Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
File:                     4ram_1lpoV0l3cO73da-uU9Ipfk.mft (raw, json)
Hash identifier:          eZ9LzAKKcEd+r6pFnIPqaQUwHY6c76vGqzekRMTDK6A=
Subject key identifier:   1C:DA:8C:46:E5:EB:6F:47:CE:5A:2C:D0:DE:92:4A:18:85:EA:7F:96
Authority key identifier: E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9
Certificate issuer:       /CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
Certificate serial:       019F8FEBC593747FD0E950B3E3F69EDA2D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
Manifest number:          19C5
Signing time:             Thu 23 Jul 2026 17:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:21 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:21 +0000
Files and hashes:         1: 4ram_1lpoV0l3cO73da-uU9Ipfk.crl (hash: uH5hiG8RXIrCbAliaRN5MBence9XxI1magLL+HoXWRc=)
                          2: eSo8jObZn58o_aRi_AxYV9_s9BA.roa (hash: sgezzQUMOk07d245CaAgyimMMdaKOPXfAR78B55UWTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:c5:93:74:7f:d0:e9:50:b3:e3:f6:9e:da:2d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
        Validity
            Not Before: Jul 23 17:00:21 2026 GMT
            Not After : Jul 24 17:00:21 2026 GMT
        Subject: CN=1cda8c46e5eb6f47ce5a2cd0de924a1885ea7f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e1:85:3f:a7:70:75:8b:b3:e6:30:e6:cc:48:
                    38:7c:19:8d:42:56:0e:0b:4c:7d:da:39:48:f3:93:
                    1b:b7:0a:22:db:85:c9:a2:58:4e:81:1d:78:40:2f:
                    40:a1:4b:85:11:70:02:c8:09:49:0f:33:02:54:a3:
                    1b:89:ef:15:6b:88:bb:00:ff:aa:f7:9e:6f:67:4f:
                    ea:21:36:6f:4f:eb:d9:60:d1:21:a5:0c:44:f0:30:
                    e8:f6:ab:ff:c9:c6:80:66:7c:6a:3b:dc:a9:72:f9:
                    24:08:ff:ef:cc:38:f0:c4:56:b0:30:4e:c9:11:0d:
                    4e:94:c3:30:7c:8a:52:8f:69:a1:b0:50:1c:94:33:
                    72:ae:2e:4c:fe:66:9c:d4:a5:ec:3c:da:fb:ef:aa:
                    f2:fc:a7:06:5c:83:9d:f5:ac:b1:14:be:5e:ff:c6:
                    b8:4e:08:81:9f:58:b6:31:ed:64:a4:4c:96:04:c9:
                    95:a8:50:5d:d0:36:a8:29:31:f7:70:1c:ae:33:bd:
                    0c:ba:73:62:2f:56:37:28:be:ec:59:fc:a0:2b:73:
                    da:70:a5:87:59:1d:e3:5e:73:30:e0:74:fb:40:47:
                    f4:7f:cb:50:9f:e1:cd:f4:30:16:d4:4e:03:8a:b1:
                    fe:66:3a:14:75:ac:7e:29:f3:1b:1e:9f:63:07:58:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DA:8C:46:E5:EB:6F:47:CE:5A:2C:D0:DE:92:4A:18:85:EA:7F:96
            X509v3 Authority Key Identifier:
                keyid:E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:16:84:db:f0:c7:ae:06:cf:e8:55:62:78:cc:a6:ca:42:4a:
         89:3f:06:e2:19:b0:09:8b:c7:0c:35:24:f1:1f:e3:5e:1b:fc:
         5c:eb:6f:e1:62:7d:77:24:41:f3:02:5b:d6:cc:36:62:af:5e:
         d8:9a:b4:a9:90:21:65:56:06:49:b0:fe:bc:df:a4:04:ee:75:
         4c:25:8c:61:ba:73:38:71:a4:1a:0f:aa:af:59:f5:d5:93:b9:
         e4:62:ee:ad:59:f6:82:0a:0b:d6:2a:fa:ee:db:a9:f5:33:ae:
         2f:62:b0:30:a0:d4:fa:64:c2:27:fb:aa:c7:ed:e2:b8:15:c3:
         1b:86:89:98:39:1a:56:79:29:c6:30:65:0b:c0:83:7a:a8:72:
         38:d8:44:1b:76:fe:43:ba:d8:46:a0:f1:5e:21:83:f3:de:07:
         08:60:fe:47:97:d7:21:52:ea:fc:b4:c5:34:60:0d:3c:6f:5a:
         9e:a5:34:c5:cf:40:6e:dc:ce:d0:9b:5f:68:77:b4:f6:f1:d8:
         62:1b:a0:ee:f3:b6:d1:37:8a:ef:fb:3a:de:64:ae:e6:dc:f7:
         a9:5a:b3:e1:50:04:f0:fe:fd:66:46:05:88:c4:f4:a5:56:cb:
         a9:c1:2e:55:f2:61:dd:a7:eb:63:07:cd:d8:9c:69:a4:48:c3:
         04:64:c9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:02 2026 by rpki-client