:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:31:2F:67:00:52:AE:ED:AC:30:DC:B6:91:C2:B6:00:92:C3:76:28
            X509v3 Authority Key Identifier:
                keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3e:56:8a:63:f4:5e:ca:f5:1e:ce:8b:2d:50:47:dd:ee:9f:
         9c:f6:1a:99:b5:d6:52:5d:3e:87:13:02:19:56:e7:7c:87:da:
         58:39:d8:75:1f:d2:c3:37:65:71:9c:50:e8:69:e6:3b:1b:59:
         f5:2b:5d:63:1f:9c:d2:ee:08:96:33:90:7a:c7:b2:2d:7f:c4:
         79:f8:5b:30:f9:ac:19:2f:6f:dc:1e:2d:aa:c0:c5:43:5f:62:
         c5:1a:ce:69:41:1d:80:34:1c:92:5e:2f:ce:b5:3d:10:ae:02:
         b6:dd:a1:94:17:94:f4:3d:f6:06:68:74:ec:35:bb:b7:ed:25:
         cb:79:f1:b4:d3:93:aa:88:6e:e3:e0:09:f4:72:a8:62:21:4b:
         1d:e9:01:0f:7a:59:1e:8c:28:b0:91:c8:9a:bd:41:ee:27:d5:
         23:d2:b7:1f:86:c4:26:7c:48:e8:3b:ec:58:a5:ac:a4:b2:6a:
         a4:72:57:d4:20:ed:33:44:19:31:3f:f9:d4:ca:a6:56:5b:ac:
         ef:cd:b6:34:a9:8b:49:29:c7:dc:b5:4e:2f:77:7c:72:18:ce:
         8d:e5:22:9c:87:55:21:25:33:d9:b5:dd:9a:4a:f2:ef:b3:75:
         93:bf:da:cb:2e:1e:8a:9e:cb:40:65:16:a8:22:d9:3d:94:d2:
         f7:72:59:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNePey60H+tQz/Vqh1otoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNTE1NWNlYmY5ZGUwY2I3M2U0MGEwZmEwYTFhYjRkY2Yx
ZDA5Y2EwHhcNMjYwNzIzMjMwMDU1WhcNMjYwNzI0MjMwMDU1WjAzMTEwLwYDVQQD
EyhjZjMxMmY2NzAwNTJhZWVkYWMzMGRjYjY5MWMyYjYwMDkyYzM3NjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBe5gqnCngnQPCKEpLRsKpP1Fl5k
jnl17yjijQjb5aYLNdMkhivTQ3iUDopKvWwRxHTo7LX4sh5D/YCPS3TXr+J40gvB
dIHUtHagJFu2C3tE1nYwtbGeFuW16o3jpFf3lwJOztxXoEhgFZXJe6Ho41wgkoHB
sUOb/406mxHx8JL+UpKdwlhJmbXBSl3BtOhUSMmTlYNQaDPwGuTWto4FO6Q4TkXr
pO6ihb6eQHgMFzDjHPON0PTBGGe/MhFCH8ldyku5711vSJ5U/LdV8ZCmV/vZ0taN
geVKK0KyRvSTSqCaFcRzolxbGNsoV/JFAI0tCCHw34OQ6S9B08S53YuG2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8xL2cAUq7trDDctpHCtgCSw3YoMB8GA1UdIwQY
MBaAFBNRVc6/neDLc+QKD6Chq03PHQnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgt
MzhmNWQ5NjMyMjJjLzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgtMzhmNWQ5NjMyMjJj
LzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABz5WimP0
Xsr1Hs6LLVBH3e6fnPYambXWUl0+hxMCGVbnfIfaWDnYdR/SwzdlcZxQ6GnmOxtZ
9StdYx+c0u4IljOQeseyLX/EefhbMPmsGS9v3B4tqsDFQ19ixRrOaUEdgDQckl4v
zrU9EK4Ctt2hlBeU9D32Bmh07DW7t+0ly3nxtNOTqohu4+AJ9HKoYiFLHekBD3pZ
HowosJHImr1B7ifVI9K3H4bEJnxI6DvsWKWspLJqpHJX1CDtM0QZMT/51MqmVlus
7822NKmLSSnH3LVOL3d8chjOjeUinIdVISUz2bXdmkry77N1k7/ayy4eip7LQGUW
qCLZPZTS93JZQA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:45 2026 by rpki-client