Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File:                     TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier:          FZgoKaeeN7tqCOpHYRp0eMR+jMTU3xz6G17z+55hDeI=
Subject key identifier:   FE:FA:50:40:20:18:C5:3A:6B:BC:E9:75:03:DC:AA:97:A5:21:6B:AA
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer:       /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial:       019F9549D22C7C8A9402D167B1F26694C2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number:          1056
Signing time:             Fri 24 Jul 2026 18:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:10 +0000
Files and hashes:         1: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: dEmg2OU70e72JfkD/eMDEV/9BdAWNlSx5ndh3vszUt4=)
                          2: mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa (hash: cGf42p5lM09FOWIL9NbqXkxRKlJYCNacEJNXdW+oi2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:d2:2c:7c:8a:94:02:d1:67:b1:f2:66:94:c2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
        Validity
            Not Before: Jul 24 18:01:10 2026 GMT
            Not After : Jul 25 18:01:10 2026 GMT
        Subject: CN=fefa50402018c53a6bbce97503dcaa97a5216baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c3:b2:dd:a1:15:20:03:19:04:35:09:ca:cc:
                    d1:65:4c:4c:05:d0:4e:d3:bf:1f:0b:73:65:0f:3f:
                    95:62:30:48:d5:9f:0a:9b:c5:64:62:88:aa:09:8e:
                    ad:6a:f7:15:da:89:17:46:57:b7:ba:a7:a3:0a:51:
                    b2:b8:03:f9:0e:16:76:1c:e9:1b:69:af:c4:95:30:
                    c4:92:98:e5:88:b1:ec:d7:00:9d:2a:a9:50:2a:67:
                    1b:91:f6:eb:38:d8:fe:14:79:70:1c:6d:da:e2:0f:
                    63:0e:79:5c:d1:b5:3f:db:90:d1:9f:75:05:ee:2b:
                    3b:67:84:7b:ea:c5:61:81:da:5e:0a:53:ba:19:29:
                    22:24:2e:1b:50:aa:79:58:53:27:db:26:22:58:ac:
                    69:21:7e:2d:e1:35:a4:b6:b0:d5:00:70:4b:b4:76:
                    d6:2c:94:a1:90:2f:bd:53:38:25:bc:29:44:06:b4:
                    ca:21:2d:19:13:29:f3:24:0c:96:71:e6:7d:a2:cb:
                    cb:33:b1:a0:97:5a:0f:c2:1a:bd:ee:39:05:3f:25:
                    74:4a:88:07:1f:b8:61:b4:d2:2f:db:0b:48:24:c9:
                    d6:ed:f7:93:eb:6a:b9:a6:d4:a2:a2:43:7a:ca:56:
                    cc:0e:e3:bb:19:d1:48:4c:30:59:96:ad:55:78:71:
                    ca:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FA:50:40:20:18:C5:3A:6B:BC:E9:75:03:DC:AA:97:A5:21:6B:AA
            X509v3 Authority Key Identifier:
                keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0b:ca:63:65:a9:60:a3:dd:2a:87:f0:ab:54:46:5e:ac:7b:
         03:32:84:d0:81:e1:24:89:ef:dc:ac:82:ff:03:30:fb:74:15:
         be:91:1c:69:bc:dd:95:1c:e8:2d:53:e0:5f:10:85:4a:99:44:
         1c:6a:ec:92:67:1b:61:02:3c:b9:f7:68:cd:5c:43:4c:c9:e7:
         35:cd:c6:c6:cf:53:ad:dd:c8:32:13:81:6d:e4:be:34:0c:0d:
         71:52:ae:60:2c:ff:f4:35:ac:ad:f0:11:50:4a:5d:9c:02:1c:
         a5:4f:f6:55:18:e4:36:99:20:7e:c0:9a:97:ed:fe:f4:e8:ad:
         10:54:58:bf:66:91:07:ca:f4:bf:67:da:7d:e8:de:c1:2e:d1:
         d6:24:d2:08:4c:41:ea:34:b8:52:cb:1b:54:d8:c1:5f:ef:48:
         36:9f:14:f4:2a:32:9c:88:b9:32:93:e4:14:22:ee:3e:7d:56:
         41:e3:84:3b:d3:7d:01:bf:24:3c:82:35:48:e5:3f:dd:c2:75:
         0b:46:9c:ee:c5:23:63:d1:cc:4b:83:9d:7b:22:60:2f:75:08:
         4f:e5:85:d5:ac:e9:c7:92:48:61:20:61:12:47:62:1c:1d:61:
         f9:4e:83:b0:6b:aa:52:9c:3f:f1:5d:f5:f1:21:83:9d:be:29:
         f6:29:db:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:59 2026 by rpki-client