Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
File:                     Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft (raw, json)
Hash identifier:          gOuZwucaoSEPMBJJweIO1pRuyVuf9yqtgh6P7LqURS0=
Subject key identifier:   28:F3:2E:B1:80:86:BF:00:99:90:B7:A3:FB:3D:ED:F2:E9:D6:EB:B2
Authority key identifier: 4E:69:77:89:02:73:79:7D:FC:C4:02:2B:90:C0:46:17:EB:1D:F1:29
Certificate issuer:       /CN=4e6977890273797dfcc4022b90c04617eb1df129
Certificate serial:       019FAE64C0643026E8FD8FADD4498FA10EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
Manifest number:          4F
Signing time:             Wed 29 Jul 2026 15:01:06 +0000
Manifest this update:     Wed 29 Jul 2026 15:01:06 +0000
Manifest next update:     Thu 30 Jul 2026 15:01:06 +0000
Files and hashes:         1: 76fuJqCnyM96XEK3XxGjc6ze908.roa (hash: th/ZnBNOEGf6s4sOu5GgwpSyFXSOhHyXMejJbNorthU=)
                          2: Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl (hash: UuU9shpa0/Nq/PAZLMH26uvoOkS0hj8hGdvaoXJNyoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ae:64:c0:64:30:26:e8:fd:8f:ad:d4:49:8f:a1:0e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6977890273797dfcc4022b90c04617eb1df129
        Validity
            Not Before: Jul 29 15:01:06 2026 GMT
            Not After : Jul 30 15:01:06 2026 GMT
        Subject: CN=28f32eb18086bf009990b7a3fb3dedf2e9d6ebb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5c:af:7d:8e:a0:ee:c4:c9:42:0f:d1:7a:2b:
                    35:c0:2d:d9:9e:41:a8:dc:fc:60:fe:5f:a1:7a:f4:
                    a5:4a:36:1f:67:34:16:e3:98:94:0b:eb:8b:11:f5:
                    6d:bf:6c:de:94:4a:de:86:d6:33:a5:57:b3:7b:72:
                    68:35:09:ac:92:7a:f9:cc:db:7a:19:78:15:78:36:
                    e1:ae:ef:c9:af:77:54:ac:57:01:66:dc:85:20:7c:
                    a4:a0:02:0a:65:73:11:02:f6:cf:47:18:10:38:79:
                    09:9e:22:b5:14:dd:e0:ec:bd:8a:5b:3b:b0:15:52:
                    6e:d5:ac:f7:cd:14:e2:a3:73:58:1c:94:48:b7:e2:
                    ed:b3:5c:86:51:81:b6:cb:f0:22:32:27:37:da:c3:
                    0c:c0:79:5e:3a:1d:66:a2:2c:43:b6:7b:9d:df:7c:
                    7c:18:fe:7a:3e:2d:ab:b8:be:2e:a7:66:27:a0:7b:
                    a1:c5:e4:2e:1c:d0:27:fd:ae:e3:b5:67:6b:6d:7f:
                    04:f5:f9:20:a4:eb:19:af:4e:ba:98:88:9c:3d:3b:
                    02:d2:05:82:bd:08:d5:da:a1:55:3c:25:dd:6e:34:
                    af:ee:fe:17:55:d1:7e:53:21:0c:ae:dd:01:e3:91:
                    53:00:93:6c:be:18:46:5d:55:71:79:7d:26:57:68:
                    4b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F3:2E:B1:80:86:BF:00:99:90:B7:A3:FB:3D:ED:F2:E9:D6:EB:B2
            X509v3 Authority Key Identifier:
                keyid:4E:69:77:89:02:73:79:7D:FC:C4:02:2B:90:C0:46:17:EB:1D:F1:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e3:c7:86:cf:d2:43:5c:a7:56:01:7e:1c:ab:74:50:df:8e:
         cb:9a:b3:e2:8c:a5:e5:86:f7:28:8d:56:71:83:a9:08:65:b8:
         ad:0c:2e:86:ea:ac:e7:c3:d6:6e:e5:6f:8f:5a:d4:32:ba:1f:
         20:98:d6:ec:59:f1:5a:4a:1b:a1:f5:4f:c8:6d:4a:22:4a:55:
         db:79:d7:b2:f4:0b:90:bd:f2:39:72:7b:a2:f6:2f:6a:6a:29:
         23:d1:06:7a:0c:bc:59:09:90:f5:f0:2e:ad:28:3d:bf:f7:69:
         67:69:e1:5a:d7:04:76:bc:5c:05:a3:6b:7e:46:2d:b4:e4:cc:
         73:b6:ef:0e:0b:8d:5e:49:de:e7:7e:3e:f3:02:66:80:76:1a:
         8b:44:cd:b9:d6:d1:97:1f:67:47:f2:ac:c4:65:38:9f:e8:51:
         a3:6d:50:b2:65:9f:9a:93:7c:58:23:81:44:7e:63:35:3c:9b:
         be:cd:e1:4f:03:1d:16:4a:ea:5b:98:ab:44:de:83:94:31:3c:
         4a:89:95:3c:5b:75:2b:99:91:09:b7:0c:f9:3f:8e:7a:57:0f:
         7b:2d:e7:81:f8:4e:d7:8e:50:a8:a9:35:fd:b6:59:05:57:cb:
         f2:f4:fc:1e:a2:62:f0:45:c6:e0:6d:58:e0:77:22:f0:44:6d:
         7c:13:1c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:39:30 2026 by rpki-client