Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          dKw8dzDODE7scPUUfjWQ00nvWAOAskjG5O2M0kxtmVQ=
Subject key identifier:   CF:1B:EB:1B:30:F1:18:6E:8E:E7:57:CA:1E:3F:8C:90:45:44:D7:7E
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       019F92ED3AED452B9AA631B7EAD987D3CAF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          1998
Signing time:             Fri 24 Jul 2026 07:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:48 +0000
Files and hashes:         1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: qyC8bj+a3aSSyyU8Hm7hkrmbrVWG+LqOo2RE5JrgpIk=)
                          2: Uv1LOQn-rihpO-VnBwQTGmMa48E.roa (hash: U1Bj99VrPaNBoxUvCEMoBEqTdDcni4KZuGxKdf2wOC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:3a:ed:45:2b:9a:a6:31:b7:ea:d9:87:d3:ca:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Jul 24 07:00:48 2026 GMT
            Not After : Jul 25 07:00:48 2026 GMT
        Subject: CN=cf1beb1b30f1186e8ee757ca1e3f8c904544d77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:42:03:11:61:b9:0e:8a:bc:36:39:4d:b7:
                    3b:7d:7a:1a:fe:8d:44:25:ca:64:41:bd:ad:c5:5d:
                    fd:44:31:fb:e7:3c:08:1f:4a:7d:2e:63:7b:d7:bd:
                    4e:0b:aa:9d:f2:1b:8b:73:ef:6c:76:75:23:21:6a:
                    7b:62:d2:21:dc:2b:ec:57:27:82:92:56:76:34:81:
                    17:f0:0e:c1:59:87:8c:0d:07:d5:a4:64:ad:95:af:
                    cc:ae:b9:dd:2b:9c:6e:f6:90:27:ec:63:2b:f7:4b:
                    a3:a7:9b:b6:47:2e:21:68:8c:92:b9:ba:86:09:46:
                    2c:da:aa:f4:bb:61:02:8a:c6:82:77:9c:dc:38:38:
                    d5:03:85:32:d4:52:6d:d5:2d:69:7d:ce:49:4c:10:
                    a0:b1:5e:70:88:89:cf:88:b9:82:8f:c1:47:39:16:
                    6a:3a:bb:d4:de:33:a1:99:04:21:d6:96:5a:b9:c5:
                    00:2c:34:2d:91:d1:af:e8:96:e4:94:a9:19:a3:a1:
                    fb:60:68:14:c0:55:e2:26:62:d9:97:da:79:3a:6d:
                    9a:aa:6a:86:78:13:c0:d0:9b:9b:d1:2c:a6:b6:7d:
                    d3:8e:46:60:0e:32:24:34:2d:cf:71:23:67:89:bc:
                    bf:1e:a9:67:22:70:c7:cf:2c:da:70:3a:54:dd:33:
                    bd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1B:EB:1B:30:F1:18:6E:8E:E7:57:CA:1E:3F:8C:90:45:44:D7:7E
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f7:b0:eb:93:8f:81:78:df:b9:bf:d1:f7:fd:9e:a1:ee:7a:
         78:63:23:b5:8c:23:9a:56:c3:e3:40:ca:08:f6:2f:5b:81:c0:
         86:5f:3f:51:46:5f:1b:e2:64:74:32:b7:90:85:9d:ed:82:c5:
         0f:42:ee:fd:99:5d:e8:f7:b1:6d:1b:ab:29:06:e4:6d:d1:31:
         96:e4:2a:4d:1a:83:50:3b:9a:16:9a:04:3e:43:00:cf:1e:56:
         3e:d3:e2:21:30:fe:1a:7d:79:a4:27:29:a1:01:7c:66:46:1c:
         fb:8a:d9:72:19:e6:cc:e0:38:28:10:14:d8:d3:3f:a4:b9:cc:
         ee:cc:f4:17:9e:ae:70:93:df:1d:c1:c1:72:b8:8e:0e:20:70:
         fc:5d:3e:74:a2:9a:3b:c4:e1:7c:a5:77:86:21:2e:08:c8:d4:
         91:9f:f2:20:7e:1f:06:69:83:05:45:c4:93:9e:ab:8b:6d:3d:
         4c:85:88:a7:aa:89:f0:99:e0:15:03:05:23:75:a7:f9:89:fa:
         5b:c0:bf:1e:8b:7d:ad:56:21:04:d0:eb:b0:31:a2:2e:9c:c6:
         34:f2:6a:30:38:4d:3e:d2:5a:82:df:fd:38:9c:7c:dc:ef:58:
         5d:bf:8f:a2:f9:cb:d5:92:b1:3c:5e:4d:11:21:ef:ae:4e:ce:
         ef:eb:f1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:04 2026 by rpki-client