Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File:                     4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier:          otClzwdA1K+QfF7cJ1nYWenzwvDJz/0tahDwJtVBKZU=
Subject key identifier:   02:C0:96:13:DB:E4:D0:8F:AB:DD:3D:C1:16:3D:0E:C9:94:A7:87:C3
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer:       /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial:       019F909133CB565159AC62B87CF75822CA4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 20:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:02 +0000
Files and hashes:         1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: upjBGdlji1QW/15FKUsvoj0Dh99qgvO3+lO2pAfLhas=)
                          2: SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa (hash: rmE3xiiuA8FInWGbe7SdLUBpAe5mfXQkxmyusGShZtQ=)
                          3: XphaguuWFSP8UQVU9jupgKQKPTw.roa (hash: 7KRxLds07r+kpPQbo12VWuWgRVl+sWP2XMsAOWnoAcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:33:cb:56:51:59:ac:62:b8:7c:f7:58:22:ca:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
        Validity
            Not Before: Jul 23 20:01:02 2026 GMT
            Not After : Jul 24 20:01:02 2026 GMT
        Subject: CN=02c09613dbe4d08fabdd3dc1163d0ec994a787c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:8c:55:2f:b2:ef:c3:a8:9a:53:15:18:b3:
                    b0:cf:20:9c:5d:63:c4:bc:c5:fd:87:41:1b:ab:3f:
                    72:94:b1:f7:58:86:e1:bf:a0:b3:8b:22:2f:f7:d7:
                    ce:76:49:23:1d:c1:68:e6:6f:97:9c:23:b8:1a:97:
                    0a:7e:c1:ed:75:2c:b0:e9:b9:af:14:a7:fe:c4:fb:
                    fd:14:21:32:41:b3:a1:d8:06:d5:92:69:82:1c:28:
                    6b:b5:75:7b:2c:84:8a:01:c0:8f:6e:46:8e:5a:28:
                    0a:2c:aa:eb:8e:2b:84:4e:70:04:7e:0a:b2:1d:6d:
                    f4:76:24:87:51:fe:3e:a8:b2:fc:88:de:61:e8:d3:
                    e2:3f:8c:0f:ab:6f:35:05:2f:38:22:4c:23:cd:16:
                    f0:23:7e:94:b4:12:b1:4f:b2:8f:6b:3b:44:cc:30:
                    62:46:39:64:5e:1f:3e:ae:99:3b:0a:21:d0:6d:78:
                    ee:1f:be:6a:23:50:fc:23:29:45:bd:cd:d7:ba:a5:
                    47:8b:b7:2e:9c:ad:66:66:76:ec:fe:a3:50:80:f7:
                    6b:98:a9:fe:89:1d:07:2c:8d:0b:42:54:f0:9c:d3:
                    34:8f:4b:5a:db:0a:32:a4:cb:11:62:5f:e4:34:da:
                    23:71:47:30:49:b6:80:0f:b0:41:3f:6f:f5:0a:99:
                    1c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C0:96:13:DB:E4:D0:8F:AB:DD:3D:C1:16:3D:0E:C9:94:A7:87:C3
            X509v3 Authority Key Identifier:
                keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3c:a5:60:ef:96:80:8e:5f:2e:6c:1e:4f:3a:4a:de:69:51:
         5f:d6:ae:f0:95:05:44:1c:97:a7:4b:a3:7b:1a:4d:2b:6d:9d:
         36:52:ef:44:27:92:41:39:97:e9:4d:6c:6f:29:8c:90:71:51:
         08:c3:d9:91:f2:b7:71:32:99:fe:dc:80:1b:3f:97:5f:23:e4:
         fc:0c:70:52:9c:c0:67:3f:18:c0:25:f1:e1:2c:7d:ba:80:cb:
         48:c6:d0:e1:ad:29:ba:65:03:5c:31:08:0b:95:49:99:44:64:
         e6:47:c8:af:1d:ac:12:99:ed:14:7f:bf:34:f0:b1:18:b9:65:
         d6:4a:fc:7c:f2:82:29:60:cf:b2:6c:12:69:06:6b:d2:64:e0:
         38:ed:10:5f:5c:0c:73:6e:04:d1:92:44:b7:0a:85:9e:4b:8d:
         36:b0:b6:d2:48:19:b1:c0:45:29:94:eb:7a:01:29:fd:79:08:
         d0:31:95:e2:dc:c6:3e:48:cb:89:f6:e9:0e:5c:e8:f2:ae:bd:
         ad:dd:22:c5:47:13:52:58:c9:d7:5b:be:c0:f5:e6:f0:d2:27:
         0c:ac:d1:22:a8:d0:55:dc:9a:7e:9c:ae:e6:07:d8:44:9c:0a:
         95:89:c2:60:ee:db:99:f3:36:fc:04:c4:91:65:a9:20:aa:55:
         95:31:75:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:12:35 2026 by rpki-client