Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
File:                     rc47owvQQ0BmFuIx-DHAO8cN_sM.mft (raw, json)
Hash identifier:          qwLOqXsIrXV1t68ULccVgDgeLbWcDwlRQ6gFFMuW0t0=
Subject key identifier:   A8:47:B5:4D:7D:62:37:72:D0:F0:58:01:CC:AD:BF:6F:D0:4F:26:73
Authority key identifier: AD:CE:3B:A3:0B:D0:43:40:66:16:E2:31:F8:31:C0:3B:C7:0D:FE:C3
Certificate issuer:       /CN=adce3ba30bd043406616e231f831c03bc70dfec3
Certificate serial:       019FAC760F06E80FC4A5685C0F3EF532DCF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:45 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:45 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:45 +0000
Files and hashes:         1: hxtJjNM-jXAId3t9QxiU4RhKDn0.roa (hash: kCGRegaekycExv3Ea9rc9bDXuzaYL1+3mHe+GykP47o=)
                          2: rc47owvQQ0BmFuIx-DHAO8cN_sM.crl (hash: MiAWW45qtK4bjMojyEqSPazsnqrPHXePjS/5Jepwp8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:0f:06:e8:0f:c4:a5:68:5c:0f:3e:f5:32:dc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adce3ba30bd043406616e231f831c03bc70dfec3
        Validity
            Not Before: Jul 29 06:00:45 2026 GMT
            Not After : Jul 30 06:00:45 2026 GMT
        Subject: CN=a847b54d7d623772d0f05801ccadbf6fd04f2673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:17:57:3d:58:b8:37:48:b2:b9:8b:5d:35:36:
                    03:8e:9f:92:9a:83:0e:80:21:d1:a3:75:16:32:26:
                    1b:0d:f2:f4:20:80:4c:2f:35:a5:b3:1d:17:51:ea:
                    ac:c6:12:46:14:72:74:20:0b:4f:1f:ee:1b:7e:ce:
                    36:f4:ee:ae:7d:25:63:02:31:0a:2a:56:d4:55:d8:
                    2c:c3:26:8d:6b:47:c7:bd:b3:b8:3f:d8:7f:af:fa:
                    8d:40:6a:d2:74:66:0a:c3:bf:6c:ae:91:26:2d:41:
                    e2:0b:3a:77:20:77:6b:67:e2:21:d1:31:4f:a2:59:
                    29:e8:4e:28:ee:a0:14:87:88:2d:74:6c:86:f7:a3:
                    b3:e9:91:17:c5:f4:cb:2a:2f:b4:7d:1a:19:91:d1:
                    df:30:d0:ab:32:45:52:ed:ac:97:e5:93:e6:d0:13:
                    74:f1:a2:66:80:6c:80:ae:34:73:9c:90:2a:5f:d5:
                    3d:d3:69:dc:ef:96:ee:57:ce:f9:02:11:28:b3:dc:
                    3a:4e:a8:6d:c7:89:ab:f5:56:48:81:b1:4c:7e:93:
                    71:e8:92:de:f1:de:54:54:18:cd:36:72:67:4c:92:
                    9f:ce:42:20:6f:4c:6b:4e:29:c7:90:83:ec:b9:cb:
                    d1:4f:70:92:b0:30:cf:97:66:a8:93:7e:cf:81:b3:
                    4c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:47:B5:4D:7D:62:37:72:D0:F0:58:01:CC:AD:BF:6F:D0:4F:26:73
            X509v3 Authority Key Identifier:
                keyid:AD:CE:3B:A3:0B:D0:43:40:66:16:E2:31:F8:31:C0:3B:C7:0D:FE:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c9:38:82:82:8c:a8:fd:5f:b1:3c:3f:9d:1a:5c:2a:35:06:
         9f:96:ee:b8:78:35:c0:6e:90:4f:bc:87:61:1c:5f:73:0f:69:
         66:55:c1:d1:fa:20:b4:ec:51:7f:f4:18:b9:03:8e:a6:6b:40:
         62:00:7b:e9:be:51:c6:8f:4e:d3:5a:63:29:c8:41:0b:6b:e9:
         11:aa:35:1f:65:4c:4a:e7:83:4f:24:ac:1d:10:3b:74:31:c6:
         59:d1:6a:8a:1b:98:7e:65:ee:7d:6e:d0:78:a7:5d:a5:43:93:
         6d:12:47:f5:ed:5e:54:42:ea:20:e7:60:ce:b2:e8:b3:42:b1:
         11:c4:f6:65:fb:de:c1:89:9c:c6:28:d2:73:01:49:9c:1f:89:
         ca:2c:5b:b5:e9:7d:46:01:00:a0:b2:99:32:85:77:14:3b:2d:
         8a:97:1b:14:0d:41:1d:0d:c9:e1:a6:ee:46:79:da:2a:91:a7:
         03:26:66:67:d3:d9:f0:ca:62:64:9f:fe:a3:4d:d8:1d:ba:4b:
         e7:50:ae:8d:f6:9d:e1:c2:f4:f0:d6:2c:43:9d:0d:50:e6:ba:
         ec:ab:6c:fe:a5:f4:99:8e:18:b0:3f:77:96:2d:b7:67:02:fe:
         48:22:32:6a:82:ea:fb:58:36:38:3f:31:94:8e:ff:bf:88:84:
         ca:39:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:38 2026 by rpki-client