Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File:                     4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier:          2pSzQnqMP/Ov1bf+gNL3LPRVMEzeIutg5Gecx9X4NqM=
Subject key identifier:   7A:D0:F3:19:65:B5:F6:67:AA:1D:47:8F:AD:33:5B:8B:99:4C:BC:2E
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer:       /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial:       019F8FB5871AAD2F9EF8D410737487C8E868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number:          0C4B
Signing time:             Thu 23 Jul 2026 16:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:06 +0000
Files and hashes:         1: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: JMF0jPUElzFCv71e7+E8qyeKlj+Gg9NKyYDlVy0WOO8=)
                          2: 5F_Lv04RXNd_Y46Aej2XB7OXRCs.roa (hash: OFOrOgL1BwCDJs6vNTJlxJXJgyRTHA3y/UE7TO8d/LM=)
                          3: jn-Hv0IYlCEKrmAbyK_6k7lqISQ.roa (hash: J+qsyRuhmSWKW099fqXxFsiGbbSUDzkgcakOMIwreHQ=)
                          4: oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa (hash: sJuR4lvRXMBU3fcQ7PumT3oOEz1g58/Vsv/QWac8Orc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:87:1a:ad:2f:9e:f8:d4:10:73:74:87:c8:e8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
        Validity
            Not Before: Jul 23 16:01:06 2026 GMT
            Not After : Jul 24 16:01:06 2026 GMT
        Subject: CN=7ad0f31965b5f667aa1d478fad335b8b994cbc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:15:73:ae:b4:8e:f9:0d:a3:8e:65:aa:5e:28:
                    67:e0:12:f9:b3:58:e9:59:5d:20:1d:f9:98:60:89:
                    d5:0f:1c:75:d8:9b:dc:92:1a:30:f4:cb:41:13:b2:
                    af:b8:e2:f4:e9:ab:fd:97:40:5d:a0:2d:95:43:98:
                    6c:5e:d1:9e:15:62:27:93:40:69:49:29:ed:50:5f:
                    f1:78:cd:f3:25:d2:00:c0:0f:8c:1c:50:bb:b9:18:
                    25:cc:fc:59:c7:b0:02:ff:55:34:01:91:aa:7a:04:
                    5f:69:a2:72:ba:91:e7:5c:66:38:ab:1c:fd:a5:3a:
                    b1:f4:d9:cc:ad:ae:c7:fd:c5:78:79:af:2e:61:df:
                    e6:5b:88:46:13:cb:05:7e:39:21:14:d5:66:c4:ff:
                    55:45:d3:25:2c:ad:60:bc:44:8b:9d:1b:b0:07:fa:
                    5d:92:e3:6e:3a:d4:98:fc:c8:46:01:23:8b:bc:56:
                    6a:88:50:a6:12:6b:f4:f0:f7:25:df:a5:bd:5b:5e:
                    63:bd:26:e6:8a:14:1f:22:e3:06:2a:49:6f:7c:19:
                    d3:dc:be:a6:a8:0c:88:c3:90:e8:54:e1:1a:0d:cf:
                    f0:0e:02:6b:7b:1a:7f:6b:0d:54:34:c5:64:64:bc:
                    41:c8:60:56:e1:cd:95:fb:07:6e:c2:d7:21:c9:89:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D0:F3:19:65:B5:F6:67:AA:1D:47:8F:AD:33:5B:8B:99:4C:BC:2E
            X509v3 Authority Key Identifier:
                keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2d:5b:53:e0:ab:58:ec:54:19:ae:ab:54:61:de:7b:e7:45:
         71:ff:61:c6:56:27:54:b8:91:f8:e3:bc:6c:0b:a9:51:24:1f:
         07:d2:09:06:cd:4c:f7:0a:f9:06:24:52:6a:95:7c:12:14:4d:
         b3:ed:a6:79:55:92:37:1f:17:b6:db:cd:85:19:67:37:46:9b:
         0b:02:3a:2a:19:0d:f4:75:c4:bd:fe:0e:b8:4b:21:54:db:b1:
         b0:f1:62:67:9a:1c:37:70:e3:cd:f1:a1:1a:07:76:80:46:33:
         2b:3e:ae:10:0f:cb:cb:4a:7c:3a:86:c8:a1:51:a9:12:63:c2:
         27:4b:e8:55:87:dd:b5:bb:8f:53:88:d6:3e:83:60:31:ed:57:
         44:ca:e7:84:79:61:4f:49:ad:54:d5:e4:ac:89:13:4f:fe:18:
         18:23:45:49:7c:b7:30:d3:f1:1c:a0:c6:38:d6:e3:6a:c6:64:
         53:44:ec:4d:7a:5b:ae:15:51:79:56:35:85:22:5c:50:ab:c2:
         7c:f3:03:a4:d9:30:2e:be:62:13:af:5f:22:4a:13:5c:2c:f9:
         5c:b5:38:54:45:da:f1:18:90:ee:df:53:6a:1c:b0:a4:e8:f6:
         47:ef:70:b7:15:67:a5:3b:78:66:fe:dc:9c:b6:91:1f:a7:51:
         97:d3:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:02 2026 by rpki-client