Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
File:                     SyUQgOllg93f08tXQu9eQmWBFLA.mft (raw, json)
Hash identifier:          Yn1RrLEriak1v3+Q5NvbaRe9tcx7lVwI01L8L6He1MA=
Subject key identifier:   E4:94:D2:B9:75:AE:CC:F9:1D:9C:8A:05:85:E4:C4:01:08:0A:82:AE
Authority key identifier: 4B:25:10:80:E9:65:83:DD:DF:D3:CB:57:42:EF:5E:42:65:81:14:B0
Certificate issuer:       /CN=4b251080e96583dddfd3cb5742ef5e42658114b0
Certificate serial:       019F9059D7FE4D079341E330544169AD860A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
Manifest number:          0109
Signing time:             Thu 23 Jul 2026 19:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:34 +0000
Files and hashes:         1: SyUQgOllg93f08tXQu9eQmWBFLA.crl (hash: B33XEogsou5+r0sTbziJuK+eELIpbJWOQoNsQ6jCf/0=)
                          2: en2MbnssfxDmdQApF9BpXZafTB4.roa (hash: ER4VRDsyb1U6Mhi3DkYQHSd9SIwplFdtiKrG0UkksVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:d7:fe:4d:07:93:41:e3:30:54:41:69:ad:86:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b251080e96583dddfd3cb5742ef5e42658114b0
        Validity
            Not Before: Jul 23 19:00:34 2026 GMT
            Not After : Jul 24 19:00:34 2026 GMT
        Subject: CN=e494d2b975aeccf91d9c8a0585e4c401080a82ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:67:fe:3e:2e:5e:89:d6:fb:c8:0b:8f:12:
                    78:b1:6d:e8:e1:7e:08:f0:0a:46:89:39:2c:0b:13:
                    5a:56:d2:e4:a8:cf:6a:db:9b:6b:9c:fd:6b:ad:08:
                    14:18:d0:bf:24:3b:df:de:17:ce:5f:45:db:13:21:
                    cc:a6:c7:1f:ef:09:91:a5:39:42:ab:2e:9b:6d:f2:
                    70:cc:d3:20:2f:b2:e4:52:ff:de:52:f4:d1:98:51:
                    7d:50:39:58:c6:19:2d:b1:ff:92:25:63:76:cc:2c:
                    bd:7a:46:0b:97:b1:a4:6f:f7:9c:c5:15:1d:d4:86:
                    3b:01:e5:2e:ae:88:11:6e:ca:51:89:cc:dc:3f:ad:
                    53:b0:86:c6:6e:fc:da:12:10:67:0c:83:c4:db:5f:
                    b8:be:e9:9e:3b:87:41:dc:42:5b:51:c5:fc:84:66:
                    b3:f0:3f:1f:af:08:5c:30:f4:0e:41:77:c0:cf:97:
                    f5:ec:10:2d:1f:c5:ba:a8:a3:29:ac:bf:5f:9a:02:
                    98:61:11:a1:f5:97:50:9d:c7:22:88:ba:ad:bf:e0:
                    e5:fa:33:f2:cb:d0:a6:3f:50:ae:7b:89:fc:dd:65:
                    69:fa:77:69:9a:a3:22:0f:55:ef:ad:43:ad:1f:e9:
                    cf:fa:ff:e5:09:98:58:94:03:6b:53:47:92:67:32:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:94:D2:B9:75:AE:CC:F9:1D:9C:8A:05:85:E4:C4:01:08:0A:82:AE
            X509v3 Authority Key Identifier:
                keyid:4B:25:10:80:E9:65:83:DD:DF:D3:CB:57:42:EF:5E:42:65:81:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:10:d5:56:54:e0:d2:26:d4:b0:89:03:77:50:c1:51:27:f5:
         74:7d:83:2d:5a:2c:17:a4:bb:5f:d3:53:96:88:e3:76:a1:7d:
         a9:7a:6e:6c:6e:e7:5f:ac:a5:c8:d7:c2:6a:96:48:8e:f6:5a:
         c2:f6:c0:ce:9f:3d:06:c3:ba:5b:7a:09:1f:7a:4a:98:ce:42:
         4f:10:bc:74:5f:94:1a:0e:68:ae:67:e1:5a:fd:d4:2c:ef:58:
         d6:8a:e8:17:73:cb:5f:cb:76:f2:22:03:c0:69:6e:4b:e0:a9:
         3c:d1:77:54:49:97:81:4f:3f:b0:04:ff:9b:16:ad:dc:30:91:
         04:d4:e5:54:8f:d8:41:d9:8c:c4:37:ea:7b:bb:57:ca:e4:a2:
         56:89:0d:a9:f7:1c:a6:c3:d7:82:7e:5b:b8:7a:ef:f0:96:cf:
         f9:1d:ab:3a:51:45:f1:33:8f:3f:45:7f:fb:5b:5c:b2:0e:93:
         68:68:f3:52:c4:d1:b3:27:7e:2b:87:a7:fb:1a:73:5d:c2:5e:
         5d:19:fd:1a:9f:54:40:33:dc:e6:f0:c4:d8:e0:ff:83:c6:50:
         f8:37:be:fc:ef:0b:58:78:b6:58:34:2d:48:fc:63:7c:47:25:
         27:48:3d:7a:3c:04:1d:2e:b2:80:9a:1d:a2:43:74:a0:ef:94:
         54:96:7a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:05 2026 by rpki-client