Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File:                     4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier:          53G/2C0FmVGW7L4SV9F04/AXy0ynl0+VocSBOifrd8U=
Subject key identifier:   E3:81:00:0E:3B:21:C0:14:47:32:B9:52:5C:54:9D:09:F1:74:E7:B4
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer:       /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial:       019F9022E901B3FAEE5E3AD98A3B745B659B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number:          069B
Signing time:             Thu 23 Jul 2026 18:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:34 +0000
Files and hashes:         1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: kZ8Olcowc9kzpe1XP+6l3FCHLQLACzZg1Vyqn8VUja0=)
                          2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:e9:01:b3:fa:ee:5e:3a:d9:8a:3b:74:5b:65:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
        Validity
            Not Before: Jul 23 18:00:34 2026 GMT
            Not After : Jul 24 18:00:34 2026 GMT
        Subject: CN=e381000e3b21c0144732b9525c549d09f174e7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:56:78:1e:16:68:32:d8:0b:53:7c:ca:a8:
                    b9:95:28:c3:9a:d6:2e:9b:b6:a9:65:eb:73:79:4f:
                    09:c4:d9:d6:bc:2a:5e:47:b5:c8:39:9a:1d:72:6b:
                    e6:03:6a:1a:95:a6:11:44:94:00:42:e1:62:48:c2:
                    80:d8:4b:bd:91:cf:c2:79:2c:b6:80:be:7b:b7:f1:
                    55:c0:6f:46:c8:9f:68:a7:41:f6:77:b6:3f:6f:45:
                    19:1b:f0:98:f8:d1:78:6c:1d:5c:40:19:ae:97:ed:
                    7f:a1:88:c5:f4:7d:8d:d2:84:09:a9:86:6b:5c:4f:
                    ff:6e:fc:2d:5d:8d:5e:0b:82:47:9e:22:c5:06:44:
                    53:fa:a0:1a:ea:ac:2b:f0:d6:12:89:08:c7:3c:a8:
                    38:e4:4c:31:0b:78:63:a5:54:54:83:d7:f7:92:f2:
                    ad:dc:11:6a:8a:20:c7:1c:df:28:75:27:cf:e7:a6:
                    b6:0f:88:ed:e5:50:43:4c:b6:db:9c:8d:f1:14:91:
                    28:dc:8c:92:c9:98:31:44:8c:0d:43:86:49:30:d3:
                    b6:10:ff:df:42:7c:7d:54:9c:d9:69:52:d4:0a:d0:
                    1b:e5:8e:7e:63:d2:c0:9f:9c:5a:58:3b:c5:3a:14:
                    76:f1:a7:b3:6a:4e:aa:e1:c2:41:6d:0b:11:8c:ef:
                    39:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:81:00:0E:3B:21:C0:14:47:32:B9:52:5C:54:9D:09:F1:74:E7:B4
            X509v3 Authority Key Identifier:
                keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:95:02:00:a9:0b:54:f0:82:4d:d7:19:1c:37:d4:50:16:34:
         19:d6:51:0f:66:3a:1a:23:ee:7b:04:07:62:6a:d9:ea:54:67:
         22:4f:90:82:92:4c:5a:34:94:98:aa:b0:d3:d3:6c:56:06:50:
         1d:f7:60:a1:12:78:a2:25:7a:10:25:ee:d6:97:88:19:71:e6:
         94:37:02:9e:31:c9:35:ce:05:9b:47:21:c4:db:6a:31:57:ac:
         91:b3:27:55:4c:ab:18:93:ac:16:aa:c0:a7:33:2f:d6:5e:38:
         28:e5:59:54:53:74:41:10:b1:b2:33:1f:b7:87:38:ea:80:51:
         9d:0b:f8:cf:d4:3a:8c:25:14:9a:99:01:b6:53:75:89:b0:5c:
         78:a2:a9:25:49:7d:78:24:c0:4f:c2:78:3e:20:fb:30:47:cd:
         76:af:1e:35:c7:0a:b8:92:02:51:51:be:61:c6:bd:31:4b:72:
         8c:40:66:d2:a0:9d:cc:be:e2:5a:2a:02:82:f6:8b:97:14:19:
         3e:2f:31:6e:56:65:67:3c:3c:b8:89:87:10:cf:51:77:e2:19:
         e9:84:d9:ad:97:82:a8:1b:59:b7:d7:2e:5e:a8:10:09:3e:f3:
         b7:7a:f5:8b:85:58:02:0b:18:9b:1d:2d:86:fd:60:24:78:af:
         c9:7e:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:17 2026 by rpki-client