Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File:                     P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier:          BAgaDyYabUJVNqwWF96M8BmGOexBNRB85j1RBrj1oBs=
Subject key identifier:   E5:18:70:BE:FF:E6:D0:0E:3F:86:55:65:0E:6C:FD:BB:7A:87:C9:9B
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer:       /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial:       019F916D65A3F995DF8C34630535766CFF92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number:          01BB
Signing time:             Fri 24 Jul 2026 00:01:33 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:33 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:33 +0000
Files and hashes:         1: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: qIX0IQgr/ZwIli882sQ1sIOQm9lM99ZCiTiEn3C+IR4=)
                          2: Z2hi7ItQ4ePG-89oC3NsOmcwohk.roa (hash: hpOgQ0YBy/9da8UmbyZyoarOicwd5QMZEwe4cjjhqvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:65:a3:f9:95:df:8c:34:63:05:35:76:6c:ff:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
        Validity
            Not Before: Jul 24 00:01:33 2026 GMT
            Not After : Jul 25 00:01:33 2026 GMT
        Subject: CN=e51870beffe6d00e3f8655650e6cfdbb7a87c99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:c1:7e:79:a5:0f:ce:1d:11:24:c7:f0:dc:
                    e2:14:8d:56:21:33:14:95:92:e1:5f:c3:be:4b:21:
                    a4:56:1a:15:2a:e2:2e:99:71:cf:58:6d:da:1e:1c:
                    10:c1:b9:2f:fd:36:16:29:5b:67:19:5a:61:6e:62:
                    df:98:2a:99:78:3d:09:87:f5:e8:e0:f8:bb:aa:8f:
                    c3:ca:ee:6e:b6:1e:9f:70:06:aa:23:da:be:51:94:
                    42:b9:27:47:1d:f9:c0:5e:55:ca:d8:cf:73:68:9f:
                    71:6f:14:8f:46:33:24:0b:94:cc:a2:d6:a7:02:da:
                    a6:a2:f9:86:b8:50:71:75:f4:81:1d:12:8a:a4:31:
                    e4:31:0b:6a:f6:52:81:d1:45:cf:ec:14:6c:e0:40:
                    e9:cc:0c:df:cf:84:82:ff:65:34:f3:8e:7f:3b:17:
                    71:fb:0d:b9:cf:4a:fa:44:aa:ae:0f:cd:54:4a:0d:
                    44:1a:bb:af:97:31:5d:f3:8b:6c:ed:e2:6d:cb:82:
                    de:2a:07:49:d7:c9:9c:87:3d:fa:b2:20:63:41:4e:
                    aa:cc:3c:a4:ee:77:4b:8b:b2:68:4d:da:01:8b:fd:
                    ad:be:d6:0b:53:95:f4:c2:39:72:fe:b0:79:a1:74:
                    4c:db:d6:2a:49:7f:ac:01:14:82:de:ad:d7:e9:67:
                    50:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:18:70:BE:FF:E6:D0:0E:3F:86:55:65:0E:6C:FD:BB:7A:87:C9:9B
            X509v3 Authority Key Identifier:
                keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8a:24:99:47:92:c9:03:3e:27:69:11:f9:9c:ab:8b:f2:a2:
         3d:b0:91:17:66:2f:06:6f:b1:7b:96:21:c4:67:f3:74:5f:04:
         0d:29:75:02:71:1e:ec:a7:ff:e2:5b:33:0c:76:04:98:d8:25:
         ab:1f:33:94:2e:84:15:b4:21:0e:22:df:25:ff:98:be:a1:02:
         76:de:5d:08:99:4b:8d:5a:12:d8:13:8d:c1:21:b4:c8:46:6b:
         39:5c:a3:a5:bb:4f:d7:fc:25:21:46:95:6c:29:6c:44:7f:16:
         b9:4c:b2:7e:d1:9f:26:3a:6b:15:8f:a7:ce:73:84:4e:1f:87:
         82:26:22:3f:f0:6a:49:5c:65:45:00:8c:ea:d9:99:c3:ec:25:
         13:59:75:a5:d0:23:0b:78:39:7c:40:54:4f:d0:2e:1f:23:ad:
         fe:3f:37:5d:98:56:f9:0e:98:a1:59:8f:c2:5f:8f:3e:c4:29:
         68:14:48:e4:a7:46:00:22:65:a1:15:b4:9a:0a:83:f1:c5:8a:
         e4:6f:a8:9c:08:db:88:e3:ab:68:b1:07:92:23:55:2c:4c:70:
         fc:1a:fc:67:bc:59:9a:4a:19:23:c1:9d:f7:04:91:aa:dc:0d:
         72:c5:86:ff:b7:12:50:2c:77:22:b1:15:dd:d9:51:11:6e:38:
         98:e0:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:55 2026 by rpki-client