Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
File:                     4MZJtmoZ2i_sI2sEndEioO82iw8.mft (raw, json)
Hash identifier:          pUiHksWHk/sowPel7QnQn9bTrJWDCbuPmxIe0FnZ7bA=
Subject key identifier:   B5:FA:B3:BB:1F:D1:91:BF:7D:36:5D:6C:EB:36:84:06:EC:56:DA:A5
Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
Certificate issuer:       /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Certificate serial:       019F8EA2E7C7D04EAD7B9EF38768B55E05AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
Manifest number:          02B6
Signing time:             Thu 23 Jul 2026 11:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:08 +0000
Files and hashes:         1: 4MZJtmoZ2i_sI2sEndEioO82iw8.crl (hash: GJU4WwsMAVX3jR5bOkdFtSjX+2w/LX+2C7CJsWTKxf8=)
                          2: iQFBjQMYNTTJ2jk6e5feOS_a39s.roa (hash: GqVM6J5PfB8C9Ws9x090WHFvEBb+mt5HYBg+7QoW2vE=)
                          3: sSUeiTuTscB37GhFxmHCikkgWjE.asa (hash: Kd5QYpqifnyO+2uyl3rYd5x9cU744aPeXurfnyMHjoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:e7:c7:d0:4e:ad:7b:9e:f3:87:68:b5:5e:05:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
        Validity
            Not Before: Jul 23 11:01:08 2026 GMT
            Not After : Jul 24 11:01:08 2026 GMT
        Subject: CN=b5fab3bb1fd191bf7d365d6ceb368406ec56daa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:92:62:98:07:e1:de:ba:39:fa:b0:93:d1:
                    eb:df:78:ed:5c:a4:1d:5f:5f:8f:89:c8:2b:2b:20:
                    26:d3:ab:0e:42:a8:b7:8c:1a:cb:1a:23:00:29:d4:
                    ad:51:73:22:e3:b6:4f:0d:1e:03:fb:d9:02:96:90:
                    05:59:09:11:a0:b4:2e:1f:89:f9:5e:9d:df:fc:78:
                    cc:2a:29:6e:3d:eb:25:4a:1f:62:2e:3e:b4:90:3b:
                    1c:88:49:ee:97:aa:7f:97:87:f2:0f:8a:92:aa:22:
                    4a:d8:5d:20:18:a4:7a:55:ef:03:d7:10:f0:8a:f9:
                    e3:1a:a1:c0:c7:a4:51:73:b8:d4:f3:e2:ff:a6:88:
                    71:31:d4:9f:1d:e5:dc:e9:17:b5:93:16:d0:a7:4c:
                    54:a7:cb:7c:b4:da:0e:4f:19:a5:3f:18:a8:b6:7f:
                    46:ee:5e:7e:47:3d:e1:9e:4d:ab:94:b5:ed:3e:5c:
                    bf:d1:e8:56:b9:0f:da:fe:80:d8:08:01:bb:e1:cc:
                    f6:e7:95:ce:b7:34:2c:b5:4f:ba:3a:0f:c6:a0:31:
                    b3:fe:6c:db:38:b2:50:93:56:44:89:0c:25:fa:6d:
                    dd:6b:aa:50:f1:75:b8:e4:76:1d:89:05:f7:7c:2a:
                    13:68:98:f4:fa:0f:a8:83:89:2d:ce:9b:02:ce:ed:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FA:B3:BB:1F:D1:91:BF:7D:36:5D:6C:EB:36:84:06:EC:56:DA:A5
            X509v3 Authority Key Identifier:
                keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e0:85:d0:bf:a1:31:e6:fd:1d:40:b3:89:a2:5b:9a:14:17:
         90:5b:8c:fa:e9:29:d4:3f:12:6a:42:7f:de:a7:50:cc:d3:17:
         99:99:49:5a:34:53:4b:11:19:52:c1:e5:62:b7:cf:24:16:04:
         52:9b:7b:3c:25:2d:4c:fb:52:df:2e:1a:89:53:90:d5:03:6e:
         a7:3c:8d:ab:ae:e9:ce:a4:74:54:fa:0f:88:6a:75:0b:33:6e:
         9e:98:e1:6e:7f:b5:3b:90:4d:2d:9a:94:c9:25:85:45:ae:ce:
         83:da:07:db:3e:74:a1:9d:5f:83:87:7c:97:25:3c:d9:60:46:
         4c:76:a9:8a:cb:15:1a:7d:82:f5:a5:c4:6b:00:92:ea:fb:ec:
         4a:ac:63:57:b4:5d:cb:39:6c:30:dc:0c:cb:c4:19:f2:35:59:
         ad:19:2a:3a:8a:fd:14:00:95:b8:5b:e7:be:ee:e6:80:ab:5e:
         f4:7b:7f:43:52:e1:30:ac:34:79:49:36:91:20:93:b2:27:54:
         9f:dc:13:bb:ac:fa:5e:30:c7:a3:45:cd:30:66:f5:6d:59:00:
         3e:65:66:2c:d5:53:92:a7:c6:93:e0:d9:a4:11:d2:77:25:53:
         3e:2f:69:af:19:88:6a:56:2a:34:70:c2:5c:4a:18:b8:88:3c:
         74:16:cb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:51 2026 by rpki-client