Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File:                     n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier:          5/6jGw9tOpNmrh9lDgJ4oJO1JuNMumEyu0gtyYiYSmY=
Subject key identifier:   F6:E4:5B:9F:AA:BB:28:85:82:30:BE:35:86:8B:2F:8A:08:51:55:CD
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer:       /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial:       019F8F477606C4975E44C88938543DA844E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number:          1272
Signing time:             Thu 23 Jul 2026 14:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:52 +0000
Files and hashes:         1: CqVEZRxRSbC72IoEpBuSl-IR0oo.roa (hash: VVcs23ufU1kuCIdVVX3XyTOJgzSyJ6o05uh4XWE/uco=)
                          2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: NJzsKmYyEFNA3fmIN2Ewbt9ZnurpLy/aAxa6i36EIw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:76:06:c4:97:5e:44:c8:89:38:54:3d:a8:44:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
        Validity
            Not Before: Jul 23 14:00:52 2026 GMT
            Not After : Jul 24 14:00:52 2026 GMT
        Subject: CN=f6e45b9faabb28858230be35868b2f8a085155cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:86:d8:50:01:c0:a5:ee:e2:d6:f0:2b:29:90:
                    32:20:07:f1:d3:22:04:d6:02:71:d2:6f:85:5d:c8:
                    79:76:31:b2:3b:8d:e5:89:77:9d:40:66:62:24:29:
                    74:3a:c4:ee:25:59:36:30:24:b3:99:46:49:a7:e0:
                    be:f4:7f:0c:ec:9d:1a:bc:54:66:63:a9:35:88:f7:
                    e7:e0:36:b1:9c:20:2e:72:73:2b:b9:df:e1:07:72:
                    46:6c:10:ba:d4:35:06:c5:37:f6:49:f0:40:b0:dc:
                    af:7f:cb:89:ac:ac:42:b5:ab:16:c6:9b:56:ac:f5:
                    ab:5e:22:84:52:86:8e:9b:9a:5f:e2:dd:af:9a:a0:
                    16:7d:21:90:1c:4f:3e:7d:74:54:b9:52:53:b9:9e:
                    01:71:15:3d:5e:7d:77:d7:0b:5a:19:70:0d:e3:8e:
                    55:5d:88:47:c3:47:52:04:ab:56:d6:25:d9:1b:2e:
                    60:32:11:b1:b9:3c:cc:90:c0:d3:9a:75:74:bf:2e:
                    81:9b:fb:b6:19:6d:89:b0:cb:dd:14:9d:c5:a8:9c:
                    22:7c:6b:90:f7:1d:b5:a5:37:88:57:26:24:a5:8a:
                    17:87:93:02:a7:2d:5c:4d:e2:12:fe:69:cf:73:d3:
                    6f:7b:4f:15:a5:41:41:09:ff:d8:11:5f:b2:12:53:
                    11:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E4:5B:9F:AA:BB:28:85:82:30:BE:35:86:8B:2F:8A:08:51:55:CD
            X509v3 Authority Key Identifier:
                keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:22:5b:e7:1b:ea:6c:0a:18:1f:ab:2c:ee:72:01:2b:3c:d0:
         12:03:72:e5:cf:7c:db:ac:c9:1a:37:e2:51:34:2b:67:c9:2f:
         ac:21:9a:54:71:0f:6a:f1:7f:95:6b:02:61:be:5c:33:2c:b5:
         c1:dd:c2:fb:87:13:e8:e7:c8:c0:9f:8d:5e:22:96:ef:6b:6f:
         69:3c:6d:d6:21:65:9e:40:f3:c6:bc:66:0e:b0:4f:b4:ec:98:
         32:58:0f:96:66:cc:b9:c9:e7:0d:f1:24:70:a4:19:b6:be:2c:
         06:6a:71:37:13:96:fb:1d:e4:0a:72:c8:e9:6f:7c:d8:6a:45:
         c1:ab:e5:5a:ef:ab:de:8d:8e:d5:61:c5:c6:49:6a:4b:fa:bc:
         33:44:9b:f5:a6:ce:f9:42:d4:45:e4:b4:c3:54:74:48:3b:5e:
         e9:85:2f:b3:57:cb:d5:fd:ce:de:0a:a0:48:3e:ff:84:93:37:
         39:68:70:0e:b8:6d:29:d7:00:b0:2f:cb:ba:60:28:a8:95:d3:
         eb:0a:2d:d0:b2:20:56:da:e3:bc:59:76:1a:21:0b:17:fd:f9:
         2a:27:81:64:c8:fd:56:c1:29:1c:cf:62:85:f5:a3:a9:38:e1:
         5e:6d:05:be:cb:e1:6b:af:f9:38:75:e8:a2:35:04:56:d4:88:
         f9:8b:79:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:56 2026 by rpki-client