Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File:                     CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier:          8m04dMLnWz6LR+rHM6JOrB+YlS/zVxRBPwLFwWnJM0c=
Subject key identifier:   EF:BF:76:77:4C:A5:91:E0:F3:E5:16:C9:D0:42:B8:1D:0B:3C:9D:DC
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer:       /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial:       019F91A382B440AD4AE19511053B9EAF1B2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number:          19CD
Signing time:             Fri 24 Jul 2026 01:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:39 +0000
Files and hashes:         1: 3_BtZ7-3SyraoqCxYf8yGXVzo1E.roa (hash: +nC3QJ9RCWlqRE3Uosm7QmqFU0HBkZbw83GEtUPhBdQ=)
                          2: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: o3vg0pmRDy3kDQyewnJ9w6ZvJxRBVbYumiOehYdkLT8=)
                          3: _7qWKS1csoWUqUsFNNOiL6451ys.roa (hash: /iDif7LQhjMSe8pOojFBssleDtOr1vNWkexVpZHh8kU=)
                          4: nAtY-RbzYBoDHaw9pKfqi-9Rj_c.roa (hash: ygakFRiKlCc1AsCZ9QHkHBLmK3WGXgznTKZOHRqQphU=)
                          5: uLDcFf3VjGANk8TQCg0vFoqZ_HI.roa (hash: pfVCme09A/8wk/MnxkHB5VKNGtvo4YKdgY3uHx7H4D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:82:b4:40:ad:4a:e1:95:11:05:3b:9e:af:1b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fe040242651353d556b8c4240082190f271d13
        Validity
            Not Before: Jul 24 01:00:39 2026 GMT
            Not After : Jul 25 01:00:39 2026 GMT
        Subject: CN=efbf76774ca591e0f3e516c9d042b81d0b3c9ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:e0:f5:a0:ea:67:f5:8b:a9:69:57:11:e4:
                    8a:b5:96:1d:ae:29:d1:f5:86:3e:15:ee:52:17:f1:
                    3b:4b:7b:61:06:22:cc:57:4f:c8:38:ac:89:5b:a9:
                    68:7f:ac:09:f9:7b:26:96:b3:d4:53:8e:ba:89:f4:
                    9e:3c:3c:8c:b4:fe:e7:24:c7:02:66:91:15:09:79:
                    3e:6c:35:3a:38:bc:cb:0c:55:2a:9f:56:2a:28:ce:
                    49:30:20:bd:96:80:30:20:30:81:e1:6f:09:87:8c:
                    fd:05:76:86:e1:2f:af:8c:f6:77:7d:b8:62:9f:0e:
                    53:52:0c:86:90:04:98:82:03:b3:cf:9d:48:6c:d1:
                    98:b9:ba:af:a9:22:b9:9f:dd:35:3f:0d:4f:e4:fb:
                    76:7d:e2:0c:36:15:fa:ea:0b:32:cb:a1:b7:fa:16:
                    8e:72:59:23:cf:95:cc:27:81:e8:f0:60:f9:10:0d:
                    30:49:38:b9:77:12:9b:0d:2b:65:47:68:29:e2:d8:
                    3e:d5:37:88:84:be:17:a0:6c:99:36:9e:e5:6b:da:
                    42:5c:3d:0c:25:87:19:cb:fa:25:31:e5:37:79:d2:
                    cc:68:7b:47:8f:0f:5f:89:5a:fe:13:6f:58:2b:f1:
                    77:a7:60:0f:89:4d:3c:cb:13:5c:a0:8f:6f:0f:6f:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BF:76:77:4C:A5:91:E0:F3:E5:16:C9:D0:42:B8:1D:0B:3C:9D:DC
            X509v3 Authority Key Identifier:
                keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:06:fd:7c:e6:2d:61:92:9c:fc:a4:fb:cd:4b:9f:47:d4:8a:
         37:af:d1:5b:46:e3:16:16:fe:51:f0:b7:ed:51:fa:42:26:05:
         c7:ee:b2:cb:7a:dc:60:b2:34:7a:ee:78:f1:87:0c:b0:9c:0b:
         10:e6:75:cd:08:11:55:d2:14:a8:eb:31:c8:a3:25:69:2b:a8:
         d3:07:3a:f9:87:f6:f1:0d:55:52:72:ec:c5:1a:f9:a7:91:55:
         1c:1a:4b:76:71:0d:00:ff:53:16:36:ab:f3:25:09:d2:30:ee:
         7b:18:5e:28:9f:da:b2:5c:4c:02:e8:38:ac:ae:f8:18:24:a9:
         31:84:3c:d4:23:c2:0b:f0:bf:cb:5a:0c:fe:9b:11:30:85:8b:
         99:fb:96:fc:3e:c2:43:00:82:05:ca:b7:e8:f6:cf:de:8b:f8:
         e2:48:68:b9:8f:70:74:20:68:b5:11:d1:8c:36:8d:39:1e:00:
         2e:d6:d0:a2:62:3f:0e:a3:8c:9c:e1:18:2c:6f:b1:9b:90:b3:
         85:df:f1:45:a3:2a:86:cf:98:f0:78:0b:52:f3:26:75:fa:5b:
         d8:b9:49:62:61:42:98:b8:c1:12:37:bc:a4:21:1d:50:11:b9:
         32:84:b3:ee:c0:12:30:58:ea:95:9c:b8:3c:9f:24:a1:52:2a:
         8f:6e:8b:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro4K0QK1K4ZURBTuerxstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy
NzFkMTMwHhcNMjYwNzI0MDEwMDM5WhcNMjYwNzI1MDEwMDM5WjAzMTEwLwYDVQQD
EyhlZmJmNzY3NzRjYTU5MWUwZjNlNTE2YzlkMDQyYjgxZDBiM2M5ZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMbg9aDqZ/WLqWlXEeSKtZYdrinR
9YY+Fe5SF/E7S3thBiLMV0/IOKyJW6lof6wJ+XsmlrPUU466ifSePDyMtP7nJMcC
ZpEVCXk+bDU6OLzLDFUqn1YqKM5JMCC9loAwIDCB4W8Jh4z9BXaG4S+vjPZ3fbhi
nw5TUgyGkASYggOzz51IbNGYubqvqSK5n901Pw1P5Pt2feIMNhX66gsyy6G3+haO
clkjz5XMJ4Ho8GD5EA0wSTi5dxKbDStlR2gp4tg+1TeIhL4XoGyZNp7la9pCXD0M
JYcZy/olMeU3edLMaHtHjw9fiVr+E29YK/F3p2APiU08yxNcoI9vD2+LzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+/dndMpZHg8+UWydBCuB0LPJ3cMB8GA1UdIwQY
MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt
ZGVjNDgwN2NkN2U2LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2
LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAb9fOYt
YZKc/KT7zUufR9SKN6/RW0bjFhb+UfC37VH6QiYFx+6yy3rcYLI0eu548YcMsJwL
EOZ1zQgRVdIUqOsxyKMlaSuo0wc6+Yf28Q1VUnLsxRr5p5FVHBpLdnENAP9TFjar
8yUJ0jDuexheKJ/aslxMAug4rK74GCSpMYQ81CPCC/C/y1oM/psRMIWLmfuW/D7C
QwCCBcq36PbP3ov44khouY9wdCBotRHRjDaNOR4ALtbQomI/DqOMnOEYLG+xm5Cz
hd/xRaMqhs+Y8HgLUvMmdfpb2LlJYmFCmLjBEje8pCEdUBG5MoSz7sASMFjqlZy4
PJ8koVIqj26LXQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:07 2026 by rpki-client