Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
File:                     4ram_1lpoV0l3cO73da-uU9Ipfk.mft (raw, json)
Hash identifier:          axe+tmdkBB5d9X5rppjbSktXfF/PHhAVkLUt/4P6Y9M=
Subject key identifier:   16:B8:43:AE:8D:F6:EB:2F:68:66:85:1A:EE:75:E9:0C:7D:80:79:37
Authority key identifier: E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9
Certificate issuer:       /CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
Certificate serial:       019FAAF535793AD9811515B50C86F536B0F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 23:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:24 +0000
Files and hashes:         1: 4ram_1lpoV0l3cO73da-uU9Ipfk.crl (hash: PbCl1MU8nn2hUKXGZe+crqAtbfNaCYYxY0/dqNdXfik=)
                          2: eSo8jObZn58o_aRi_AxYV9_s9BA.roa (hash: sgezzQUMOk07d245CaAgyimMMdaKOPXfAR78B55UWTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:35:79:3a:d9:81:15:15:b5:0c:86:f5:36:b0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
        Validity
            Not Before: Jul 28 23:00:24 2026 GMT
            Not After : Jul 29 23:00:24 2026 GMT
        Subject: CN=16b843ae8df6eb2f6866851aee75e90c7d807937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:93:e3:4f:fb:8f:60:54:a5:09:92:af:ea:b5:
                    a4:63:a4:a9:af:be:b2:59:77:05:a5:57:bb:0b:96:
                    3e:25:b5:f3:5e:68:94:97:5b:92:26:f8:c8:8e:52:
                    e2:2f:e4:19:bd:0f:0d:3f:12:65:81:a5:eb:0b:1f:
                    77:b8:32:d9:4b:3f:16:7c:48:14:2e:5e:82:7f:1a:
                    4f:d9:ea:06:12:5e:b6:69:09:99:c2:cf:cc:a6:ab:
                    c9:d9:e8:e8:11:3d:72:0a:3e:ba:dc:a2:02:b3:b5:
                    84:5f:f1:f6:db:37:b1:11:86:95:52:f4:cd:80:df:
                    26:16:24:e0:2e:3e:38:99:41:d9:93:7e:b2:b6:40:
                    6c:2e:2d:57:94:0a:d3:a9:9d:bc:52:3f:56:ff:8b:
                    37:ed:95:02:36:ca:01:31:23:fe:01:22:2c:34:b3:
                    a7:28:3b:fc:16:cf:78:d5:fa:74:09:2f:dc:62:58:
                    ff:31:db:2d:b5:35:8d:44:78:1f:20:67:75:4c:5b:
                    24:65:c9:4a:39:a9:e4:20:1d:2d:f6:8a:ed:ef:81:
                    83:14:f0:e4:36:da:11:cd:6b:3d:8b:3b:55:20:aa:
                    71:77:64:64:1d:e9:19:f6:9c:35:88:4e:4e:1e:39:
                    ea:c0:c6:26:f9:a3:57:aa:2b:b9:ff:27:6c:1c:75:
                    b6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B8:43:AE:8D:F6:EB:2F:68:66:85:1A:EE:75:E9:0C:7D:80:79:37
            X509v3 Authority Key Identifier:
                keyid:E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:47:55:2f:ec:06:89:f1:7d:0d:86:e0:ac:5b:c4:1c:df:2b:
         a7:3d:04:dc:48:72:ef:ec:14:51:e1:f0:23:f5:a9:0b:da:5b:
         39:2a:97:b7:1c:7a:9a:85:6a:16:b5:e9:dc:2a:ee:ad:34:9d:
         e5:13:e7:74:00:15:be:28:48:d7:37:02:ac:3f:72:f4:6f:6f:
         7a:63:c2:50:4e:d4:cd:ee:4a:34:c5:e5:07:c3:ad:65:f5:72:
         be:37:38:5b:60:5d:19:ef:f1:26:bf:33:0c:9f:45:51:5b:a2:
         51:ff:c6:24:c8:f2:8e:7b:57:d7:02:f4:4c:76:53:07:91:24:
         80:b1:db:e7:e0:21:2a:de:fa:5f:ae:bd:fb:54:cc:4c:14:16:
         ca:87:eb:c0:40:8b:96:72:9c:4f:6e:71:4e:c7:2b:19:84:b7:
         e4:24:cc:d2:13:2e:20:85:bc:c9:0c:4a:c3:c3:b8:02:9a:e9:
         13:af:3e:13:4e:99:6a:5f:23:f3:c9:95:73:11:c7:a2:62:cc:
         9f:77:13:7b:87:53:ca:fc:d0:8b:c6:d6:42:b6:c6:ac:70:89:
         14:c7:e0:da:6d:cc:4a:d4:a2:7c:07:2c:05:00:39:78:e5:5f:
         67:52:2d:a3:2e:91:79:90:27:e0:ad:cc:e2:54:88:bb:61:dd:
         6a:f1:a8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:52:59 2026 by rpki-client