Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
File:                     SyUQgOllg93f08tXQu9eQmWBFLA.mft (raw, json)
Hash identifier:          ThQSAfpIe9VRZCdWDUO1he7bYzKT+E5Q5twFiE9XWm0=
Subject key identifier:   4B:74:6E:34:F8:3B:9D:BF:95:5E:85:35:B2:7F:16:CF:B1:FE:31:31
Authority key identifier: 4B:25:10:80:E9:65:83:DD:DF:D3:CB:57:42:EF:5E:42:65:81:14:B0
Certificate issuer:       /CN=4b251080e96583dddfd3cb5742ef5e42658114b0
Certificate serial:       019FAD5246E7261A8C7DFD5C604138A07FC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
Manifest number:          0118
Signing time:             Wed 29 Jul 2026 10:01:17 +0000
Manifest this update:     Wed 29 Jul 2026 10:01:17 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:17 +0000
Files and hashes:         1: SyUQgOllg93f08tXQu9eQmWBFLA.crl (hash: j5lTr1YwK0XQEZRRoGyZVymhG431X3Tpda9cNUrRaAI=)
                          2: en2MbnssfxDmdQApF9BpXZafTB4.roa (hash: ER4VRDsyb1U6Mhi3DkYQHSd9SIwplFdtiKrG0UkksVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:52:46:e7:26:1a:8c:7d:fd:5c:60:41:38:a0:7f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b251080e96583dddfd3cb5742ef5e42658114b0
        Validity
            Not Before: Jul 29 10:01:17 2026 GMT
            Not After : Jul 30 10:01:17 2026 GMT
        Subject: CN=4b746e34f83b9dbf955e8535b27f16cfb1fe3131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:38:d6:3f:bb:78:16:b5:1c:8f:74:03:5d:
                    85:58:dc:87:c3:2b:6f:c8:9f:66:3a:c4:d4:25:fa:
                    6c:72:a7:a6:ad:a2:ef:d8:6c:67:70:92:fc:4b:3a:
                    d4:79:f7:82:b1:23:3f:67:ca:7b:be:ec:76:e3:21:
                    2a:d8:0c:22:46:f9:0b:f8:c5:14:0a:08:9d:94:26:
                    c1:f2:42:b5:a7:b1:8e:6a:4c:3e:cf:64:0f:24:5c:
                    3f:81:9a:7d:bd:72:c0:a6:bc:6e:a8:20:a0:6b:f3:
                    9b:12:bd:e4:bc:1b:55:56:5e:9d:ef:4f:d1:9c:09:
                    ed:15:78:84:1d:54:39:a6:a5:11:e6:ce:c6:93:2b:
                    c4:7b:ed:db:cf:67:48:11:06:6d:01:a1:b7:5f:90:
                    61:d8:fa:a4:50:31:69:73:57:a7:c9:84:6e:22:ad:
                    40:70:ec:6b:45:f7:26:80:6d:ed:33:2b:ce:2e:e2:
                    1b:a1:10:42:b9:f5:d7:62:29:e4:43:98:e0:24:2e:
                    dd:64:8b:23:d8:29:c3:57:7a:64:3c:0d:f2:8d:cd:
                    3c:cc:2f:b3:f1:e4:7b:41:6e:f8:2e:a6:31:4d:d7:
                    d6:ad:06:81:f4:b5:d0:c1:d3:b9:de:3b:1d:10:00:
                    2f:a2:ad:fd:97:ee:c6:5b:68:06:d4:e7:74:4d:f1:
                    cf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:74:6E:34:F8:3B:9D:BF:95:5E:85:35:B2:7F:16:CF:B1:FE:31:31
            X509v3 Authority Key Identifier:
                keyid:4B:25:10:80:E9:65:83:DD:DF:D3:CB:57:42:EF:5E:42:65:81:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:fa:b4:22:08:ea:7a:d3:b6:9d:1a:3a:c9:9e:46:47:e5:20:
         09:5e:96:80:47:94:b4:f8:bf:5a:fa:62:fe:35:c5:a3:0c:91:
         e1:e3:df:a5:61:04:c8:bf:aa:76:cb:3f:39:71:ef:5a:9d:a2:
         8e:36:90:03:77:97:73:f1:1b:fa:bd:96:cf:05:08:6d:70:f5:
         19:70:cc:d3:5b:f8:17:4e:c2:4e:2f:29:b7:cc:f7:9b:89:1a:
         b7:7d:02:4e:23:77:45:d1:0b:86:6e:e6:d7:d4:4a:4a:69:c8:
         30:3e:b3:f2:fe:3a:10:9c:5f:66:dd:d0:d1:df:28:1b:d9:8b:
         a6:cc:34:e2:d5:03:5c:07:6b:5f:f8:60:50:d9:fe:92:e5:24:
         a1:55:25:65:d9:23:49:60:fd:0c:f4:97:e3:58:cd:0a:81:7c:
         25:a2:16:77:20:03:e3:d0:96:74:19:6d:5c:93:67:d8:c8:0a:
         f4:38:24:64:ce:1a:87:7f:fc:8f:cd:ca:de:83:c2:39:31:33:
         c1:bf:51:1f:a2:7c:ab:22:2b:75:c0:1e:39:f0:70:6b:3d:f2:
         7f:cd:e4:5d:53:6a:c5:39:d7:04:cd:67:21:93:b9:f2:b0:61:
         62:cc:5d:7b:43:0f:c1:41:65:dc:16:26:95:4c:17:25:28:d9:
         d8:bd:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:27:41 2026 by rpki-client