Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
File:                     4YpwGxuHPrjfflleMt8fBxMJ4vE.mft (raw, json)
Hash identifier:          mrmROZ90GwJfds5rXIDWl/pXidtJ0nmhMDpMrxthgW0=
Subject key identifier:   2E:34:CB:B3:BD:85:D2:D3:26:D1:6D:BF:15:BC:84:54:4F:15:75:CC
Authority key identifier: E1:8A:70:1B:1B:87:3E:B8:DF:7E:59:5E:32:DF:1F:07:13:09:E2:F1
Certificate issuer:       /CN=e18a701b1b873eb8df7e595e32df1f071309e2f1
Certificate serial:       019F92EDC46CCDDD4A0251BD43422361E3F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
Manifest number:          01F8
Signing time:             Fri 24 Jul 2026 07:01:23 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:23 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:23 +0000
Files and hashes:         1: 4YpwGxuHPrjfflleMt8fBxMJ4vE.crl (hash: OlQEg63xSpj2lsEj0Gkz/aX44dH2yuhrNolqm0g3XUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:c4:6c:cd:dd:4a:02:51:bd:43:42:23:61:e3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18a701b1b873eb8df7e595e32df1f071309e2f1
        Validity
            Not Before: Jul 24 07:01:23 2026 GMT
            Not After : Jul 25 07:01:23 2026 GMT
        Subject: CN=2e34cbb3bd85d2d326d16dbf15bc84544f1575cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:33:15:e4:ed:d1:78:4c:14:95:43:18:bc:
                    fe:30:e3:c8:f4:9b:77:d9:81:c3:43:74:9d:d7:e7:
                    c4:f1:ad:fb:4b:85:c6:04:b9:45:fd:a2:72:b5:70:
                    ac:f4:dc:94:00:f4:95:60:df:c9:28:44:60:51:eb:
                    a4:e5:ed:46:67:f9:37:87:e9:59:4f:8b:0b:75:cc:
                    a7:61:39:4b:32:40:94:76:31:04:e6:10:66:df:e9:
                    ee:77:d6:f0:f2:7a:f6:fc:0e:64:16:bf:f3:f9:83:
                    aa:0f:ed:31:b6:7b:89:cd:c4:26:e2:a0:35:d3:47:
                    16:f2:99:79:4b:db:ed:41:26:2f:8c:b1:bf:1d:34:
                    ab:87:9d:06:ae:23:0f:90:8b:be:41:7e:d1:3f:1f:
                    84:27:4d:ae:48:ca:3e:07:7b:22:90:38:5c:7b:bf:
                    1b:b7:a3:76:e2:da:1e:e0:dd:ab:ad:0e:bd:75:15:
                    2f:ee:e4:e4:b2:79:a8:fa:d7:1c:8d:1d:bd:46:93:
                    f0:12:40:80:eb:4e:07:1b:3c:b0:46:56:b8:d1:a6:
                    1b:ca:71:58:ef:c5:87:76:7f:cc:0b:a8:a6:40:35:
                    52:b3:f6:4e:c6:1a:73:40:5d:39:00:cd:4b:42:89:
                    22:26:4b:ae:7a:c6:3f:2d:17:ed:68:a1:85:ae:cc:
                    99:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:34:CB:B3:BD:85:D2:D3:26:D1:6D:BF:15:BC:84:54:4F:15:75:CC
            X509v3 Authority Key Identifier:
                keyid:E1:8A:70:1B:1B:87:3E:B8:DF:7E:59:5E:32:DF:1F:07:13:09:E2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f5:49:68:1c:e9:b0:05:d0:9e:13:20:e3:5d:8b:92:50:8e:
         d5:0b:34:08:2b:49:3b:8f:f3:b0:0d:9b:a8:b4:aa:c8:cf:27:
         fb:0d:94:e9:84:7c:49:22:6f:19:1f:53:12:70:62:b1:21:df:
         d3:80:e1:32:03:9a:aa:10:00:c0:93:a4:1a:b7:f2:38:50:32:
         b5:92:69:21:f2:8c:ef:2e:ce:b0:14:d4:4d:e1:42:81:e9:43:
         a9:5d:9b:c5:b1:d4:bf:fd:20:c8:ea:60:6c:91:a3:1a:e0:e3:
         67:46:0a:52:63:c7:df:84:97:44:b4:12:7e:ee:85:26:e0:26:
         f4:9b:3f:28:f0:b2:f4:7e:e1:d3:99:7f:dd:69:15:f0:50:5c:
         9b:53:45:59:2f:58:e1:0e:46:cd:a3:2f:77:92:c3:53:0d:2a:
         c6:19:34:be:91:b2:1c:68:e5:fb:2d:cc:7d:28:1b:3a:19:ad:
         32:b2:56:8c:e8:06:c8:54:87:86:80:24:51:ef:02:db:f0:a7:
         43:5c:09:e8:9a:9f:14:7c:26:e0:f9:a9:ca:b2:c3:b7:3a:2b:
         24:62:87:f3:19:fc:88:a0:b8:97:fc:86:1b:f7:33:25:1c:54:
         f8:8d:8e:7e:1d:0d:fc:ea:29:a6:46:6c:c7:3e:4e:8e:fc:d0:
         0c:fd:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:21:03 2026 by rpki-client