Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
File:                     r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft (raw, json)
Hash identifier:          Cn0+gREjrCA0NSmeiVj6SHCEk9fYblxzvN/yV5cxcPY=
Subject key identifier:   4F:4E:B0:4A:C4:B5:F1:8F:69:D5:78:0E:D0:12:14:BF:9B:35:3D:08
Authority key identifier: AF:DE:C6:E1:96:38:FE:AE:5C:24:BA:C3:39:2A:AD:D2:9D:09:A1:0B
Certificate issuer:       /CN=afdec6e19638feae5c24bac3392aadd29d09a10b
Certificate serial:       019FA8996868A640F5498C7D91D61F6A8CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r97G4ZY4_q5cJLrDOSqt0p0JoQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:00:53 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:53 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:53 +0000
Files and hashes:         1: d0YkCPdnCyaNIksA2mKdrGoNCqk.asa (hash: zX6hSb7dbU0ZGqZxmFYD03Uuu0hUFOMksbh8I/RIpYE=)
                          2: r97G4ZY4_q5cJLrDOSqt0p0JoQs.crl (hash: MPMeDO1OYQFs24YhmeAg3ExdRVjrWYtiKhkSzZEdGGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r97G4ZY4_q5cJLrDOSqt0p0JoQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:68:68:a6:40:f5:49:8c:7d:91:d6:1f:6a:8c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afdec6e19638feae5c24bac3392aadd29d09a10b
        Validity
            Not Before: Jul 28 12:00:53 2026 GMT
            Not After : Jul 29 12:00:53 2026 GMT
        Subject: CN=4f4eb04ac4b5f18f69d5780ed01214bf9b353d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:cf:3e:05:33:90:03:ce:d6:e5:63:96:59:
                    c7:e6:c0:b4:cf:ca:d9:6e:93:0d:98:f5:d8:60:34:
                    4b:42:be:cb:8a:a9:5d:78:8a:f1:ec:d7:d0:49:96:
                    08:ed:2a:d3:71:ff:88:e8:cf:60:cd:d7:16:9b:1b:
                    25:1c:be:95:f1:28:fa:6a:28:55:4f:9f:50:88:37:
                    08:b8:1d:bd:d8:c2:c9:21:ed:98:3f:05:96:b7:09:
                    08:36:93:89:ca:f7:e8:a5:55:ed:37:b5:fe:7e:86:
                    b0:f5:c1:c2:7f:1d:03:e1:04:31:05:c5:aa:c9:3f:
                    f7:62:a3:d1:9f:c1:d5:d4:da:cd:42:09:da:47:a2:
                    50:f5:45:7a:59:94:6a:83:82:23:3d:3d:eb:60:db:
                    b7:09:e7:0a:14:f4:92:6f:55:5c:8d:73:bb:c4:42:
                    2c:1c:5e:bf:71:6a:11:ca:c4:01:56:38:83:a0:bd:
                    bd:88:b0:eb:b3:6b:2d:d0:24:6c:b3:d3:02:43:75:
                    85:ea:a0:6a:b0:d8:ec:30:fc:2a:0c:6c:43:22:6e:
                    78:fc:8d:9a:73:4a:71:96:74:71:b2:72:d6:f6:51:
                    bd:52:79:e5:07:0b:68:8d:22:09:a0:60:ff:24:9a:
                    6f:1e:2c:54:b7:98:30:36:06:42:57:e7:6f:66:40:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4E:B0:4A:C4:B5:F1:8F:69:D5:78:0E:D0:12:14:BF:9B:35:3D:08
            X509v3 Authority Key Identifier:
                keyid:AF:DE:C6:E1:96:38:FE:AE:5C:24:BA:C3:39:2A:AD:D2:9D:09:A1:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r97G4ZY4_q5cJLrDOSqt0p0JoQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:49:90:b0:f6:c8:80:c5:7a:29:68:1b:1c:89:86:b4:4b:e6:
         b0:b1:12:14:06:3a:96:13:04:43:fc:be:bf:40:fd:86:64:89:
         77:19:75:bf:a8:85:c1:fb:93:cd:1f:7a:14:66:11:b6:74:6d:
         a2:06:c8:8b:0f:13:bd:0b:0f:db:98:c1:4a:3e:dc:85:07:8b:
         7e:df:67:46:fd:66:63:cd:c7:be:53:c4:a0:ed:fa:49:a7:a6:
         37:a0:b9:ae:c8:d4:d0:4e:23:ef:bd:75:f7:c8:9f:ee:34:d0:
         82:9c:10:8e:67:8f:04:46:41:49:89:7c:10:72:b4:d1:1f:8e:
         78:07:ce:52:f0:ba:0d:06:05:6e:8c:f1:6e:1d:91:25:eb:be:
         f9:86:93:31:a3:01:dc:28:eb:80:83:f1:9f:cc:c7:c2:cb:c7:
         56:f8:3c:db:00:1d:fd:10:0c:48:01:1e:77:e5:0b:67:7d:ba:
         3e:bc:67:10:e7:04:02:f3:92:f1:d4:49:4b:6c:f3:70:e2:8a:
         28:16:6d:78:15:c5:28:ef:7d:82:65:e8:12:13:25:95:8d:cb:
         02:4a:24:59:52:d8:9d:7d:fe:b1:9f:d0:ea:86:06:f9:3d:5e:
         58:c8:ad:c5:71:33:ff:f1:9a:21:63:cb:bc:02:5b:e5:b8:e5:
         c8:dc:da:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:09 2026 by rpki-client