Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
File:                     RDO2ork3CiSzs5vwMBiRnDY1lYw.mft (raw, json)
Hash identifier:          vjO+xwFRoNfJ1B87NkBw1CPvWAS+XS7crcwADBBI+XI=
Subject key identifier:   D8:3A:1D:11:74:99:DB:93:E8:C5:3A:91:A5:4C:B4:E5:72:EE:BA:2D
Authority key identifier: 44:33:B6:A2:B9:37:0A:24:B3:B3:9B:F0:30:18:91:9C:36:35:95:8C
Certificate issuer:       /CN=4433b6a2b9370a24b3b39bf03018919c3635958c
Certificate serial:       019F95494C07C9096C864E2495523406ADB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
Manifest number:          42
Signing time:             Fri 24 Jul 2026 18:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 18:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 18:00:36 +0000
Files and hashes:         1: RDO2ork3CiSzs5vwMBiRnDY1lYw.crl (hash: uxQEKP0puDtvQS76QC4JeMh1LhCiZmxB3Owlis2yYLo=)
                          2: gG-xH4Wm1_ftJKGC0tQXiROr0_Y.roa (hash: oFf67BglbiSgcsuuPtbPySF0HlPBZgLM4o8ZIMj+qf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:4c:07:c9:09:6c:86:4e:24:95:52:34:06:ad:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4433b6a2b9370a24b3b39bf03018919c3635958c
        Validity
            Not Before: Jul 24 18:00:36 2026 GMT
            Not After : Jul 25 18:00:36 2026 GMT
        Subject: CN=d83a1d117499db93e8c53a91a54cb4e572eeba2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fe:ad:2f:7d:29:db:ab:06:ad:3d:4d:e0:bb:
                    1c:2d:39:5e:18:1c:54:c5:79:ce:62:0f:41:f9:42:
                    85:1f:3e:81:f1:bd:57:cf:58:4e:12:60:dc:69:c3:
                    31:e0:cf:4f:3f:63:20:91:99:01:13:50:81:9f:35:
                    fb:19:a9:65:6b:54:3c:0c:3f:dc:f0:cb:57:db:9b:
                    a7:95:87:4c:52:29:5c:20:e5:0f:e5:84:08:55:eb:
                    64:2e:60:d6:9d:77:7f:d0:cb:7e:2f:93:97:1f:6c:
                    16:15:ad:69:86:51:df:a1:5f:59:0b:7b:a8:b4:9c:
                    8c:99:21:24:d7:89:ab:05:12:a5:76:e9:7c:ff:6b:
                    ed:39:a3:d3:b4:64:ee:6c:c1:95:3c:d3:17:16:7d:
                    b3:95:48:53:90:60:f1:2f:6c:18:fd:21:c8:c6:9d:
                    e6:36:c5:7c:6b:23:0d:07:83:a2:8f:fc:92:fd:07:
                    3f:79:72:8f:f8:c7:43:03:8f:41:07:32:40:c0:ec:
                    ca:7a:f4:56:74:25:d9:67:63:22:0a:90:2b:7f:2d:
                    49:04:e3:08:3c:8e:a5:1d:6b:9b:d3:ec:6b:1c:30:
                    79:cf:21:c3:b4:6e:26:ab:c1:3f:3d:11:1c:c2:4c:
                    b4:82:1c:7e:56:85:92:25:0d:2e:17:de:55:55:29:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3A:1D:11:74:99:DB:93:E8:C5:3A:91:A5:4C:B4:E5:72:EE:BA:2D
            X509v3 Authority Key Identifier:
                keyid:44:33:B6:A2:B9:37:0A:24:B3:B3:9B:F0:30:18:91:9C:36:35:95:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a8:74:86:86:fb:d5:71:d4:44:25:c7:09:7a:c5:6a:3a:d4:
         3a:f8:e8:21:7a:ed:e6:b5:ae:96:db:82:f5:a7:00:d6:1a:f5:
         e6:ef:10:01:26:62:c6:0d:26:11:a6:43:81:56:be:45:50:94:
         91:ed:6f:77:79:e8:8e:ea:62:d2:b4:04:cd:12:01:5c:2e:de:
         8b:fd:8f:ff:47:7f:13:02:66:35:67:96:ef:77:7b:a5:bf:81:
         8d:d6:ed:53:3c:79:e2:44:81:02:d6:b0:1b:7c:66:b4:c7:e0:
         e9:99:be:fa:0d:8f:b9:35:23:53:81:82:14:42:da:35:63:c7:
         45:37:ac:04:64:e7:f9:4e:7a:e5:ef:8d:51:ce:47:83:0b:ae:
         86:3f:7c:37:51:a4:ee:23:e7:c7:7f:12:58:23:fc:c2:f8:dd:
         9e:70:76:83:b7:ee:e6:57:ca:76:e7:b1:f6:ba:b8:71:ab:91:
         c9:02:7e:ff:30:69:1e:0d:64:15:26:a8:4e:74:a5:a4:c1:df:
         a7:5c:5d:f1:50:23:cb:99:1c:1e:4f:2d:cf:3f:c3:78:fe:ec:
         ef:cd:2d:4c:3d:30:9c:e7:c3:1b:f8:a6:ec:8c:5f:14:90:fa:
         65:e9:2f:70:6e:93:0d:63:ee:a0:ff:c0:df:0b:6a:12:00:e3:
         0e:70:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:32 2026 by rpki-client