Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
File:                     45WDhONGlWoAZjpWVQe5bxTMCXM.mft (raw, json)
Hash identifier:          iEb6Y2ImqBJfR2cneVpn3iyYro6cxauQ6HhwnSYz0Zo=
Subject key identifier:   67:BC:8D:DA:FD:5D:B5:69:50:05:B8:3D:72:95:3D:30:8A:08:F5:52
Authority key identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
Certificate issuer:       /CN=e3958384e346956a00663a565507b96f14cc0973
Certificate serial:       019F90FF5174020304E0852A12D1961B3B01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
Manifest number:          02CF
Signing time:             Thu 23 Jul 2026 22:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:19 +0000
Files and hashes:         1: 45WDhONGlWoAZjpWVQe5bxTMCXM.crl (hash: tJf22elFd8Fog4NeMsLWrjoQTOKybAic/b+yZhvGVLc=)
                          2: lNbG4oNSHogZj9bUCOksl3sIiCU.roa (hash: QBwKLCWTanLfjj9Ldl11eqQ5vT6OMeNXavMPoAXGH4g=)
                          3: z__9choePB0hY85a_epZitBsx_8.roa (hash: D+ruSl/X/fPQKsdHA9UXWGBlgo0rGd/gGZDncSpbB5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:51:74:02:03:04:e0:85:2a:12:d1:96:1b:3b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3958384e346956a00663a565507b96f14cc0973
        Validity
            Not Before: Jul 23 22:01:19 2026 GMT
            Not After : Jul 24 22:01:19 2026 GMT
        Subject: CN=67bc8ddafd5db5695005b83d72953d308a08f552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c7:3c:e5:98:d2:cb:71:e9:c1:16:19:09:bb:
                    50:b1:c2:0f:41:12:f9:62:5b:f5:d1:9d:0d:5c:ec:
                    c9:16:26:52:bc:a0:f0:66:70:81:8c:b5:16:1a:77:
                    52:e8:c5:13:2d:ba:8b:61:40:25:ba:08:58:8d:45:
                    87:7f:df:31:78:9d:18:30:7c:9f:af:c9:26:a5:08:
                    50:2e:9e:b3:f3:11:4f:6c:b4:10:6c:6c:f5:be:ee:
                    c9:4f:62:d9:83:75:d7:5d:c6:37:22:d4:0a:f1:72:
                    22:77:54:f7:e8:ae:e8:a2:26:7f:c0:5e:0d:82:83:
                    81:2a:dd:50:91:65:3d:18:57:4a:64:a2:d0:f0:1e:
                    b9:1b:0c:99:f7:d5:16:a6:5c:69:e7:31:e6:56:53:
                    3a:63:04:ff:ae:88:04:28:cc:34:69:c5:72:a2:e8:
                    5d:74:6c:09:91:8b:2e:4d:6a:f3:7a:c5:9c:e7:2d:
                    ca:ad:e2:00:fb:c4:16:8e:96:88:ae:15:7e:c6:cd:
                    eb:7b:59:92:07:75:c2:5b:5a:77:9c:5a:ce:66:ee:
                    48:a7:bb:7f:38:17:f8:0a:44:a1:84:e3:04:b4:0f:
                    2a:57:8c:66:6a:a8:13:2d:1b:36:94:b5:53:1a:56:
                    a9:48:e8:c2:00:a9:5b:e0:c4:c0:cc:eb:59:83:9c:
                    d8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BC:8D:DA:FD:5D:B5:69:50:05:B8:3D:72:95:3D:30:8A:08:F5:52
