Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
File:                     4sFE7jL911AT5_G4wtgH09rti74.mft (raw, json)
Hash identifier:          Pd5+CbQ9Dx8WxAnUMLxurGAeSUAXRNCu9BQ+ql62kwk=
Subject key identifier:   6C:13:C0:B7:08:85:D7:39:93:5A:FA:78:F1:EF:DB:EB:B1:77:97:23
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Certificate issuer:       /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial:       019F9624B7BEE403BE71EC3301EE308A0636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 22:00:16 +0000
Manifest this update:     Fri 24 Jul 2026 22:00:16 +0000
Manifest next update:     Sat 25 Jul 2026 22:00:16 +0000
Files and hashes:         1: 4sFE7jL911AT5_G4wtgH09rti74.crl (hash: FI7lboYhW5LV9Q/qDpk0zKzD1t5X1WlZQbRQR3cljx8=)
                          2: qimpL4GnPOyoUuwHADETW2Ca-BA.roa (hash: 1Q13z0RPNiBFNEdoqsP4b2RZwfD+sGSDYlp0PmV8cak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:24:b7:be:e4:03:be:71:ec:33:01:ee:30:8a:06:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
        Validity
            Not Before: Jul 24 22:00:16 2026 GMT
            Not After : Jul 25 22:00:16 2026 GMT
        Subject: CN=6c13c0b70885d739935afa78f1efdbebb1779723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:ea:c8:cf:e5:f5:31:cc:0a:d8:5a:c9:31:
                    35:88:0a:33:2a:16:b1:a4:32:35:5e:85:8a:9f:98:
                    b7:2c:47:8e:97:4b:0c:ab:f4:3c:b0:75:54:43:72:
                    55:6e:89:c8:51:c8:f8:ad:e4:6a:c5:fc:3e:18:b3:
                    6a:1e:be:2c:31:60:85:20:0a:e3:81:fb:80:89:af:
                    73:1a:17:82:ec:99:cc:06:92:e5:55:58:5b:dc:7f:
                    6a:f9:fe:36:87:fe:12:8c:ac:49:6c:89:d3:70:ca:
                    a9:87:11:db:10:2e:03:60:0d:32:66:3c:57:50:cc:
                    47:d6:6e:ed:e3:f9:82:86:f5:41:2a:4b:81:64:2e:
                    5a:83:91:ae:50:af:9f:c3:d4:36:13:30:f0:b5:58:
                    a3:6f:4e:75:ce:ca:12:15:8a:b6:ab:e0:30:17:c2:
                    a7:d8:53:ec:31:98:02:56:00:c9:d9:65:23:61:08:
                    34:d5:b8:f6:dd:a3:e8:45:e9:a7:7e:b8:20:53:57:
                    36:70:ae:d2:69:29:96:7d:e7:24:26:a8:e9:db:b2:
                    d2:e5:ab:d8:f9:3d:d5:c1:53:8f:ef:1b:f2:08:17:
                    8f:0f:6c:44:6d:2c:99:ff:ea:e0:2a:29:c9:dd:43:
                    82:ec:e3:85:ea:69:19:89:98:46:3b:d9:64:fd:44:
                    70:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:13:C0:B7:08:85:D7:39:93:5A:FA:78:F1:EF:DB:EB:B1:77:97:23
            X509v3 Authority Key Identifier:
                keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:4b:81:be:c1:cf:ae:f3:7b:dd:5b:4e:80:7a:04:7b:1c:
         a6:08:2d:74:51:cb:47:32:21:fc:2c:ca:65:24:75:40:02:e6:
         ef:9b:6d:c6:1e:73:79:d4:95:03:e5:9b:ef:8c:2f:a3:a6:bf:
         43:56:65:1a:b5:5e:3b:23:f9:7b:64:18:95:b1:80:4f:88:bc:
         d8:8a:bb:fc:7a:e9:7a:3c:15:f0:26:d9:46:22:bf:70:f9:83:
         03:80:b6:08:98:20:46:28:bd:43:e4:16:cf:6b:a3:98:5b:a0:
         1a:dc:5c:ed:66:0b:86:79:3a:52:cc:83:3a:8f:2e:29:0f:b0:
         e5:3b:a9:49:e6:75:50:08:a7:a8:38:8b:f6:02:37:69:81:7b:
         ad:f6:bc:dd:ba:29:7c:58:57:7c:77:05:71:bd:d2:7a:5a:fb:
         e8:5f:70:0a:d3:f3:10:71:16:fa:3f:64:62:7e:73:d5:55:3c:
         4d:77:a0:91:cd:56:2d:36:7a:a3:9b:8b:d1:d3:a6:95:71:36:
         0a:b5:6a:d4:b5:dd:7e:72:d5:fe:61:43:05:07:ae:f8:40:7c:
         77:97:0c:a0:f8:11:0e:80:59:da:ef:80:58:b9:41:d1:ca:2f:
         eb:2f:6a:42:b7:89:6e:ff:d4:eb:ce:7d:26:88:30:80:06:34:
         ae:f7:58:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:38:18 2026 by rpki-client