Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
File:                     7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft (raw, json)
Hash identifier:          LAOyQDFlkSqODH0rqiEoioiLiZEZ3p/nKiUOVCh0sTw=
Subject key identifier:   A7:A4:D2:D8:31:77:7F:C0:71:C7:9C:A2:0B:D2:E1:26:D0:21:95:14
Authority key identifier: EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
Certificate issuer:       /CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Certificate serial:       019FA93E3F147B57E24470D59557263A74DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
Manifest number:          4E
Signing time:             Tue 28 Jul 2026 15:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:56 +0000
Files and hashes:         1: 2Zslfn__QIhx6OX48_NKfIqrzSc.roa (hash: VYnOK+rc+xOxyoEFqSm+yquuiXcM9YH3Y4gu3Gh6hXg=)
                          2: 7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl (hash: t2u0i3MgOkL7WdTPtFRaBLfXsoKu8ZsLYi0xbmObfsc=)
                          3: U_aK72jJa-ON6gMyyHq3rWjkxhU.roa (hash: /1YQ5iJbTHBFdQHsTl7LBGFueR1LkqoE0aary4QG3rs=)
                          4: afRxnYS9xX0pCvGVtIiS73I1z44.roa (hash: 3LuTMNKBz2sfRa7X5G714MtGThF0TEEgGy5wQUhxdjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:3f:14:7b:57:e2:44:70:d5:95:57:26:3a:74:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
        Validity
            Not Before: Jul 28 15:00:56 2026 GMT
            Not After : Jul 29 15:00:56 2026 GMT
        Subject: CN=a7a4d2d831777fc071c79ca20bd2e126d0219514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:48:70:31:be:6d:0c:32:c7:95:c2:b8:02:52:
                    72:dd:01:70:72:d8:76:98:ec:2d:3e:06:e7:54:fd:
                    a7:19:8d:d2:04:ec:04:39:dd:99:7d:28:42:5a:b8:
                    e2:8a:98:53:30:a5:b7:5c:fd:94:79:1f:74:f0:1a:
                    a1:26:ec:dc:3a:4c:0c:d9:6c:55:aa:d0:a5:b6:87:
                    e9:7e:42:ec:8d:d1:4f:b6:57:32:bf:43:66:ed:a1:
                    36:71:7d:d0:f5:27:31:f0:bd:ff:04:ec:63:bb:2d:
                    49:08:90:9d:dc:f6:e8:a8:04:3c:1d:13:2a:a4:88:
                    73:39:29:5d:f0:ed:7d:d2:15:90:c7:97:55:61:33:
                    ec:78:f3:e1:40:db:3d:5f:66:4f:32:df:f1:a4:aa:
                    df:b8:0e:d2:55:46:96:88:0d:6f:44:d6:e2:6c:00:
                    a6:4e:a6:fd:97:9c:0b:d6:66:11:d6:02:50:73:36:
                    38:14:8e:2a:56:51:b8:6c:f8:1f:e1:59:ba:b4:b9:
                    e3:3b:8c:13:9b:ea:05:f7:14:8d:21:0d:9b:dd:e3:
                    ee:07:1d:4d:40:e5:0a:35:26:57:0f:28:5f:87:c6:
                    4c:33:89:82:e9:d7:2e:14:36:cc:32:c2:35:65:25:
                    0c:c7:97:e7:ea:e0:34:30:ea:60:43:24:ad:ed:52:
                    35:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A4:D2:D8:31:77:7F:C0:71:C7:9C:A2:0B:D2:E1:26:D0:21:95:14
            X509v3 Authority Key Identifier:
                keyid:EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:79:93:bf:f4:5b:a2:e7:16:c3:49:f9:fe:7c:f5:06:ae:c0:
         7e:ef:78:99:2e:62:fa:dc:b8:59:63:63:5c:c2:13:ac:07:ea:
         4f:8a:07:60:67:db:b6:ea:16:16:e8:29:9b:e1:e2:55:42:38:
         b5:0a:1c:5b:98:52:7e:05:28:dd:83:48:ea:7a:25:57:ee:1e:
         8a:36:4a:ec:50:0e:45:ab:27:d0:fb:2a:7b:7f:b8:d6:80:f5:
         54:45:e5:25:bc:1d:75:31:b7:75:aa:55:1c:22:35:e5:28:bf:
         31:b8:71:3d:90:06:d9:57:01:ae:6e:28:40:ac:33:d0:40:de:
         ae:ae:94:1c:ef:f7:92:ac:43:fe:88:df:80:85:2f:73:9a:9e:
         2b:71:db:25:f4:ec:1e:c9:98:0e:10:fb:23:bf:65:55:11:fe:
         a1:fc:25:1a:75:e8:cf:10:1e:51:12:41:a5:eb:48:ca:8c:e8:
         fb:67:31:bd:53:ad:94:6e:f8:d0:dd:77:c9:4e:30:9d:b5:f6:
         62:54:80:c1:dd:d1:11:07:2b:dc:2f:90:6c:d7:88:af:2f:3b:
         6e:71:84:7f:a1:42:1c:a6:7c:fc:dd:6b:12:f7:6d:e4:63:f8:
         05:cc:d6:05:92:73:4a:bc:8d:2f:61:4c:c8:2b:a0:cf:a9:9c:
         46:ad:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:31 2026 by rpki-client