Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
File:                     Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft (raw, json)
Hash identifier:          +Lf/mxG6c3G1kURNGNvGd4p09Zu3R4H4EYTE9SnXmJE=
Subject key identifier:   44:96:E0:A1:8A:5E:DF:92:3C:61:3F:BC:E8:6E:91:E0:B8:81:19:3E
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Certificate issuer:       /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial:       019F916D860A3166D3CA9FEAFECC1D87C836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
Manifest number:          01DE
Signing time:             Fri 24 Jul 2026 00:01:41 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:41 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:41 +0000
Files and hashes:         1: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl (hash: YDdTdavWPSAPVde4cSCai9KOAaWDlne05qK7vjOELqk=)
                          2: eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (hash: OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:86:0a:31:66:d3:ca:9f:ea:fe:cc:1d:87:c8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
        Validity
            Not Before: Jul 24 00:01:41 2026 GMT
            Not After : Jul 25 00:01:41 2026 GMT
        Subject: CN=4496e0a18a5edf923c613fbce86e91e0b881193e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:c7:78:ef:71:6d:ed:a4:dd:fb:95:bb:c5:
                    ad:49:32:cd:ce:35:c6:df:fa:14:bf:71:55:ac:61:
                    a9:bd:c8:86:01:45:29:fb:3b:c7:68:15:1b:88:cd:
                    36:7d:c3:50:56:d9:37:3d:ce:62:f7:c8:ba:ad:a0:
                    3d:df:a7:66:b4:a0:50:a2:e8:39:3d:88:7e:eb:4c:
                    c7:1d:5b:29:b0:75:f9:7f:98:bb:07:44:26:2a:7a:
                    81:be:ac:cd:6f:7a:d3:d9:59:d0:30:bf:97:b0:37:
                    8a:f7:ba:5a:da:43:2e:ea:10:c3:d7:8b:31:8a:89:
                    78:dd:15:28:e2:9c:e3:78:6d:bf:2d:5a:74:28:79:
                    5d:16:76:6d:6e:b4:a0:40:14:da:2a:65:bd:7b:f5:
                    07:bd:78:61:4f:da:51:ff:a7:7b:d2:c1:50:db:06:
                    b2:f2:ed:16:3c:37:fd:f9:0e:ec:49:5f:18:bb:a4:
                    e3:ad:b7:c0:8f:bb:e1:df:ba:e0:34:6d:52:07:12:
                    e2:ac:b4:97:7f:ea:f5:c5:ff:23:b5:21:6d:de:87:
                    77:70:06:95:5d:a6:16:84:b2:30:05:c9:e3:bd:ac:
                    05:5a:04:b2:ca:1a:28:ae:e9:e2:94:88:b5:aa:57:
                    6f:c2:d7:31:fe:74:32:a8:42:c5:e7:d9:ad:ed:82:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:96:E0:A1:8A:5E:DF:92:3C:61:3F:BC:E8:6E:91:E0:B8:81:19:3E
            X509v3 Authority Key Identifier:
                keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:92:34:5e:b0:5a:2a:52:3d:f4:ad:b6:4b:80:ef:b6:d1:74:
         8b:75:25:74:bb:35:04:57:25:c6:60:b3:0b:cf:29:06:9e:4d:
         aa:f3:e5:fe:6b:7e:08:3d:b3:3a:f9:1c:8b:42:93:71:ca:db:
         aa:e8:63:bf:c6:8f:75:45:56:57:f3:e0:03:17:31:76:9c:33:
         a0:f6:5e:1e:eb:0a:d3:6b:35:44:16:f0:c6:d6:75:51:05:c9:
         a2:da:e8:7d:88:69:d4:db:14:5f:5a:af:b0:f9:01:81:bc:97:
         28:b1:4b:fa:5e:1f:0c:58:4b:62:78:21:59:56:fd:91:b7:a3:
         ac:39:73:31:51:82:a0:ee:69:19:7b:96:71:eb:90:00:fb:b8:
         c6:ea:0d:4a:2d:ea:af:a7:0b:39:eb:79:a8:00:c3:3a:6d:79:
         83:af:e5:96:80:c5:f3:55:9e:19:3e:96:2c:9f:ea:ab:7d:9d:
         3c:78:d4:fc:20:dc:24:98:c4:5b:b2:23:14:1b:79:f9:7f:84:
         3a:94:f9:d6:e7:51:ef:87:18:bb:5b:2c:bc:df:89:74:04:5e:
         0c:e9:25:70:5c:b8:c8:ad:90:fe:af:a4:13:5a:c1:f4:74:e0:
         da:60:cc:36:b0:50:7f:84:e7:5f:75:df:ea:af:cb:71:c2:54:
         82:1b:d0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:28 2026 by rpki-client