Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
File:                     4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft (raw, json)
Hash identifier:          /kfeo7kOCc6Oq1nEqZY6KELulL6aEA+xbPUgXi1Q/Lw=
Subject key identifier:   10:3C:A8:6A:C6:19:45:FF:28:63:19:7C:C1:BD:03:0E:DB:64:5D:7C
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Certificate issuer:       /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial:       019F92B6944CC60190086C6D3853D8776F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
Manifest number:          19D8
Signing time:             Fri 24 Jul 2026 06:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:06 +0000
Files and hashes:         1: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl (hash: Hw1y+1cFUVPepWoz/jhyf4ogEYE4S5nz0xc3b4Px46I=)
                          2: QoYf0tAUEKqIrSmIG2tWWODeEqY.roa (hash: xUGeL/d9PAos8zWTD1cTYvl/O/Fd7xB/QfyjZxYeQ2g=)
                          3: s5zHySgUNC4r9yyDLUGS6hKc5AU.roa (hash: MCsyJIJVnFTvjDhLswke9JGgZHvXeY1VQLlom/hhChI=)
                          4: trEBVhTnYojMGk31Am98ZfEdQ9o.roa (hash: ZUjcn+k6KVdZ0YruJwm/37Xg7sBIq8yD/WZghxDB9RQ=)
                          5: u4dfVgTBlyOwWNQ0P6NKkpYOUUQ.roa (hash: w4779kW3IR6Ef4OLAy8K23RNH+GshDoVigRrQzkg78w=)
                          6: xvzjWZWQsB3A6lco8X1BjK51Rro.roa (hash: R+i0CBWTZwrH14DiftjMYo17Tzx/3SLww5XYhZACozo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:94:4c:c6:01:90:08:6c:6d:38:53:d8:77:6f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
        Validity
            Not Before: Jul 24 06:01:06 2026 GMT
            Not After : Jul 25 06:01:06 2026 GMT
        Subject: CN=103ca86ac61945ff2863197cc1bd030edb645d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:be:40:13:9e:64:e0:2d:bd:21:58:08:2e:
                    f4:f7:1c:39:53:cb:81:86:f7:d1:94:4d:79:ff:3d:
                    48:19:62:62:5c:62:ac:ac:59:33:fc:be:5c:34:33:
                    68:6f:7f:2e:7f:48:98:69:7e:0e:0a:47:34:0e:03:
                    d1:c1:ee:67:85:08:ce:a9:6b:ca:8c:2a:72:76:aa:
                    3f:79:76:18:cd:60:01:e3:9c:a1:bc:60:39:d5:19:
                    f9:a9:eb:52:47:3d:10:58:5a:17:78:29:51:46:89:
                    48:e1:22:b7:0a:20:57:5a:98:bb:53:80:d8:55:38:
                    b7:25:22:f1:1d:45:31:6f:3b:76:99:db:9a:b6:6f:
                    d5:ce:66:e5:f2:37:44:95:13:cd:db:ee:aa:19:53:
                    cc:7a:0c:83:ff:57:0d:66:c3:97:1d:9a:08:bd:51:
                    ef:7f:ed:9b:d8:a8:40:a7:a0:ff:ec:30:3b:19:5d:
                    45:d7:06:c3:8a:bb:b4:77:fd:54:51:41:5c:11:b1:
                    86:b6:b8:0f:ea:fe:7a:62:32:2c:2b:29:3a:90:82:
                    c1:e6:d6:58:b7:aa:38:b6:14:57:ea:1e:7a:ca:79:
                    fc:78:dc:03:31:cf:0c:05:ae:f5:4a:75:8d:18:5e:
                    d0:fd:69:3f:42:22:8b:ff:db:d2:9d:05:af:0c:d2:
                    52:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3C:A8:6A:C6:19:45:FF:28:63:19:7C:C1:BD:03:0E:DB:64:5D:7C
            X509v3 Authority Key Identifier:
                keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:55:c1:56:9e:17:52:a8:b9:1f:73:90:d4:0f:ae:74:cc:df:
         bb:a2:aa:e2:17:ac:18:a7:1d:31:05:c3:92:3a:eb:49:7a:f0:
         66:31:27:dc:44:1e:33:99:36:90:68:19:a0:3d:82:1a:0e:79:
         0e:54:f0:61:29:3b:d7:0e:91:79:fb:cc:ab:fd:68:eb:90:dd:
         80:71:92:3b:d5:50:b3:ae:9b:4f:b5:e8:4f:43:c8:b5:6e:16:
         94:ab:fd:43:07:15:ae:e9:58:6a:32:1f:e8:c2:cf:69:c3:4c:
         56:f3:39:42:a9:2d:cb:12:7e:a0:db:74:84:25:2e:d2:34:22:
         01:8a:7d:79:64:ec:8c:f4:8d:3e:46:29:ae:54:4c:dc:de:f1:
         18:8a:79:87:94:5b:e5:dc:7b:a8:d5:65:bf:56:7f:4c:9a:75:
         49:99:46:1c:f1:08:27:8c:09:1b:09:1a:e2:8f:40:c0:c9:bd:
         6a:d7:82:d5:41:de:73:29:53:6e:1e:0a:02:9b:d7:6d:c7:7d:
         22:cd:00:be:dc:5f:6f:fd:12:ed:d3:0d:5c:97:11:24:36:a8:
         27:5a:2f:68:e9:4d:35:6a:6e:90:a5:da:e0:e1:4b:5d:f0:ba:
         eb:df:c4:ae:86:1a:c5:50:b3:de:c1:a4:c8:ea:cc:3e:03:2b:
         62:d8:4d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:34:48 2026 by rpki-client