Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
File:                     Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json)
Hash identifier:          JBEYXabIw1rUJO/xiAFEz9eaHMIIMuCg7rfMtLke/cg=
Subject key identifier:   39:8A:61:A1:C6:72:4A:36:28:0B:FA:B1:86:3F:6B:B5:91:BF:07:1A
Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
Certificate issuer:       /CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Certificate serial:       019F9580C32CB05F196F308801566CD32BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
Manifest number:          10AD
Signing time:             Fri 24 Jul 2026 19:01:11 +0000
Manifest this update:     Fri 24 Jul 2026 19:01:11 +0000
Manifest next update:     Sat 25 Jul 2026 19:01:11 +0000
Files and hashes:         1: 62TElGWuqEvmUBYUDm2rqBVV3SI.roa (hash: ++jh63cRE49FQOgqKwdj8ZqTaSpiNnUmGEZfxLXUxs8=)
                          2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: qme8WoFGq3r1vABhC8QUrvqm+rv6ZcqJJRGAFMp/30Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:c3:2c:b0:5f:19:6f:30:88:01:56:6c:d3:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507
        Validity
            Not Before: Jul 24 19:01:11 2026 GMT
            Not After : Jul 25 19:01:11 2026 GMT
        Subject: CN=398a61a1c6724a36280bfab1863f6bb591bf071a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:91:9d:49:d5:fa:5b:98:86:80:1e:0f:c6:69:
                    e3:59:f4:46:5c:c1:cd:f4:b5:b2:37:06:8c:e4:98:
                    fc:f6:4f:bc:ed:8d:58:de:77:ca:39:3c:e0:78:07:
                    6e:c6:77:66:0b:e5:c1:e0:8e:eb:4a:e2:d4:bc:a1:
                    76:0f:25:69:ac:f5:03:73:8e:43:9d:12:d3:fa:56:
                    8d:0d:ac:6a:9b:44:63:c6:dd:d2:e2:b6:b7:1b:de:
                    67:db:91:a1:5f:1f:71:4e:e9:8b:30:73:f1:c2:b3:
                    8a:a4:61:6b:f8:43:2d:29:b1:b0:b7:45:96:73:1b:
                    af:00:0c:9b:00:d5:e8:46:64:b0:9e:9b:bf:94:c3:
                    5f:45:ee:57:69:37:01:92:4d:85:7e:ff:62:62:b9:
                    fb:b7:38:e3:63:2b:11:51:32:92:10:30:9c:5a:75:
                    32:c2:de:c4:ef:4e:50:63:99:7d:24:aa:8f:1e:1c:
                    c0:fd:44:f5:ee:3f:37:4b:1f:58:2c:00:44:30:32:
                    9e:e4:4e:a5:27:66:36:b0:1b:0a:a6:02:22:ef:c3:
                    33:24:c6:d8:17:75:cf:33:d1:92:3f:a9:c9:ce:03:
                    e9:9b:ae:da:e5:26:07:02:68:26:80:e8:91:2a:1c:
                    27:86:aa:83:96:e6:87:99:20:04:f1:f2:0c:4a:b7:
                    53:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8A:61:A1:C6:72:4A:36:28:0B:FA:B1:86:3F:6B:B5:91:BF:07:1A
            X509v3 Authority Key Identifier:
                keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7e:89:2b:2a:80:c4:91:2c:c7:1f:12:e7:6c:e1:e9:80:a2:
         6a:75:15:5c:77:16:73:66:b2:c1:5d:11:03:6c:4e:85:65:4c:
         6f:7d:17:eb:9f:e7:29:8f:e7:cd:ea:27:85:b6:d2:36:d9:2e:
         f5:cb:e8:1f:31:72:5c:65:ec:e0:e1:10:9f:4a:69:b6:1b:a5:
         bb:bc:16:36:55:0c:dc:2d:8b:ea:81:0e:63:71:f0:4b:a0:88:
         96:c2:59:a1:68:ec:a3:c9:08:e1:d0:24:c1:bf:ed:83:6a:f7:
         bd:ed:f1:ec:aa:9d:20:d8:5d:99:91:21:1b:e1:c5:59:7b:d0:
         14:e1:25:e7:ee:9a:cc:d6:92:19:24:1d:17:b7:d0:47:d5:35:
         74:77:a9:6a:47:48:b1:75:9d:b9:f6:b6:d4:f4:2b:cf:94:fa:
         62:39:fa:28:4a:b7:93:3c:71:c7:2e:42:47:a0:b1:55:7a:63:
         29:d3:51:de:65:0a:9e:fd:aa:a9:f9:bb:db:d6:cd:ec:05:75:
         42:7e:bb:84:f8:6b:67:03:f7:30:19:f3:73:84:6a:a1:b0:12:
         f0:4d:8a:64:c6:bf:38:77:e7:f6:10:0f:cd:3f:50:28:1d:54:
         e8:98:2a:78:03:4f:d1:37:f7:f6:f9:cf:fb:25:47:f2:1d:59:
         ce:ac:6d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:16:22 2026 by rpki-client