Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
File:                     SnDhvI7t2UeGELGv8JMPQDR1JuU.mft (raw, json)
Hash identifier:          nMTPNyembe2oXwb5qg/f21xEfawustWvh4Nmn2gRtK0=
Subject key identifier:   27:64:36:DD:D6:DD:AD:1E:D5:6C:5F:78:48:D8:D0:15:6B:84:17:04
Authority key identifier: 4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
Certificate issuer:       /CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Certificate serial:       019F954A0D688067F510DD031A662DBD3DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
Manifest number:          0191
Signing time:             Fri 24 Jul 2026 18:01:26 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:26 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:26 +0000
Files and hashes:         1: SnDhvI7t2UeGELGv8JMPQDR1JuU.crl (hash: s9ycYLmfLtGexS1vYVFhlzZ70tCELEms7IUpIJ1dWFI=)
                          2: mbfy7L8D_2UAGm_dalRDD5X5-5k.roa (hash: QA1iyiTc+hx3IttbGaQYktAkhZefaHnHg6PgY6o1wcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:0d:68:80:67:f5:10:dd:03:1a:66:2d:bd:3d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
        Validity
            Not Before: Jul 24 18:01:26 2026 GMT
            Not After : Jul 25 18:01:26 2026 GMT
        Subject: CN=276436ddd6ddad1ed56c5f7848d8d0156b841704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:8d:ff:ab:85:9b:cf:41:94:d7:01:ba:4d:
                    f0:25:0c:a5:19:f5:aa:f6:ba:a2:70:a0:e9:f8:ae:
                    9d:6c:0d:ea:0c:2a:87:c5:f1:4e:eb:6e:63:d4:02:
                    0a:31:46:f4:dc:5f:30:e5:0f:57:3d:58:28:d7:fd:
                    d3:95:76:02:22:61:90:20:eb:85:dc:7d:45:15:02:
                    ea:28:06:18:9b:22:bc:75:78:76:47:16:41:53:30:
                    51:6b:c7:5a:a6:a7:2c:7b:c1:65:44:38:42:f8:bc:
                    ca:55:da:15:cd:a1:e4:9f:5b:b5:ca:42:2b:67:ac:
                    9c:f8:5d:08:2d:7d:d5:30:25:90:8c:71:1f:67:c0:
                    4b:13:a6:30:cb:18:79:27:48:30:3a:8f:b5:0f:d2:
                    4c:25:25:fb:47:41:1a:15:55:3b:c1:ab:f5:e3:d1:
                    5a:96:d8:b8:d6:5f:d6:d1:3c:b3:5d:34:a4:88:8e:
                    b8:ae:39:74:3d:66:63:55:48:f1:6f:0c:80:5d:e7:
                    53:81:8e:9e:78:f0:96:8a:c3:0c:a9:74:5f:91:97:
                    4b:3e:31:0f:a8:1d:57:9c:b6:9c:6e:c1:1d:b9:32:
                    cb:a4:1b:3f:fe:13:ad:ce:81:ba:98:56:7e:3c:25:
                    e5:89:8f:fa:f2:5a:ae:0a:89:c8:b4:d0:6e:69:d7:
                    85:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:64:36:DD:D6:DD:AD:1E:D5:6C:5F:78:48:D8:D0:15:6B:84:17:04
            X509v3 Authority Key Identifier:
                keyid:4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ec:c5:10:4f:e2:e1:fa:4a:f4:19:44:1f:cc:f3:8f:fb:89:
         c5:d5:11:6c:b1:15:e3:43:b5:93:9e:6f:1e:72:94:2b:74:60:
         95:25:7a:21:b6:32:2f:7d:ed:69:fd:d5:85:5e:fc:1f:7f:4f:
         0e:c0:bc:84:d8:11:49:65:ce:90:91:23:f5:fb:ed:ef:8c:5e:
         5b:ed:d0:26:f6:6d:a0:98:ae:2d:90:8b:56:c2:b7:d0:b8:61:
         0a:1a:ee:41:7e:a6:bf:2d:99:a7:80:6b:9d:37:4c:b4:44:2e:
         5f:05:74:88:7a:6f:e5:fc:01:57:eb:69:c3:90:5e:f5:35:71:
         e6:99:99:0b:85:cd:5b:c9:4b:da:93:d2:eb:1e:35:8f:44:50:
         b7:91:40:21:50:14:ab:e7:91:88:ac:6b:67:74:84:52:9e:e4:
         c2:6e:94:06:5f:bb:de:85:88:96:1a:00:59:80:51:03:d7:05:
         d8:dd:00:71:38:71:dc:e8:43:75:f0:c3:82:02:83:8d:fa:09:
         38:98:d8:0a:2b:0b:db:bd:a5:f2:f0:a6:5d:72:6d:3f:01:03:
         c9:e8:f0:13:d8:b5:8e:87:3f:bf:2b:b6:de:27:76:d7:c8:67:
         6a:29:8d:4e:75:86:b4:79:ac:12:35:a7:2a:68:e7:9e:0b:02:
         90:b9:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:52 2026 by rpki-client