Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
File:                     4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json)
Hash identifier:          IJsJhwsUJ7Bn7EKdyaZkTtrzzMiXFOE2BaB3frz0iPM=
Subject key identifier:   09:22:71:49:8A:F6:B0:96:CF:FA:68:16:54:94:09:AC:50:19:34:E7
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Certificate issuer:       /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial:       019F9059C95D21A0C33D20335EC73BF8B2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
Manifest number:          0927
Signing time:             Thu 23 Jul 2026 19:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:31 +0000
Files and hashes:         1: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: lxHIGI5JtLnZGLBdFegISB9qI/B39PBUmkl97Wyc0Aw=)
                          2: H6upOznQhofNUsVU2B_mxPFx27c.roa (hash: NbOHDEswfXC4+5bjThUvhDuggTWbfuZ/HmS5egmK918=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:c9:5d:21:a0:c3:3d:20:33:5e:c7:3b:f8:b2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
        Validity
            Not Before: Jul 23 19:00:31 2026 GMT
            Not After : Jul 24 19:00:31 2026 GMT
        Subject: CN=092271498af6b096cffa6816549409ac501934e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:73:eb:89:3d:e0:32:4d:cd:0c:79:01:d1:
                    0d:0b:14:30:82:5c:0c:1e:fa:d8:30:97:07:75:2d:
                    5b:c6:84:4d:c2:f3:ca:43:71:84:f4:cd:07:6b:6e:
                    af:c1:97:18:43:54:d4:2b:c9:99:67:3f:74:22:f4:
                    3c:33:89:60:b2:d0:0f:fa:45:89:1d:1f:69:ec:6b:
                    cc:04:4d:5e:46:d2:67:ca:bd:a7:86:1a:67:2e:65:
                    66:ad:a0:65:c4:3e:29:6f:46:7e:29:ed:ea:68:22:
                    8b:42:2c:51:82:76:b8:f3:56:50:ab:b1:15:80:84:
                    04:e4:7b:9e:03:5c:3e:a8:13:b5:7d:54:6d:3d:45:
                    dd:ca:b8:bb:31:0c:a0:54:8b:19:81:b7:9f:96:40:
                    9f:cf:8f:71:8d:28:77:13:54:b5:b9:e1:b0:6b:2b:
                    69:0c:8f:7d:ba:28:30:7d:44:3c:66:e2:d7:8d:2a:
                    e4:15:58:a1:21:3f:fa:a8:74:09:15:10:f3:0b:60:
                    a5:bc:80:e1:11:01:ad:73:b6:1c:b0:6f:bd:11:3a:
                    cd:8e:85:02:7d:da:d7:8c:b5:63:e1:a6:9c:ef:61:
                    d3:58:d4:df:d8:20:1e:16:1f:e2:fe:0a:14:44:de:
                    d5:2c:99:29:a0:ae:23:eb:33:32:91:17:ad:3d:3b:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:22:71:49:8A:F6:B0:96:CF:FA:68:16:54:94:09:AC:50:19:34:E7
            X509v3 Authority Key Identifier:
                keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2f:aa:db:54:b8:cc:65:a4:c8:a4:30:c9:9c:d1:63:8e:da:
         e1:f5:6d:cd:af:83:b4:2f:7c:34:76:da:03:2f:bb:78:bf:90:
         6e:4a:e2:e2:54:39:39:3f:d4:6b:23:3e:aa:28:25:21:1e:69:
         48:3c:ec:09:36:b6:9d:44:50:95:29:5d:9e:ca:bb:87:70:ff:
         08:f2:23:68:96:42:05:43:7b:03:36:2d:e4:d7:02:e3:d5:08:
         62:4f:68:1f:bf:3b:bb:30:f8:50:f6:b8:4b:a8:1b:02:58:7f:
         c1:5a:d0:81:92:f6:48:7f:40:a8:27:5f:71:02:d3:ce:4f:3d:
         a4:64:f1:66:46:70:bb:ea:24:a6:d8:24:b1:5c:5e:5c:70:8e:
         38:35:3e:d4:8d:cf:9b:88:13:fe:74:3e:ef:75:85:59:52:77:
         09:4a:fd:1c:40:5b:e7:60:96:ab:2e:b6:9d:50:be:19:58:31:
         c3:ad:58:17:0e:87:52:47:f3:70:82:ec:87:25:08:cb:c3:57:
         cd:29:b1:b8:00:ee:ef:4d:2f:50:a6:ce:49:d9:0b:f9:e7:35:
         41:28:94:2d:50:ed:86:ee:2c:e8:0e:85:cc:b0:b8:f4:6a:a6:
         5a:55:84:a6:e6:67:02:51:a4:6b:96:d4:e2:9b:34:78:80:61:
         a7:d9:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:46 2026 by rpki-client