Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File:                     4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier:          F4z5TOanDK1Djj6Pw3/ouvkmZrpnJMn1qh+f5yUjRcA=
Subject key identifier:   9F:16:69:40:EE:0C:8F:B8:34:4C:31:90:8D:2C:70:28:8D:BF:0A:FE
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer:       /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial:       019F8FB51415E21AF3A09DCB551C8A2FC1F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number:          15BE
Signing time:             Thu 23 Jul 2026 16:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:36 +0000
Files and hashes:         1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: 20ysOCeCJPjXyw3KHiMg0cWIRxKIl8GH2lLkTZBDDf0=)
                          2: ivkUxaGtEsJtdEm-0-az5FTe9g4.roa (hash: jf7yns1EHQl0bSQHREu9Zc2V/PBevRWEVblmvAVkiQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:14:15:e2:1a:f3:a0:9d:cb:55:1c:8a:2f:c1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
        Validity
            Not Before: Jul 23 16:00:36 2026 GMT
            Not After : Jul 24 16:00:36 2026 GMT
        Subject: CN=9f166940ee0c8fb8344c31908d2c70288dbf0afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:ab:82:f1:74:b1:4e:8c:ae:dc:3c:a8:15:
                    b6:a8:35:1b:d1:b6:e7:c8:1a:7d:02:f1:42:3c:ed:
                    b2:72:54:dc:59:ca:a4:01:9d:c1:28:55:44:45:7e:
                    65:bc:fb:f8:f9:e9:3b:7a:be:22:ec:5e:40:3d:ac:
                    bb:6d:e9:71:05:cc:f9:03:1a:9e:53:da:aa:de:bf:
                    ea:75:a1:33:eb:62:90:39:38:ff:28:b5:73:c8:e1:
                    25:68:98:98:f3:7d:c9:78:77:52:5e:fc:f2:80:b1:
                    bf:cc:c7:85:79:9a:ab:e2:3f:d9:29:da:43:f1:de:
                    42:06:23:60:0f:ba:92:6a:eb:2f:78:e4:a1:d0:cf:
                    70:ba:58:9b:3d:28:1f:ef:a6:69:35:96:cf:3b:78:
                    3a:c2:95:1b:85:fa:5e:02:d7:a0:c7:df:5a:57:07:
                    f7:f7:9b:d9:29:0e:8c:c4:71:0c:eb:90:da:fd:e1:
                    21:d7:04:46:71:45:67:7b:d2:86:e8:bb:f3:eb:d7:
                    62:e5:d3:f2:ab:b5:17:24:d8:23:3f:36:8d:ff:8f:
                    e9:00:10:60:5e:90:f7:46:12:55:5e:18:e5:39:95:
                    21:c2:b1:a7:2b:2c:67:63:d7:57:eb:9d:4f:02:4a:
                    8e:c7:4d:77:0b:2d:6a:7f:27:65:ae:b6:a0:e3:ff:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:16:69:40:EE:0C:8F:B8:34:4C:31:90:8D:2C:70:28:8D:BF:0A:FE
            X509v3 Authority Key Identifier:
                keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:21:83:ac:83:64:46:57:dd:91:a6:d4:a9:47:28:b8:47:bd:
         ed:a6:86:17:3c:1f:da:f4:f9:2e:57:dc:8c:58:ce:4f:a5:12:
         b2:f7:6c:64:98:8d:44:c4:e5:40:7f:6f:28:8a:75:96:d9:b8:
         63:2a:e9:d7:f3:55:4f:36:94:5b:0b:3d:82:0a:72:c0:27:35:
         d6:5d:36:db:c8:89:15:05:3d:1a:73:38:4d:1c:e2:6c:41:22:
         26:e7:1b:5d:a9:94:e9:24:2f:76:1b:7a:39:d9:2e:47:b0:00:
         ac:63:ac:57:a3:e8:ef:aa:c5:d2:af:a3:0c:c9:a5:fa:8e:b0:
         df:69:35:37:3a:a6:0c:1a:55:7d:e6:e2:19:c6:df:37:30:06:
         61:25:a8:1c:8a:fb:87:84:55:87:bf:37:0e:20:be:40:f1:7b:
         6d:97:3d:62:f3:1c:31:d2:80:81:d9:02:82:2c:38:b1:35:b3:
         11:00:d7:c6:c7:a6:86:33:15:d6:7b:38:39:4d:df:61:1c:17:
         b5:f4:10:96:6c:d9:ba:40:71:8b:2a:01:94:b7:df:ac:87:5c:
         b8:50:92:26:09:67:01:b6:8e:05:49:fb:fe:ce:02:be:43:18:
         0a:8c:e3:3e:a5:e7:9a:98:2d:26:4a:57:c5:73:77:5d:19:fc:
         ff:c7:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:56 2026 by rpki-client