Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
File:                     4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json)
Hash identifier:          cmECdFjLEtixaPqr309JobMXx+sZocihOiVLEnl32M8=
Subject key identifier:   26:6C:00:04:95:23:89:8F:BA:4E:6B:F5:2F:93:C9:10:A7:AC:4D:CD
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Certificate issuer:       /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial:       019F9324377FBDBC2525D17E93694545A896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
Manifest number:          1AD4
Signing time:             Fri 24 Jul 2026 08:00:51 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:51 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:51 +0000
Files and hashes:         1: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: IKw5t6mxYgVxXxe/FEvaoThHsGTOIQdzs6/hZ6Tzwls=)
                          2: 7f-qk0jKjn3Hv6ygSTSqX-A52T8.roa (hash: wWQY3pRKERmG9ujMWcp884MAVgXLED92sf1A7NartQU=)
                          3: Qpzdfxddg7sAd9HOkX4hdICsNh8.roa (hash: 4zKxw2hbsJ7DHleUFCRfkqUEw6l9X5X22tDEvhwM0Q4=)
                          4: mISVN3pJCEKgpp-F0_a-pzPapx0.roa (hash: SadnkN5S+WCTiUpwfkYUMGUV79xfU7cL1Bs5TXckcuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:37:7f:bd:bc:25:25:d1:7e:93:69:45:45:a8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
        Validity
            Not Before: Jul 24 08:00:51 2026 GMT
            Not After : Jul 25 08:00:51 2026 GMT
        Subject: CN=266c00049523898fba4e6bf52f93c910a7ac4dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:6b:34:ba:66:3d:5e:cf:76:61:2b:f7:78:
                    0d:2d:02:bb:83:8f:82:2d:f8:40:44:88:8d:25:3f:
                    25:8c:c3:79:ad:92:62:21:18:45:89:8e:8c:c1:55:
                    9e:90:8c:26:07:f3:65:1e:a1:76:9c:96:d3:3f:8f:
                    5e:15:8c:75:eb:d0:3a:6e:32:58:75:eb:91:cf:3a:
                    10:00:3f:30:b0:8c:f8:ff:95:7a:d7:73:7b:aa:13:
                    3b:b7:a3:4a:e7:ac:33:a2:4e:53:ad:17:df:3c:14:
                    ce:37:f4:bc:18:d1:34:84:33:63:92:d9:5a:d3:7a:
                    df:45:a8:e8:f9:89:d1:8a:ab:e0:76:12:1a:d4:f1:
                    51:6e:98:e9:3e:0c:b6:21:14:ae:64:c8:a9:54:e3:
                    a3:41:2c:77:76:79:1c:d7:89:68:92:d7:fe:13:1f:
                    17:10:84:df:89:2b:24:93:f6:5f:ce:30:c3:09:81:
                    55:dc:84:7f:23:f0:68:33:d7:a5:0e:cb:c2:11:4e:
                    bc:f3:fe:c4:3b:97:e6:8c:bd:ff:a7:20:89:47:cf:
                    b1:17:c6:54:04:74:c3:99:3d:a5:ca:c7:4c:f1:47:
                    35:0c:03:55:b4:5f:8d:e2:f6:4e:50:37:6a:a8:16:
                    b8:80:f5:d9:4b:22:39:ec:38:c3:84:28:9b:79:0d:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6C:00:04:95:23:89:8F:BA:4E:6B:F5:2F:93:C9:10:A7:AC:4D:CD
            X509v3 Authority Key Identifier:
                keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0a:50:24:4e:ee:9f:db:21:33:d0:da:ab:d4:a2:7a:e2:5b:
         2b:59:10:e2:a6:17:9d:2e:a5:65:c7:fd:4d:f9:8c:0a:b1:70:
         3a:7c:b1:94:dd:df:6e:b9:c2:f1:36:e1:27:14:1a:bd:4f:89:
         9c:fc:fb:c5:bf:79:26:ba:31:51:54:a0:fd:23:d4:07:a4:74:
         9f:1d:59:36:b3:58:70:6b:1b:4d:b2:8c:e6:e6:4c:50:7b:16:
         78:80:db:fe:ea:8c:39:69:eb:a0:20:d1:26:00:c2:09:a2:08:
         8d:9b:b5:ec:4c:eb:25:cd:9e:3f:4f:87:a7:1d:4c:ee:5c:0b:
         d7:ba:de:c2:a4:06:0e:59:d1:e0:76:7e:bf:d9:2b:59:ca:61:
         c7:34:44:b4:3d:6d:8d:f6:66:ac:c7:1b:ca:7f:92:0e:7c:46:
         96:b6:e4:29:0b:e7:89:4f:1a:96:c1:d5:28:b4:cf:8d:0d:5e:
         a8:a3:08:2d:3a:ea:bf:a4:dd:23:42:65:cd:a0:c0:72:cb:6e:
         9e:ab:bc:5d:0f:8b:ca:95:46:7c:3a:11:98:cf:47:eb:fa:25:
         69:67:09:d8:17:bf:a5:43:fd:46:5b:95:df:05:83:26:ee:ba:
         b6:7c:f8:b2:19:1f:62:bc:70:69:ff:f7:5d:73:ad:26:8a:ae:
         9c:3d:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:52 2026 by rpki-client