Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File:                     4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier:          VkbgnAU2gHndkligf4P0jlHUEhoWML/p/ItyPwmRyuk=
Subject key identifier:   53:19:D8:28:A7:EB:43:3C:CD:A4:2A:5D:5D:82:5E:57:7F:4F:77:BD
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer:       /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial:       019FAA50483CE73C561DB40718351A9D2C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number:          0B58
Signing time:             Tue 28 Jul 2026 20:00:15 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:15 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:15 +0000
Files and hashes:         1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: aB30LPpODfJwWLnmiidS0LwcBosKjykJ6h9p+kdy4t4=)
                          2: YWMzYYdq1V4GAPZh68WrmEyhVfI.roa (hash: L4cChRKUEEfDnkwJCOfQ9K/LTDSkENg728c4ezgiFqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:48:3c:e7:3c:56:1d:b4:07:18:35:1a:9d:2c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
        Validity
            Not Before: Jul 28 20:00:15 2026 GMT
            Not After : Jul 29 20:00:15 2026 GMT
        Subject: CN=5319d828a7eb433ccda42a5d5d825e577f4f77bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:84:9e:00:29:c6:51:08:ba:13:9a:0b:c5:
                    6c:93:ff:35:6b:48:a6:a2:35:3f:c8:65:57:13:78:
                    7f:d3:07:ad:60:ce:b0:e9:76:25:c1:8b:55:3d:09:
                    91:fd:5b:6e:fa:91:de:28:01:4e:d4:d0:fe:34:82:
                    9d:ef:4c:97:b7:8a:e5:8e:fd:a5:5d:9b:9f:2e:dd:
                    62:c1:89:ef:e8:c5:32:40:2c:0d:15:7b:1e:3e:0a:
                    b1:1b:b9:ff:04:47:3b:a2:e7:e0:e9:c2:a0:1f:70:
                    09:4f:8d:a5:0c:be:d1:8f:8a:df:64:2a:c4:35:38:
                    4d:61:a7:bc:46:1e:bf:0c:8f:0e:00:36:ce:3e:1e:
                    ee:84:31:98:a9:19:1f:11:9e:f1:9f:c3:da:68:b5:
                    8e:68:19:e8:dc:33:a5:ef:6f:c3:09:4d:4d:67:cc:
                    52:52:66:d2:9e:f6:0e:f5:0f:a5:d0:25:be:21:ed:
                    54:9a:b1:3b:d0:21:34:04:cd:bf:03:a1:5f:80:c5:
                    6d:8e:49:05:c4:93:f0:36:01:7e:90:21:11:e3:d0:
                    4f:1f:1c:5a:c1:a3:fe:d4:ea:dc:1e:b1:f1:c3:9b:
                    a2:5f:95:2c:c4:c9:4f:f7:14:5f:b7:a5:64:fb:86:
                    8d:7b:97:e0:a5:76:f6:4b:bf:d7:17:86:5c:3e:c7:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:19:D8:28:A7:EB:43:3C:CD:A4:2A:5D:5D:82:5E:57:7F:4F:77:BD
            X509v3 Authority Key Identifier:
                keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:cf:0f:27:62:3b:34:bf:8d:72:52:aa:14:6d:9f:59:6e:54:
         e9:a5:80:d6:c7:09:7c:f6:2e:c1:a5:5d:ff:90:d9:85:a0:e4:
         ee:b1:aa:d1:31:cc:53:4b:34:6d:a8:4e:c3:6f:5f:ad:30:90:
         1a:88:77:9e:04:90:64:cb:8d:d7:ad:e0:e6:45:f4:5f:e8:d1:
         89:d1:a0:ec:33:41:2f:13:43:22:e4:8b:ca:b4:84:66:65:e7:
         c4:22:8c:91:6d:31:07:8d:5d:9b:5c:65:80:22:40:5f:b9:0a:
         7b:7b:85:63:f1:61:bb:c7:a3:76:ff:3f:b9:54:72:e2:b8:57:
         3e:35:d9:4a:12:dc:54:05:48:a6:70:00:c2:3f:74:8f:58:ee:
         4d:27:b8:df:2d:03:a2:20:c5:90:f8:a0:b5:25:23:90:40:1c:
         40:4c:07:0a:58:1d:40:46:15:76:d5:6a:80:38:07:c9:af:09:
         b3:69:21:e9:7c:d7:70:dc:de:e4:32:6e:0a:19:3e:1b:d7:bc:
         25:00:97:fe:64:f9:89:1b:f2:46:35:55:81:86:28:ba:54:0b:
         da:7f:3a:a4:f0:a8:16:44:35:42:63:82:a8:c8:d3:5b:26:1f:
         c5:1d:9a:13:a8:47:ea:ef:d2:d7:7f:bd:ac:8e:2c:1e:e3:49:
         e9:d4:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:11:22 2026 by rpki-client