Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File:                     4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier:          rBmOyR2iiAuJ7gXMEmlvRec33DiTt7i9AvyEYG/nGFc=
Subject key identifier:   78:F7:14:FD:BE:23:B1:66:BC:7B:52:E7:57:83:87:62:6F:5B:AE:BC
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer:       /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial:       019F9059BE0CFACDA20D8432D627C66C546C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number:          0E90
Signing time:             Thu 23 Jul 2026 19:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:28 +0000
Files and hashes:         1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: uhJUcjKEs8/51PI4/dxeYqdmxUFgvc9u3/wjOgP1w54=)
                          2: XexrTT-WjOfF1IH0hIaeXZfiLag.roa (hash: HDA8bu6O9RqOeUyNIrj9FwIn/BuM4ZQvluzThKczOzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:be:0c:fa:cd:a2:0d:84:32:d6:27:c6:6c:54:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
        Validity
            Not Before: Jul 23 19:00:28 2026 GMT
            Not After : Jul 24 19:00:28 2026 GMT
        Subject: CN=78f714fdbe23b166bc7b52e7578387626f5baebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:3a:c7:e7:e0:fd:0c:25:89:86:90:0f:ea:
                    98:d3:7d:91:50:8c:e0:64:4c:96:05:72:ab:2d:c8:
                    72:28:ac:9d:31:fb:07:6c:89:0c:0c:12:b7:2b:87:
                    11:5c:98:07:8b:d5:f7:83:b7:d2:07:76:fb:b0:93:
                    3c:67:35:f9:51:78:0c:28:0b:fa:ef:18:52:c5:d3:
                    3b:82:2f:3b:e8:15:08:31:93:bc:10:33:c9:84:43:
                    c8:59:4d:05:7e:2b:38:83:b9:cb:b7:e8:de:85:a4:
                    60:89:7a:83:b8:bf:e0:03:61:cd:2f:fc:b0:82:ad:
                    60:3b:be:91:1b:13:fa:db:39:87:26:59:12:63:6e:
                    77:ab:ee:57:01:f5:a1:45:f1:7d:38:50:ed:c4:b8:
                    9f:ca:59:49:c1:ae:ee:bd:ec:71:3b:37:66:b7:f6:
                    23:78:28:69:16:bd:72:f5:82:ab:4f:68:77:7f:d3:
                    ee:ec:7f:9b:cb:80:02:6d:05:ac:a6:3e:60:ab:89:
                    a0:59:29:8a:f9:bc:95:f2:63:d2:73:70:a7:61:f7:
                    cf:a9:d8:15:f4:b5:3a:a4:d7:4e:d8:f1:b5:fa:27:
                    dd:41:0b:b7:08:71:d0:8b:e3:2b:b8:0a:a5:6f:6d:
                    7c:1d:2b:57:4e:9b:da:7a:bc:65:a8:e1:b6:35:78:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F7:14:FD:BE:23:B1:66:BC:7B:52:E7:57:83:87:62:6F:5B:AE:BC
            X509v3 Authority Key Identifier:
                keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:11:34:8b:2a:f4:d9:ef:e4:62:eb:43:19:55:bd:95:c7:db:
         71:d7:89:39:c5:f1:b2:b5:4f:dd:02:34:b3:86:40:bf:e6:59:
         7a:ba:0d:d6:99:bd:9e:de:ef:99:2c:7b:b1:0b:3d:7b:6e:77:
         74:4e:46:f1:cd:1d:3c:90:2e:bc:8b:45:02:72:07:16:7b:a6:
         03:10:c6:59:ea:b9:4e:41:7c:10:2c:76:57:f4:58:77:ec:6e:
         30:69:3f:c9:28:6d:f1:8e:66:91:a7:c9:05:0b:41:c5:c4:1b:
         1d:73:1c:e1:c5:b2:f3:19:6f:17:98:03:0f:d5:08:db:fd:35:
         67:ad:80:9a:61:9f:fe:22:aa:3a:e1:09:d8:a4:ef:91:eb:4e:
         3d:35:22:b8:86:49:50:83:14:a8:cf:7f:30:76:8a:12:72:08:
         06:57:cc:b1:24:e5:50:35:5f:97:03:02:2c:86:15:7e:c6:79:
         c9:9c:7a:a4:1b:92:3b:df:3c:48:19:da:02:29:d8:80:de:f0:
         38:3d:69:a6:76:af:4a:c9:06:0b:11:9e:b0:86:4f:95:f9:54:
         16:3b:12:66:c7:ab:84:ec:df:5d:9f:e2:58:24:ff:7b:c3:5e:
         f3:f7:9d:a6:02:61:75:fa:a5:5d:64:c8:10:da:f4:71:72:a1:
         a0:d8:88:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:04:33 2026 by rpki-client