Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
File:                     4SOGDiDNss_fLO-zdToVuCKCkmY.mft (raw, json)
Hash identifier:          2+MeRkeOny4q9zFrAxhgyFNxXPavRE+FEbGVH7zG1zU=
Subject key identifier:   35:EA:0F:D0:6D:73:DA:1C:2F:6A:E7:3D:42:E1:B9:42:EC:CA:C6:F3
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Certificate issuer:       /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial:       019FA9E26C22C4A27248B1EA036E9CC378B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
Manifest number:          19E5
Signing time:             Tue 28 Jul 2026 18:00:15 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:15 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:15 +0000
Files and hashes:         1: 4SOGDiDNss_fLO-zdToVuCKCkmY.crl (hash: JO2hdyz/fDrSyE9kNzi7ppwoLzromjJmGdtT81SDQ4I=)
                          2: S7Uz_I8IzeD7hTGoQXYS9N__GC0.roa (hash: FP7SIZ/7iLDFogtQKcQOvCQlmpm4Vmx1iE/C1QcnQWM=)
                          3: _0nCseq1FCkVbzbEBFv3dRP0CRo.roa (hash: OhfKgZoueIF3fYUkheqntTclHjDepm3uHFhyWV7IKyI=)
                          4: tEWXmnOT8-tMqoRFm6EyOLojzhA.roa (hash: Qf0eR7/hJrKNYOJsvae06sHOvRAjRyYfjiFaNgfMGTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:6c:22:c4:a2:72:48:b1:ea:03:6e:9c:c3:78:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
        Validity
            Not Before: Jul 28 18:00:15 2026 GMT
            Not After : Jul 29 18:00:15 2026 GMT
        Subject: CN=35ea0fd06d73da1c2f6ae73d42e1b942eccac6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0e:71:9b:40:ff:f8:06:4b:28:c6:69:71:f3:
                    c3:fa:31:f6:ef:83:2b:ba:21:8b:bf:38:2f:d0:74:
                    b1:33:2a:38:02:70:39:79:f0:34:d2:59:77:63:d3:
                    97:14:92:d4:55:3b:c9:dd:09:fb:19:f6:3f:dc:a8:
                    40:6f:c0:aa:d9:24:4f:34:b9:2c:fa:10:c0:49:fe:
                    7d:d9:fa:2e:6f:5f:6e:4a:be:5b:40:78:eb:84:41:
                    72:7c:0b:c0:f8:08:ce:09:9e:8a:e2:c9:15:2e:a0:
                    54:77:35:76:22:8c:3f:16:1a:75:56:fc:0d:eb:05:
                    32:af:24:1b:0a:c3:96:d9:c1:83:73:a1:34:3f:c5:
                    4b:32:5e:c2:ba:7b:92:54:e9:8b:e8:d3:ca:08:8f:
                    16:8b:9a:94:ce:9b:41:89:0d:e6:ed:2b:73:5d:f3:
                    9f:d4:78:4f:e4:b7:db:20:be:62:a1:8b:5e:41:ab:
                    f4:50:8b:11:07:7d:cb:da:1b:4f:1f:44:bd:7b:c9:
                    4f:7d:05:e5:67:3b:98:23:1c:34:2c:aa:b6:6f:8b:
                    b9:5e:b8:0f:32:ec:01:9e:9e:42:6e:e9:fe:fb:7a:
                    12:5b:24:16:0f:fa:d4:e4:b5:3d:c6:20:3b:8f:8b:
                    42:06:46:ef:b9:a4:d2:f8:64:93:60:c5:25:b0:6c:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EA:0F:D0:6D:73:DA:1C:2F:6A:E7:3D:42:E1:B9:42:EC:CA:C6:F3
            X509v3 Authority Key Identifier:
                keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ec:d9:5e:69:0d:d4:50:ff:f7:f2:3c:c3:84:50:72:51:b5:
         f9:13:31:68:5e:fd:83:88:82:38:2e:d3:13:0e:30:30:9c:af:
         c7:c0:9e:da:03:8c:b3:55:cd:c6:96:34:5a:6a:35:e0:a2:75:
         6b:f5:03:96:b5:f3:e1:34:de:7d:12:36:46:53:ce:2c:ae:0b:
         66:05:0c:fa:8d:32:81:5b:08:da:00:2b:e2:06:08:bd:c3:e4:
         5a:66:fc:a5:67:2e:77:f5:d1:4f:65:ce:d5:74:ff:98:97:f8:
         4e:f2:ca:25:9a:1b:b9:50:6a:ca:88:78:75:3b:b1:7f:a4:e7:
         31:cc:30:b9:4b:ef:e4:20:3c:08:fb:55:31:c8:08:f3:f6:73:
         1c:0f:27:f3:f4:eb:ab:75:b2:bc:03:41:fb:c3:0e:a9:72:66:
         c4:f5:25:c3:3f:b3:f4:07:c1:0e:b1:9e:c4:dd:5b:07:d5:8f:
         6d:8c:cb:1f:fa:e4:99:f1:04:89:9e:79:85:9c:76:64:71:0b:
         f0:14:4d:8c:1a:b7:83:9e:63:b7:5a:89:7e:10:1e:53:8f:cb:
         58:7b:42:85:96:af:b0:46:25:75:3d:57:cc:ad:92:66:e0:bd:
         1d:f1:12:e9:fd:ed:57:01:40:a6:7c:bc:70:ca:60:2e:65:cc:
         ba:be:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:46 2026 by rpki-client