Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
File:                     4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json)
Hash identifier:          YZMVsuF/INXV7Lu7j6N5RkihPyEmIoarg5YJFoFLkCA=
Subject key identifier:   19:90:5A:DC:C9:B5:5F:82:30:FC:C4:E8:1A:F5:AE:5B:2F:27:FD:27
Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
Certificate issuer:       /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Certificate serial:       019F91A380307BB235A99615735245B8B812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
Manifest number:          1959
Signing time:             Fri 24 Jul 2026 01:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:39 +0000
Files and hashes:         1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: mn6q8aFHZbtBe3HAjDMmxvyyrY0U0rHnLXSO67Eb9qE=)
                          2: KelGy5FqE-jDU-pEPXMpLcf7VOM.roa (hash: NXCD8cFHqcP6cTa5T44AKZobSHdu2jZzVhofvoBvDgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:80:30:7b:b2:35:a9:96:15:73:52:45:b8:b8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
        Validity
            Not Before: Jul 24 01:00:39 2026 GMT
            Not After : Jul 25 01:00:39 2026 GMT
        Subject: CN=19905adcc9b55f8230fcc4e81af5ae5b2f27fd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:c6:ab:2f:a5:54:18:56:2b:20:57:fd:89:
                    13:1a:29:54:0b:95:98:4e:f6:c7:f8:9b:2b:66:45:
                    d8:ed:65:c5:8d:12:de:9f:60:42:c3:0f:78:9d:74:
                    11:a5:10:b3:38:8e:f3:8b:ab:c1:38:9e:ad:44:af:
                    01:9b:40:87:8d:b0:63:8d:11:c4:fd:f7:32:de:93:
                    00:16:2a:62:cd:97:22:2d:b7:1d:df:2a:08:93:12:
                    fd:8b:cc:5e:69:58:eb:bd:b7:47:ab:86:41:9b:01:
                    33:ee:79:dd:17:c0:0d:80:31:22:8d:c7:37:2a:78:
                    68:d3:cd:b8:f8:05:2e:e8:cd:f1:38:da:39:5a:a2:
                    07:fe:a0:0f:37:f1:38:8d:10:f9:57:50:41:81:6e:
                    a9:16:ca:56:df:29:17:03:72:bd:c1:84:be:64:72:
                    5c:bb:9f:ae:29:45:38:b0:cb:96:09:30:5f:7a:6e:
                    86:2f:16:6f:a9:47:89:67:32:b1:1b:2f:2c:b6:ad:
                    92:8a:d5:41:4c:09:9c:e7:3d:a3:55:4a:e1:0a:34:
                    81:96:5d:d3:cd:53:f9:f8:35:0d:2d:4b:2a:f7:59:
                    30:9e:98:29:d6:17:93:5b:6e:97:d1:8a:75:01:bc:
                    04:67:1f:4e:1a:05:89:1f:ce:31:d4:00:86:f5:d2:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:90:5A:DC:C9:B5:5F:82:30:FC:C4:E8:1A:F5:AE:5B:2F:27:FD:27
            X509v3 Authority Key Identifier:
                keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1f:90:e6:0b:6f:8a:c4:fb:29:04:55:5b:1a:7e:34:d4:c5:
         19:63:f6:ad:04:f1:18:b9:3c:ad:42:f0:8c:9e:65:f8:c9:a7:
         91:3d:4d:0f:ea:b0:0a:46:52:a6:d4:38:fa:cd:9a:34:d6:fd:
         fe:40:96:d8:d6:43:c1:6e:59:6f:8a:21:62:e0:bf:86:74:af:
         14:25:85:0b:8c:4e:4a:4b:fb:25:b0:56:b8:eb:5e:cf:0b:b7:
         3c:18:61:15:30:bf:05:c4:73:64:58:69:60:93:74:c6:56:1d:
         b7:3c:98:25:27:9a:ba:89:34:b1:72:36:da:cb:35:f4:85:1e:
         d1:f1:a0:a0:47:13:98:a7:49:67:ba:d0:fc:6f:25:7c:3e:2a:
         0a:ff:b6:1a:48:6f:d8:ea:f1:db:2a:ac:08:3a:c6:90:89:fd:
         b8:a5:61:e0:bd:6d:92:6a:05:9c:cc:a7:a5:29:99:a4:6f:f5:
         1e:ca:22:d3:85:a2:2d:27:03:84:ac:28:65:c4:94:9d:8c:19:
         5e:63:50:04:f2:ff:12:63:83:2f:f5:5b:da:37:b0:26:1e:2c:
         c8:c2:05:c8:88:4b:d1:d4:66:2a:7a:67:a2:17:c5:75:e7:3f:
         82:92:77:e2:aa:8a:d1:e2:c9:2a:ca:c8:84:8b:d5:49:5c:96:
         27:da:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:10 2026 by rpki-client