Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File:                     4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier:          hBiKERtIpaXljvkSnPfi5g2SDSDpBr7hJwKtSOxF4IM=
Subject key identifier:   0A:82:18:2B:73:56:68:86:D2:3C:E4:B4:F5:CF:D8:30:9B:FE:85:97
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer:       /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial:       019F9090A309500F34189102E057C99886E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number:          1281
Signing time:             Thu 23 Jul 2026 20:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:25 +0000
Files and hashes:         1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: XhNjXo/C/qr+2RSV4YAJbQCXkiwjbIjJsGIp5+6EwRc=)
                          2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:a3:09:50:0f:34:18:91:02:e0:57:c9:98:86:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
        Validity
            Not Before: Jul 23 20:00:25 2026 GMT
            Not After : Jul 24 20:00:25 2026 GMT
        Subject: CN=0a82182b73566886d23ce4b4f5cfd8309bfe8597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:03:53:bc:59:84:a1:75:1e:be:a0:12:e8:
                    0c:04:06:0f:7b:d7:1a:1a:6c:42:59:18:31:5d:64:
                    e4:09:84:24:dc:0e:72:73:f7:b0:1c:85:72:1d:05:
                    85:d2:8b:5d:80:7e:2a:63:7f:84:7f:9f:ac:05:1d:
                    5c:d7:d9:02:fb:92:02:93:75:3e:91:f9:fc:ac:57:
                    aa:96:02:44:c1:da:91:fb:11:cb:06:30:30:bb:8d:
                    f3:02:f1:f0:06:a7:18:eb:0f:47:35:d4:5f:79:0c:
                    29:75:48:64:c3:38:03:32:f5:5d:ed:69:0c:ba:79:
                    b6:c5:de:6f:5e:63:d5:28:d7:c6:33:65:31:34:66:
                    00:0e:73:07:2a:73:8e:de:6c:ee:b2:36:03:4f:e0:
                    3f:7d:43:f4:15:2d:1e:e6:91:40:d7:8a:a4:36:51:
                    5d:99:f4:91:7b:8c:b3:f4:04:17:65:9e:56:26:a2:
                    7a:7c:08:65:35:d5:d5:48:e2:13:17:20:8d:e7:12:
                    3e:5f:68:ff:92:b7:95:7a:da:05:5f:45:03:f3:fc:
                    8b:19:5e:dc:b0:e6:60:db:03:aa:59:ad:1d:34:de:
                    10:f7:c8:36:b6:cd:b2:c3:c6:fd:3f:d7:7a:7f:26:
                    6f:7e:e4:4d:ac:e5:fd:46:4a:8f:40:3e:ee:bd:0d:
                    b2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:82:18:2B:73:56:68:86:D2:3C:E4:B4:F5:CF:D8:30:9B:FE:85:97
            X509v3 Authority Key Identifier:
                keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:95:9a:55:95:e6:0a:c1:95:27:55:91:04:31:19:1e:a9:45:
         5b:c1:94:37:88:dd:cf:a3:95:5f:64:ab:66:8a:37:52:3e:f9:
         8a:54:01:d2:0f:8d:92:0c:20:ca:6b:5e:43:d6:b5:f7:a1:ff:
         93:f5:7a:13:8b:4f:ce:b8:ad:d2:0d:a7:8e:a6:10:26:ff:d6:
         7b:18:0d:12:07:e6:df:5d:7b:ba:6b:4b:39:d4:49:9e:85:96:
         d0:9e:42:ef:3d:62:31:02:4b:07:cf:f8:dd:8a:8e:70:65:fd:
         92:ee:da:73:9e:2d:75:a5:86:cf:7e:12:a3:72:09:3d:47:3d:
         f9:c5:26:f4:87:ad:3c:69:26:c0:d8:d4:36:fd:ed:2f:8d:d4:
         0f:bd:d0:61:d2:7d:50:50:2d:1f:c0:a4:e0:96:7d:bc:d6:43:
         5c:df:5d:92:36:61:96:c4:53:94:b1:20:c5:1d:30:99:1f:fe:
         2c:ad:05:ad:f3:eb:41:e8:2c:fd:ac:95:70:ad:d8:d8:65:db:
         e6:0e:e2:56:f0:53:73:87:30:86:da:b2:49:1b:bd:55:d6:5a:
         93:6e:c1:1f:48:18:71:64:4b:74:4e:8e:b1:f6:b0:8f:30:4a:
         1d:36:18:87:3e:ae:d8:69:07:56:77:05:9d:1d:bd:35:09:bf:
         dc:e5:87:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:30:37 2026 by rpki-client