Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File:                     4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier:          giKwHa4i0I+k4l8LNr3p+wTz2zc1/TCyX1Hp6W6IfKM=
Subject key identifier:   D1:9D:78:98:44:5B:70:B2:78:E7:07:98:D7:E0:41:85:BC:0A:20:84
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer:       /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial:       019F90FFA3CFE87CA1F832B5541325E4ABC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number:          0F1E
Signing time:             Thu 23 Jul 2026 22:01:40 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:40 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:40 +0000
Files and hashes:         1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: LdYkwhB1wtNFsELXkO2YBp0IOhBOP6zyPD96SjXHdRM=)
                          2: QtPhnyLsRRN8U6hpcPXp4Z0oWqY.roa (hash: i0nu2P6NxLQ5ERHa8d6GR72neeBYjpf7KkNPNvBe0Gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:a3:cf:e8:7c:a1:f8:32:b5:54:13:25:e4:ab:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
        Validity
            Not Before: Jul 23 22:01:40 2026 GMT
            Not After : Jul 24 22:01:40 2026 GMT
        Subject: CN=d19d7898445b70b278e70798d7e04185bc0a2084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d7:a3:ee:0b:8c:ff:3d:b1:97:87:52:7a:b5:
                    6d:10:26:29:64:e8:52:ea:92:d6:08:87:3e:db:82:
                    d7:cb:b4:78:37:63:3b:3f:42:d7:73:05:80:e9:ff:
                    49:6f:56:1a:80:e7:51:f8:5b:f1:f6:87:c2:c8:81:
                    cf:a3:52:af:3d:ef:6f:ae:05:b4:0d:9c:29:fc:6a:
                    24:4c:f4:b5:57:4c:e1:85:cf:06:c0:ed:06:a7:65:
                    44:25:60:5b:74:2e:a0:fc:90:83:dc:e3:17:87:1b:
                    62:09:e5:53:ff:82:10:d5:a3:f5:d3:03:6b:b7:c6:
                    03:21:a5:f6:d8:67:5f:7d:29:92:5c:c7:bf:f2:ca:
                    43:84:07:22:da:cd:e8:99:23:eb:20:13:58:d6:91:
                    74:43:b2:99:f3:99:a0:8a:69:8c:3d:e8:21:31:8a:
                    03:22:5d:f0:88:83:d3:a2:59:20:32:b9:3a:63:a5:
                    02:ec:7a:e8:84:02:f4:d3:2a:8a:92:fa:7d:6a:44:
                    79:cf:47:e2:de:50:2b:a6:04:18:e7:30:70:de:01:
                    b4:ef:3e:de:80:59:19:ab:35:aa:21:d8:33:50:1e:
                    a4:c8:68:99:92:89:b9:0a:96:7e:6f:6b:33:ba:26:
                    a2:5d:93:fa:9c:0a:c5:eb:5a:72:26:62:6b:21:a5:
                    84:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9D:78:98:44:5B:70:B2:78:E7:07:98:D7:E0:41:85:BC:0A:20:84
            X509v3 Authority Key Identifier:
                keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:06:ba:cd:73:1e:09:e9:9b:ba:5f:fb:a1:1a:70:4a:99:ac:
         88:15:1d:c7:63:b0:39:be:2a:c0:29:c6:f2:22:be:62:96:78:
         f4:82:55:b1:a4:9d:29:4d:6a:76:67:69:ff:a8:83:55:8c:6d:
         4f:ca:15:81:fd:5f:5f:1d:b4:5f:ea:9e:0c:97:5c:7f:28:d3:
         53:6f:68:d7:93:6e:08:98:22:c8:14:82:00:a8:ab:53:54:c4:
         61:71:d6:72:e3:61:d1:28:98:7f:66:43:78:b4:c8:ea:08:13:
         2e:20:56:c4:8e:2b:c8:97:c4:3a:57:02:3f:d4:7c:2a:ef:7b:
         c5:74:7c:55:89:16:22:3b:5b:8f:e1:74:e5:2c:4c:ce:41:97:
         c8:b4:8f:6e:3c:2b:14:9b:1f:2b:42:dd:e2:b3:2d:80:73:6e:
         d3:82:af:e3:69:f6:e7:0b:91:59:a5:3f:f3:02:bb:cf:ef:96:
         06:0a:27:f1:0e:a7:ca:0d:5d:e0:1e:76:30:62:75:99:5b:ee:
         19:ca:a6:07:a6:62:86:f5:79:59:0d:35:e2:1e:57:3c:89:bc:
         b9:86:91:b0:15:b5:5c:43:bd:ed:3d:9d:f2:84:66:33:01:64:
         ef:9b:76:82:25:23:8f:c2:33:51:c9:59:e8:ce:b4:58:11:16:
         02:49:ed:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:35 2026 by rpki-client