Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
File:                     rgLNgCbGDDyINkigv_cRbPJnB9Y.mft (raw, json)
Hash identifier:          QhDtvrOoIXZCe6MQ1pAmRIKKzazObHsPBaOmY+i4i5k=
Subject key identifier:   B9:8D:11:2B:8F:51:CC:F4:AE:28:2E:14:7B:4A:93:A9:6F:8F:91:9D
Authority key identifier: AE:02:CD:80:26:C6:0C:3C:88:36:48:A0:BF:F7:11:6C:F2:67:07:D6
Certificate issuer:       /CN=ae02cd8026c60c3c883648a0bff7116cf26707d6
Certificate serial:       019FA89A41894EB6A3428EB3DF5955E0A9AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:49 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:49 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:49 +0000
Files and hashes:         1: JFKsJ81EE5IntvacpLswwWGFsTM.roa (hash: LHjq7NdJ7WIHgdVnj15fjVJfqra4lVivu4YVbUPdLsQ=)
                          2: MYiR6d13wnOJyMgIVOtD39N0N2Y.roa (hash: 1MsnnpZMhXZvlE3ZAn7W0Wa3woN4DjCUknVa97haYzc=)
                          3: qZg3vuSLjrxt2okeYN8jOZEzgyM.roa (hash: 5PbHk2X8krzBF8kEH0yjcg64xwxwW6OFin9CiO9Dif4=)
                          4: rgLNgCbGDDyINkigv_cRbPJnB9Y.crl (hash: uFFMlO4HN0YnUN7TkbcPXm4ruT80hJUbtt4E927sVAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:41:89:4e:b6:a3:42:8e:b3:df:59:55:e0:a9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae02cd8026c60c3c883648a0bff7116cf26707d6
        Validity
            Not Before: Jul 28 12:01:49 2026 GMT
            Not After : Jul 29 12:01:49 2026 GMT
        Subject: CN=b98d112b8f51ccf4ae282e147b4a93a96f8f919d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:fc:7c:d2:3d:01:b4:cc:75:89:da:6c:c3:
                    32:24:f2:c2:73:de:b2:d7:78:fd:65:4f:37:34:27:
                    a8:07:c8:44:15:13:c0:25:e5:ee:4a:35:ac:3f:da:
                    06:d3:15:9c:db:82:f5:64:d2:94:f0:78:bb:8b:6a:
                    33:21:2f:37:f0:1b:ff:31:0d:a8:9a:e0:4a:f2:69:
                    34:a3:7a:18:34:95:7d:f9:02:1a:ff:65:3b:1c:b0:
                    f2:1c:8f:80:38:cc:46:0e:87:9e:08:cf:60:b6:03:
                    f7:6c:17:fd:e0:c5:5a:2f:29:29:43:59:cd:8b:ea:
                    4d:26:b5:50:12:c4:00:99:c6:2e:58:53:c2:05:a3:
                    a3:e6:52:a9:f6:cb:fd:09:14:9f:ee:56:cf:70:57:
                    3c:11:86:96:09:4b:8e:da:b6:e9:93:2a:df:bd:f7:
                    3a:87:39:21:67:ea:d0:54:04:ea:61:0d:5a:0a:4c:
                    e6:0e:53:44:a8:e7:17:2a:75:cb:dc:cb:c7:c7:ee:
                    c7:b0:f6:5d:e9:dd:d1:25:f9:f8:5e:a4:40:a1:4b:
                    9b:77:4b:cc:3c:c0:a8:c7:98:88:28:f3:a4:ed:c8:
                    2c:88:50:06:da:7f:03:9f:34:bf:a1:28:1e:47:ba:
                    18:22:e5:aa:52:ad:d9:11:32:93:72:74:06:d1:35:
                    bf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8D:11:2B:8F:51:CC:F4:AE:28:2E:14:7B:4A:93:A9:6F:8F:91:9D
            X509v3 Authority Key Identifier:
                keyid:AE:02:CD:80:26:C6:0C:3C:88:36:48:A0:BF:F7:11:6C:F2:67:07:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ac:64:05:36:3e:84:ee:11:64:63:c9:d2:c6:92:38:16:92:
         c6:38:04:c3:39:83:65:ec:21:d3:59:94:cc:1c:43:b0:17:36:
         d9:f7:65:fe:ae:42:f4:83:30:31:bf:5b:4e:3d:36:18:00:b9:
         76:06:72:22:74:b8:91:82:7a:e6:a4:da:1c:73:92:50:de:64:
         39:9e:48:54:d7:dc:c6:80:67:78:cd:4d:0f:d0:df:d5:39:0d:
         72:8e:6a:0a:f6:61:3c:0e:52:32:b2:fc:76:2f:ba:02:e6:60:
         6e:40:e7:e3:24:a3:5a:9a:2c:ef:92:d9:8a:a0:cc:ed:3f:1d:
         80:7f:22:ce:6e:63:e6:69:30:4e:95:4d:b1:00:21:0f:e0:4d:
         79:86:68:f0:9b:78:11:f0:7b:4f:42:64:2b:52:c1:90:f4:24:
         21:12:f4:a6:24:6b:1b:7a:ad:38:4b:5f:ef:92:54:37:69:0b:
         18:dc:8b:c9:36:71:19:8a:10:23:42:d8:33:ab:95:9d:a7:22:
         7a:37:95:29:62:ee:57:48:83:6e:3b:7b:c0:2b:70:ed:79:31:
         15:87:a9:5e:3b:9a:81:dd:99:84:59:5d:67:4d:3a:1d:84:2b:
         99:04:b4:c5:d8:27:e7:6b:51:19:0e:b7:99:11:ee:4d:c8:06:
         84:41:f9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:19 2026 by rpki-client