Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File:                     4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier:          bEifQxrAoobmsq442UpPcDC8EVtKo3mL/CknRpTdxBI=
Subject key identifier:   78:C5:C2:09:8E:BE:EC:40:60:4E:9D:32:8B:A8:16:D4:2A:CB:1A:AB
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer:       /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial:       019F90C7BFC7E29F17D680C3E4923CD05A80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 21:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:37 +0000
Files and hashes:         1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: NIgBoiMoFNnkW1Izetkj713TKwfj/R12ujgY1F/9A9o=)
                          2: EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa (hash: 9oW73pfxOP8M7veC/PL5Kk4ZUA5njttoIdfA+gSwRO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:bf:c7:e2:9f:17:d6:80:c3:e4:92:3c:d0:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
        Validity
            Not Before: Jul 23 21:00:37 2026 GMT
            Not After : Jul 24 21:00:37 2026 GMT
        Subject: CN=78c5c2098ebeec40604e9d328ba816d42acb1aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:9a:bf:80:96:33:78:63:43:b3:47:39:46:
                    88:2f:36:ef:3e:ee:6e:fb:01:f1:f6:c7:0c:48:89:
                    3c:66:6d:3e:55:78:82:44:f6:de:b1:1c:21:43:2d:
                    65:4e:13:6f:05:7c:83:1d:41:23:69:8e:5b:ab:24:
                    4f:5b:55:0f:b4:d4:8a:43:68:33:4a:47:df:3a:4a:
                    c5:cd:f0:88:db:fc:5a:cc:40:9d:4e:13:5c:1e:63:
                    a7:b5:f5:2a:33:a5:b4:52:d3:ae:d9:47:62:93:89:
                    0b:4a:22:d3:97:81:52:41:93:4c:83:c6:de:4b:1b:
                    48:e6:f3:a6:98:92:4d:6e:84:d8:9c:be:14:33:b1:
                    a7:74:16:2f:32:a0:88:c4:e6:97:49:71:1c:ef:30:
                    dd:53:ef:3c:67:a2:5f:89:27:90:6e:92:16:5d:85:
                    a9:c4:a7:08:3e:04:38:9c:7d:79:c7:2c:0f:9a:7b:
                    03:28:79:86:35:85:0a:d9:4d:b3:f2:0e:e1:ad:27:
                    68:90:12:62:88:ba:71:ac:99:f1:81:44:59:c8:af:
                    0a:01:4d:a0:4d:44:73:25:56:61:8f:23:5e:05:58:
                    b5:9d:94:a6:f3:40:d2:5d:1d:8f:d7:82:07:4a:cb:
                    00:54:01:90:86:9c:98:a9:12:d5:85:4e:58:93:2e:
                    ca:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C5:C2:09:8E:BE:EC:40:60:4E:9D:32:8B:A8:16:D4:2A:CB:1A:AB
            X509v3 Authority Key Identifier:
                keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a1:39:65:9b:cd:94:46:5d:20:26:7d:f5:11:c2:42:db:ee:
         9a:1d:35:de:14:15:6c:4f:5d:3c:94:9c:50:7a:4f:27:75:e5:
         3b:f5:2b:1c:ff:b7:ac:64:a7:fc:8f:18:bd:8a:2c:a6:3c:ec:
         03:76:45:cb:4b:0a:01:c0:f7:86:b1:a1:51:32:35:3f:13:e3:
         7e:50:32:54:57:45:68:b6:d0:12:d6:2b:7c:ae:0d:56:f4:f2:
         fd:76:c4:15:37:a8:63:64:66:17:1b:62:00:51:f7:0d:8d:05:
         ee:b8:51:fb:71:f2:5c:40:f0:a3:9f:08:92:bf:ea:32:f0:3e:
         a8:e0:71:cb:94:e4:89:bd:2b:d5:40:51:cb:e3:2b:7a:43:de:
         9a:e5:de:e5:a0:ac:ff:fa:52:76:68:3b:59:8c:91:04:b8:a2:
         e7:dc:f7:d4:cf:de:7e:2f:5b:0d:0f:bf:7e:a6:12:85:cc:c4:
         df:5b:92:77:8c:ce:64:e0:a0:fa:79:4f:36:84:ef:78:08:52:
         33:24:fb:39:d6:fb:63:b9:f4:77:c9:80:00:85:13:d4:49:50:
         cb:4f:07:c5:c9:26:86:54:63:d0:0c:b8:3b:7b:ee:9c:36:2e:
         20:3b:03:33:d7:37:23:45:8e:9f:e1:e8:7d:a3:49:c8:10:bf:
         9d:a8:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:26 2026 by rpki-client