Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File:                     4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier:          6e82wmtdkIC6usQMwTBU9MQ2Gj04PHGkWMuYHiKD/CQ=
Subject key identifier:   6E:46:E5:EE:1D:A2:DD:A1:0E:54:C6:F0:CD:2D:E6:90:DA:4A:BB:3F
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer:       /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial:       019F913558F9F5EAD3C2EA26D375AEB24FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number:          19D0
Signing time:             Thu 23 Jul 2026 23:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:20 +0000
Files and hashes:         1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: 55G7U+iOY4nE0teRVR703VTwwHENZb3sWECW90mTZ/I=)
                          2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=)
                          3: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=)
                          4: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=)
                          5: mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa (hash: CKUhSDm/qBK/JCbTgbEQJEgA0HKSbKEajcNdo2qCwys=)
                          6: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=)
                          7: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:58:f9:f5:ea:d3:c2:ea:26:d3:75:ae:b2:4f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
        Validity
            Not Before: Jul 23 23:00:20 2026 GMT
            Not After : Jul 24 23:00:20 2026 GMT
        Subject: CN=6e46e5ee1da2dda10e54c6f0cd2de690da4abb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:df:52:96:c5:f0:6f:d5:64:7e:61:2d:43:
                    e5:60:9d:d6:65:f0:e5:38:83:bb:bc:bd:18:36:2b:
                    0e:2d:b8:b4:db:aa:ce:41:01:23:33:90:e0:44:8e:
                    76:f4:7f:d9:e4:a1:7c:e4:3f:f3:b3:bc:f3:e8:06:
                    d6:20:1b:9c:d1:ba:9e:03:61:b4:7e:de:c7:bb:f9:
                    90:37:fe:6d:ee:fb:03:98:b8:7f:96:d1:d2:1e:43:
                    af:08:0d:e8:41:a9:01:73:78:d8:61:d8:b2:52:4e:
                    c3:b2:26:1e:20:0b:a0:01:d7:96:17:20:5c:3e:a3:
                    4c:0e:01:af:4d:d3:19:a0:ed:01:4f:04:de:f5:38:
                    ce:07:3b:6d:b7:9c:d6:15:7a:23:2a:23:66:c4:ef:
                    d4:f3:f3:66:96:bc:5a:b6:32:24:07:d6:44:b7:70:
                    96:c8:4e:d2:4f:30:da:ed:c0:3d:73:f9:22:cd:54:
                    47:10:f7:60:61:40:3a:63:78:f8:a2:ef:67:21:ef:
                    b4:30:55:f7:4e:ee:e9:7b:f3:84:45:58:8a:00:6e:
                    64:28:18:51:f8:b1:2d:9c:02:37:4b:81:52:5c:76:
                    3d:3b:82:84:7b:09:a6:72:fa:7b:67:56:01:58:fe:
                    1e:1c:2f:fd:97:2c:07:d7:09:9d:16:cb:11:2d:58:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:46:E5:EE:1D:A2:DD:A1:0E:54:C6:F0:CD:2D:E6:90:DA:4A:BB:3F
            X509v3 Authority Key Identifier:
                keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e0:a3:fd:59:27:20:2b:2c:1d:19:25:d5:96:e5:13:22:e0:
         0e:6b:c7:a4:b4:30:18:66:4a:24:67:a6:a8:44:3b:09:6f:68:
         05:81:f2:23:7e:b0:13:73:63:4c:8d:a3:49:82:ee:f9:66:94:
         16:c8:7c:06:2e:7f:78:db:ce:47:84:bb:31:c7:18:d4:c6:0d:
         74:3a:d6:7a:64:07:af:9b:3c:3f:6f:78:98:04:5e:dd:42:64:
         c9:7d:86:09:be:02:a5:3a:4e:37:be:5e:23:69:20:0d:0a:04:
         76:23:01:12:00:67:98:23:44:dd:b8:55:5b:67:02:33:ea:6c:
         b3:01:29:0a:bb:de:c5:16:f0:2f:14:28:c7:df:3e:08:93:9a:
         c4:27:bd:2c:5b:d4:91:23:58:4d:3d:3f:4c:20:67:81:e0:3e:
         1d:35:d8:27:4e:2e:46:35:63:2d:13:36:ef:c6:2c:fe:67:06:
         dc:2a:ec:94:c4:51:12:5a:db:3a:d6:18:5e:81:b4:94:3d:84:
         21:46:30:5f:24:4c:c3:74:07:fb:fb:98:c9:b3:9b:3c:aa:8f:
         4e:50:53:39:42:a8:3e:aa:64:ce:96:01:c0:90:e8:df:a0:81:
         f0:1b:ed:02:fb:8b:c1:bc:12:f0:74:c0:c9:2d:6f:97:f7:3c:
         01:0b:3f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:38:19 2026 by rpki-client