Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
File:                     4m4BgY9rbo42iNfzYfdTwSNeDNw.mft (raw, json)
Hash identifier:          LHo2KxRa5rNromTGhd6oyjJU8mFvERZHFlAIYTMqH2g=
Subject key identifier:   BA:9D:9C:BC:2C:1E:74:5B:8F:89:34:34:48:BC:0F:EB:58:B8:73:70
Authority key identifier: E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
Certificate issuer:       /CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Certificate serial:       019EC224A80F5EC611A9E9212DB5C2D34D72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
Manifest number:          014A
Signing time:             Sat 13 Jun 2026 18:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:42 +0000
Files and hashes:         1: 4m4BgY9rbo42iNfzYfdTwSNeDNw.crl (hash: ZOExI3EpmS/+YupbcINXEYRpjZAXZ+RlMT2uGlcKUVQ=)
                          2: 55lgQHjawIWIBPegmtUWO19P1qY.roa (hash: xr29hGNw/G2B+5szsIy5zpkogZqhj2L/lLvicw1+OJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:a8:0f:5e:c6:11:a9:e9:21:2d:b5:c2:d3:4d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
        Validity
            Not Before: Jun 13 18:00:42 2026 GMT
            Not After : Jun 14 18:00:42 2026 GMT
        Subject: CN=ba9d9cbc2c1e745b8f89343448bc0feb58b87370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:37:d2:0f:3a:c5:94:4c:89:48:b4:b2:a2:12:
                    66:9f:c8:87:fa:96:ea:d0:74:f1:f5:6c:96:83:36:
                    50:04:7a:7e:42:90:42:b0:76:a7:fd:c0:1e:49:44:
                    53:76:53:5e:d2:5c:81:9b:d7:5d:c7:3d:b7:9a:e6:
                    66:c3:3f:70:33:fe:60:5e:2d:77:55:a6:0c:ea:eb:
                    2c:8f:c5:e3:b7:34:48:93:77:6c:2f:cd:31:9d:3b:
                    e3:a0:67:42:4d:af:1b:20:0f:b7:87:d5:57:92:d1:
                    b3:e5:94:50:e1:27:35:9a:0a:60:c1:a8:de:6d:77:
                    72:a9:21:16:da:4f:6e:10:02:86:e9:0a:8b:ee:4e:
                    72:8e:ab:67:2d:f7:db:c7:9a:a0:e2:45:db:de:ba:
                    c7:7d:c7:db:ce:c7:a1:43:ea:3f:43:b5:e9:1e:aa:
                    df:10:1f:6c:a0:53:5c:17:39:71:25:66:cb:9d:a7:
                    44:ff:3c:c7:0f:83:6d:89:59:fc:3b:70:b9:d8:dd:
                    5f:c8:64:da:ed:18:f3:4f:64:36:82:47:ff:be:b2:
                    48:d9:bd:d6:21:51:c3:53:db:ce:75:4e:a6:cc:c6:
                    88:d9:de:9c:65:ec:fb:5f:79:0f:e1:56:d9:96:26:
                    15:9d:64:80:10:3f:1f:ef:2c:11:31:59:d8:b9:cf:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9D:9C:BC:2C:1E:74:5B:8F:89:34:34:48:BC:0F:EB:58:B8:73:70
            X509v3 Authority Key Identifier:
                keyid:E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:67:5d:71:a9:56:55:45:cd:22:3d:8b:8b:15:a1:35:dd:82:
         d5:b9:7d:cb:03:44:ce:63:60:01:4f:52:cc:74:8c:ef:c0:0e:
         5f:cf:c4:0c:4c:af:3c:e8:c5:98:32:26:18:f4:21:26:be:5e:
         56:e5:8c:9d:4c:7f:4a:f8:2e:f7:76:3e:4f:02:3d:c0:1c:e7:
         32:dc:f1:d8:9b:06:7f:d3:c4:f7:ed:c5:06:aa:2e:d1:88:0c:
         e0:f0:a1:db:66:96:b3:1a:4c:c5:c8:e0:f2:d1:49:6b:53:27:
         40:1a:9e:ca:77:10:d4:5b:35:f8:b8:b9:7d:64:1a:9b:e5:ba:
         d6:0c:a3:7f:a1:c6:12:6d:7f:1c:6e:4d:60:14:2f:7a:60:e7:
         7a:f6:aa:63:4d:58:78:fe:13:6b:f3:d7:12:ec:a8:03:88:bb:
         e5:09:0e:e3:7b:17:10:be:02:c9:dd:be:08:25:b6:13:66:ad:
         3f:f2:4e:5d:4b:09:b8:d1:bc:1d:b1:cc:f6:df:c8:7e:fc:7f:
         e9:59:89:6c:53:98:fe:1a:58:45:19:ba:03:19:1c:46:0c:2c:
         0b:2a:b0:94:02:d4:08:71:e4:97:33:87:dc:53:62:d5:2e:df:
         dd:98:93:a7:f1:66:1f:3f:78:b8:a8:cb:df:29:51:1c:07:7d:
         ae:32:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:17 2026 by rpki-client