Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File:                     4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier:          zOw1EvreGPksiczOVURrcVBHhxFrPNMeC9XPWZR/Btw=
Subject key identifier:   E0:E4:DD:B3:35:96:27:C9:9C:3D:9C:CD:59:2F:88:6E:24:86:90:69
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer:       /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial:       019FA9751C8E05A4507524F5EE7995C02927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number:          0A64
Signing time:             Tue 28 Jul 2026 16:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:52 +0000
Files and hashes:         1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: 5d+PYEgNdvcamkEcj2yQ6gg1ygbjAbsv6or+0pFIkT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:1c:8e:05:a4:50:75:24:f5:ee:79:95:c0:29:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
        Validity
            Not Before: Jul 28 16:00:52 2026 GMT
            Not After : Jul 29 16:00:52 2026 GMT
        Subject: CN=e0e4ddb3359627c99c3d9ccd592f886e24869069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:9b:d1:06:98:22:28:2f:7f:27:37:f7:f1:
                    25:00:1d:70:ee:2f:0f:73:cf:4a:4b:1a:a1:f2:98:
                    56:47:1e:ba:e7:66:32:06:fe:08:c8:44:5e:54:60:
                    7e:ec:01:e6:ec:bd:6b:25:0f:ac:2f:28:7b:21:8b:
                    5b:9f:4d:64:c1:31:19:76:e1:d6:dc:50:ff:2b:25:
                    9f:d1:ef:be:f3:63:59:2a:6d:b6:70:86:5c:cc:30:
                    4e:d1:93:68:c0:83:32:ec:ca:eb:46:8c:57:44:88:
                    0e:86:1c:b7:12:8b:77:78:10:15:72:4f:50:70:e4:
                    8b:a1:c7:05:bc:aa:bd:c3:a0:a5:d6:83:e1:df:be:
                    7d:47:97:d9:6e:1d:0f:39:f8:67:66:fa:e3:31:63:
                    dc:c6:00:d7:1a:62:be:71:68:c5:83:37:fa:3b:72:
                    25:42:21:6d:c3:cf:92:3e:6c:2f:56:d5:df:98:4f:
                    3a:04:ac:78:66:97:2d:79:e0:37:67:be:05:da:a5:
                    27:ad:d9:41:01:b5:1e:04:f1:2b:7f:4c:5a:e7:13:
                    ca:cb:96:83:7a:2d:b7:8d:ec:dc:e1:92:08:3a:a4:
                    aa:e9:d3:2d:c5:aa:73:c4:9e:29:d5:6b:35:07:a9:
                    48:e0:1e:61:e4:40:5d:09:af:16:99:26:a8:00:e9:
                    85:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E4:DD:B3:35:96:27:C9:9C:3D:9C:CD:59:2F:88:6E:24:86:90:69
            X509v3 Authority Key Identifier:
                keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:aa:a2:6c:9d:b4:0e:f8:8f:29:a0:28:83:45:ec:6c:76:8c:
         c5:86:7f:5f:a1:b7:10:f8:e1:73:a8:e2:2c:78:2a:37:45:c1:
         78:a6:28:cd:ce:63:8a:2b:98:2c:fb:ad:53:9f:f3:1c:41:26:
         ae:95:7e:b1:71:06:60:a5:b2:bc:dc:96:2a:1c:47:57:24:78:
         d4:40:22:c6:34:90:67:f9:5f:cf:55:78:e5:40:56:fd:d7:44:
         e4:1b:27:6e:aa:ae:20:19:62:61:43:35:52:1d:0b:be:9b:31:
         2d:02:1a:02:2e:ca:e8:7a:c3:cc:5e:6b:09:9f:cb:13:52:00:
         39:15:dd:9f:af:6e:27:a8:59:e0:93:5f:fd:dc:62:c7:d6:f2:
         b8:c4:16:b2:11:db:15:49:e6:1f:59:df:62:f6:25:04:70:8a:
         03:b9:05:15:70:ca:88:ed:d5:e6:eb:99:b6:3c:55:78:06:9e:
         68:f1:73:97:70:38:16:d2:51:17:66:de:6e:ce:23:dc:f3:ff:
         02:6c:1a:74:06:df:52:42:fa:65:2e:b5:c1:29:2e:f1:c6:b0:
         2b:09:be:22:f8:ed:76:b9:35:ff:d2:84:cb:60:e2:e8:d3:eb:
         41:fd:19:36:58:c9:fa:0d:77:df:fa:93:51:6e:be:99:db:66:
         85:c8:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:57 2026 by rpki-client