            X509v3 Authority Key Identifier:
                keyid:E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:04:c2:ff:76:ff:7a:44:79:aa:e7:fc:37:b7:dd:5c:d2:f1:
         39:94:69:3a:b3:90:00:44:d8:11:e0:ca:ec:df:0e:98:e1:99:
         d4:c4:7c:ae:33:04:1f:6c:2d:6c:8a:15:14:ca:ac:23:72:23:
         96:e0:4e:92:98:9a:17:e6:1f:53:8c:ac:1c:10:76:5d:bc:04:
         da:9d:e0:57:37:b8:de:0f:a2:21:ab:05:83:86:a1:91:bb:cf:
         47:45:62:4a:30:73:6a:d3:bb:7b:2f:e2:68:ef:b9:80:fe:8b:
         46:51:06:02:75:00:cb:6d:2c:51:85:6f:31:93:e8:8c:79:de:
         af:26:c6:a9:32:b8:51:90:90:ce:a5:9a:a6:8c:28:7e:45:d7:
         2f:e5:15:4b:33:b9:43:5c:d7:8b:04:75:a0:ec:db:d6:0d:a0:
         cf:df:96:89:5a:b7:cc:a2:f6:82:d4:c1:7a:c9:2f:cd:f7:28:
         a0:f6:bd:2e:12:5a:d9:8c:dc:c8:13:fe:83:b4:e4:a2:21:6b:
         62:a1:80:62:78:0d:23:36:3b:a9:f3:43:55:a2:37:7d:3d:e0:
         a0:1d:e0:af:05:8b:02:f3:55:07:e8:e9:ce:7f:86:cd:a2:99:
         3e:4c:bc:46:3e:a0:1e:79:f5:56:9f:6a:b0:7f:55:0c:89:22:
         63:21:d4:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/1F0AgME4IUqEtGWGzsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTU4Mzg0ZTM0Njk1NmEwMDY2M2E1NjU1MDdiOTZmMTRj
YzA5NzMwHhcNMjYwNzIzMjIwMTE5WhcNMjYwNzI0MjIwMTE5WjAzMTEwLwYDVQQD
Eyg2N2JjOGRkYWZkNWRiNTY5NTAwNWI4M2Q3Mjk1M2QzMDhhMDhmNTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicc85ZjSy3HpwRYZCbtQscIPQRL5
Ylv10Z0NXOzJFiZSvKDwZnCBjLUWGndS6MUTLbqLYUAlughYjUWHf98xeJ0YMHyf
r8kmpQhQLp6z8xFPbLQQbGz1vu7JT2LZg3XXXcY3ItQK8XIid1T36K7ooiZ/wF4N
goOBKt1QkWU9GFdKZKLQ8B65GwyZ99UWplxp5zHmVlM6YwT/rogEKMw0acVyouhd
dGwJkYsuTWrzesWc5y3KreIA+8QWjpaIrhV+xs3re1mSB3XCW1p3nFrOZu5Ip7t/
OBf4CkShhOMEtA8qV4xmaqgTLRs2lLVTGlapSOjCAKlb4MTAzOtZg5zY+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGe8jdr9XbVpUAW4PXKVPTCKCPVSMB8GA1UdIwQY
MBaAFOOVg4TjRpVqAGY6VlUHuW8UzAlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVXRGhPTkdsV29BWmpwV1ZRZTVieFRNQ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NDBiMWQtNzUxZC00YWZhLWI3MDAt
MTk0M2JiN2VhZWM3LzEvNDVXRGhPTkdsV29BWmpwV1ZRZTVieFRNQ1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83NDBiMWQtNzUxZC00YWZhLWI3MDAtMTk0M2JiN2VhZWM3
LzEvNDVXRGhPTkdsV29BWmpwV1ZRZTVieFRNQ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQTC/3b/
ekR5quf8N7fdXNLxOZRpOrOQAETYEeDK7N8OmOGZ1MR8rjMEH2wtbIoVFMqsI3Ij
luBOkpiaF+YfU4ysHBB2XbwE2p3gVze43g+iIasFg4ahkbvPR0ViSjBzatO7ey/i
aO+5gP6LRlEGAnUAy20sUYVvMZPojHnerybGqTK4UZCQzqWapowofkXXL+UVSzO5
Q1zXiwR1oOzb1g2gz9+WiVq3zKL2gtTBeskvzfcooPa9LhJa2YzcyBP+g7TkoiFr
YqGAYngNIzY7qfNDVaI3fT3goB3grwWLAvNVB+jpzn+GzaKZPky8Rj6gHnn1Vp9q
sH9VDIkiYyHUcg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:48 2026 by rpki-client