Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
File:                     vL4wndalMhnOvVZb4fI0uT5WLjk.mft (raw, json)
Hash identifier:          bcB7XDoQ0DhhHA7xHRtSYd4p9ntuzQHkFctC3lEt8Fw=
Subject key identifier:   36:28:15:49:F6:0B:4C:D9:F1:73:8C:9C:EC:F5:E6:3E:7B:64:FE:89
Authority key identifier: BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39
Certificate issuer:       /CN=bcbe309dd6a53219cebd565be1f234b93e562e39
Certificate serial:       019FA8D080F0070CA1CEE1D2B503A30B2741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
Manifest number:          01A0
Signing time:             Tue 28 Jul 2026 13:01:04 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:04 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:04 +0000
Files and hashes:         1: vL4wndalMhnOvVZb4fI0uT5WLjk.crl (hash: KFc1FqzKoN7ONYcu37N3J7oyt+OhCA8KRx4Xj1og170=)
                          2: y80B_uuM_hGD_Q988wwVbuTVVzQ.asa (hash: wqE3B1uMY7o5p44haT4r4tbcqIzVxJtI7cONoSQ5lKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:80:f0:07:0c:a1:ce:e1:d2:b5:03:a3:0b:27:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcbe309dd6a53219cebd565be1f234b93e562e39
        Validity
            Not Before: Jul 28 13:01:04 2026 GMT
            Not After : Jul 29 13:01:04 2026 GMT
        Subject: CN=36281549f60b4cd9f1738c9cecf5e63e7b64fe89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:c8:9e:fd:94:f3:f2:c1:af:3e:aa:d2:30:
                    b0:47:01:80:24:c1:12:f4:53:80:2f:bb:9b:6a:35:
                    c4:84:0f:7f:76:54:86:0a:26:eb:cc:1e:41:36:98:
                    37:58:7d:c8:d6:a6:de:b7:be:7b:e8:4d:78:1c:71:
                    48:3f:6e:19:59:a9:51:3f:65:4f:a6:69:b7:8e:49:
                    0c:f2:12:77:40:9d:3f:4b:88:61:74:7b:33:93:c3:
                    56:a1:3d:7f:84:01:f4:68:ba:27:d8:9d:30:c3:0b:
                    1d:8b:32:8f:09:7b:98:55:5d:16:be:75:0a:76:05:
                    59:b3:78:d5:50:9f:12:22:8c:40:a3:ac:90:d1:80:
                    bd:5a:5d:8c:a1:65:25:a4:22:c5:9d:ee:39:15:9c:
                    fd:7a:a8:75:fe:73:4f:64:4f:22:d9:86:9c:a9:d0:
                    68:95:31:81:d9:11:5c:23:a1:54:0a:23:26:3c:be:
                    15:3d:c2:f8:4d:9f:31:f0:85:90:78:c5:30:8c:66:
                    85:21:e0:03:a2:7b:ce:c7:46:36:8d:48:84:37:a0:
                    b3:2f:91:b9:da:a4:47:af:f0:02:e8:5d:39:65:37:
                    ec:97:46:8e:6c:33:53:10:a3:f1:23:a9:bc:58:1c:
                    9f:37:b2:d6:f7:0d:83:28:85:38:51:82:62:15:aa:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:28:15:49:F6:0B:4C:D9:F1:73:8C:9C:EC:F5:E6:3E:7B:64:FE:89
            X509v3 Authority Key Identifier:
                keyid:BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3d:c1:8c:2f:be:ca:12:74:53:13:7d:f9:78:8c:8a:8c:17:
         00:00:0a:58:07:08:d4:f2:9f:dd:89:91:75:9c:7a:01:18:f2:
         8d:51:1e:8d:8e:9e:a3:30:56:f7:34:40:46:5f:d3:b0:a1:7e:
         e4:77:c2:52:79:6a:b6:7f:59:f5:fc:ea:4b:3f:4d:e1:92:f1:
         51:e3:f4:e9:79:2c:8c:ff:4f:ce:80:13:70:2f:b2:3e:89:dc:
         3c:74:81:29:26:06:f8:fc:1e:42:76:18:ee:37:bf:f2:d9:d8:
         6e:e5:eb:a5:6e:8d:f5:96:eb:a4:58:42:8e:5e:c3:94:22:ce:
         81:33:89:2e:bd:cc:97:bd:c6:38:a1:6e:d4:7b:1a:cc:ce:05:
         35:52:a0:a7:c3:6e:9f:81:d8:b4:54:10:25:b9:da:1b:6e:4d:
         72:ef:70:5e:96:82:6c:3c:7f:4c:9d:3c:8e:eb:fb:30:99:b0:
         96:88:19:f3:f7:7c:4b:c0:47:92:4a:cf:0d:93:93:7b:63:d1:
         7a:c2:7f:33:58:6e:78:63:d6:9d:3a:16:70:e3:e1:fa:14:73:
         78:01:87:68:d2:1c:3b:c4:55:36:1f:fe:b5:32:f4:28:25:c8:
         85:17:54:25:73:ef:cc:57:43:ca:d9:e3:32:7b:03:4d:25:df:
         43:af:f8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:55 2026 by rpki-client