Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File:                     E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier:          m6EvVsNV5ajbug8jEvq4G7y/WtbwwX7MrO4qJSwaE1w=
Subject key identifier:   84:62:5A:10:97:27:B7:E4:25:ED:F4:7A:89:07:10:5F:0F:76:5F:5B
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer:       /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial:       019FAB2C91BE188884729A46C7A452034A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number:          192D
Signing time:             Wed 29 Jul 2026 00:00:52 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:52 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:52 +0000
Files and hashes:         1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: Z33nNNlCtgoFWJdYG+htvEP2eQirKARXgBp3le3hrMk=)
                          2: mDFc7pj7Bovc-0Bk_3gf_YPWSI8.roa (hash: foLb5bYIbYqHfFOiPX+cqHpJp+lcFErw3rPGOF4xGuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:91:be:18:88:84:72:9a:46:c7:a4:52:03:4a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
        Validity
            Not Before: Jul 29 00:00:52 2026 GMT
            Not After : Jul 30 00:00:52 2026 GMT
        Subject: CN=84625a109727b7e425edf47a8907105f0f765f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:40:76:ba:83:74:52:91:07:10:dd:54:95:
                    e5:0f:a3:79:d6:e0:84:38:a3:8d:e9:34:98:97:89:
                    85:f1:ac:f7:23:84:3c:06:ab:1c:9d:65:b1:48:73:
                    34:c0:78:e7:ba:86:ea:38:b2:f2:7e:95:3e:86:77:
                    94:13:47:c9:47:2a:a2:1c:19:fd:63:52:27:04:29:
                    c3:a6:c5:69:4e:a3:df:1d:ab:90:39:c6:0d:91:0b:
                    c1:12:7b:c4:ce:4e:4f:3f:af:fe:ee:ac:8b:a2:e0:
                    88:d3:90:30:90:75:b5:04:94:45:4a:72:a2:07:23:
                    bd:1a:89:db:fc:38:5a:45:43:05:a0:51:ef:e5:ad:
                    86:f1:a6:15:85:ca:cd:c6:8b:c2:ac:96:c0:57:4d:
                    51:88:f3:fe:d9:6a:1c:3d:fa:33:08:ec:8c:5f:5d:
                    24:dc:5f:86:71:f3:e1:d2:6d:88:d8:84:88:22:f1:
                    fb:d6:d1:10:26:15:2c:b2:e2:2a:9a:c0:d3:91:1e:
                    5c:38:a9:fd:7f:f6:98:15:fa:65:81:2d:ee:df:b3:
                    aa:2a:f2:cb:f8:66:57:61:a5:5d:c2:ea:a2:83:9e:
                    cb:68:02:52:8c:a6:de:c7:69:8c:4f:58:3b:58:68:
                    ed:75:1d:04:0a:c3:7d:05:7b:42:5b:03:02:2f:62:
                    ab:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:62:5A:10:97:27:B7:E4:25:ED:F4:7A:89:07:10:5F:0F:76:5F:5B
            X509v3 Authority Key Identifier:
                keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d4:bf:a5:9c:25:c0:01:a4:48:41:73:5b:f0:bf:6e:ca:34:
         ac:a4:a9:ab:fb:eb:4a:14:8f:85:e2:a7:0a:37:98:e6:7a:0e:
         8b:03:24:8d:6f:cc:fe:68:85:77:39:d0:a5:c4:b8:f5:df:8f:
         45:42:a5:68:47:b8:ea:15:1d:df:e4:80:59:2f:7c:de:44:02:
         c0:b1:b5:0a:da:fd:0f:ab:6c:d4:0f:94:03:a1:27:f2:9d:f0:
         9f:d6:8e:80:8e:e6:0d:3c:58:73:a0:19:9f:34:06:fa:a8:69:
         94:a4:01:b5:bc:08:63:04:33:c8:ff:99:91:ee:2f:57:d6:48:
         e5:fe:5a:fe:8f:ef:c0:33:69:7b:69:65:9c:06:e7:22:1b:1d:
         78:e7:ed:b0:d0:a2:1d:fb:3d:d0:a7:bc:c6:c8:a1:fa:1f:8f:
         ad:a8:7f:61:d9:03:59:c6:88:ee:89:8e:ab:c2:cf:fd:74:bd:
         d5:ef:2d:0c:b5:97:a5:da:dd:74:d2:3c:72:56:51:a9:a6:ca:
         41:17:98:76:ae:20:9d:cf:9a:e1:3c:c2:f7:c0:df:7b:e7:29:
         78:17:18:d4:4d:a6:f6:53:db:4b:8b:71:70:68:8a:f2:36:81:
         49:92:66:bc:e1:f1:2e:2d:91:22:1b:de:f0:ef:1c:30:ac:11:
         b1:72:6d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:06:42 2026 by rpki-client