Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
File:                     SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft (raw, json)
Hash identifier:          k2vQNDVqUppT+ncCGrLaoFjeU6NLml1oRZs8tfFhGSo=
Subject key identifier:   C1:1C:C9:3D:DA:2E:26:7C:2A:2F:CD:E9:E1:EC:10:11:10:1E:11:92
Authority key identifier: 48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
Certificate issuer:       /CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Certificate serial:       019FAC763768B9E382AD087AEEDDC7EB8B08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:56 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:56 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:56 +0000
Files and hashes:         1: NA4KUnaZ-7quWuidYkuLJ9qLJL8.roa (hash: WMFv5tO73TosL+xYHmLzwInHMA669D5/mO5dF7Lq1sg=)
                          2: SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl (hash: KpY+lJ2MsZwMwtsGE5JqV4gbKGJQ0VEq4UFREWMU3a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:37:68:b9:e3:82:ad:08:7a:ee:dd:c7:eb:8b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
        Validity
            Not Before: Jul 29 06:00:56 2026 GMT
            Not After : Jul 30 06:00:56 2026 GMT
        Subject: CN=c11cc93dda2e267c2a2fcde9e1ec1011101e1192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1e:2a:c9:94:f2:15:87:63:e9:0a:51:b9:d6:
                    5f:4e:38:b8:39:df:95:54:d1:5f:07:6e:c8:82:3d:
                    ee:05:2f:32:27:1d:79:be:27:92:ec:fa:9b:fb:27:
                    5c:f8:ff:e9:b6:0f:d8:c1:49:62:f0:a0:be:b9:ef:
                    dd:27:01:a7:a3:61:66:93:14:36:07:d0:d3:e8:26:
                    bc:de:c5:24:16:c3:83:14:cb:d8:14:7f:96:87:15:
                    28:e0:13:90:c2:2d:47:ad:af:02:16:d7:6d:a1:f2:
                    f2:1c:c7:6d:11:c7:d8:e0:e4:ae:61:e3:e0:35:ea:
                    2f:5a:a3:10:86:8c:73:03:53:41:66:6e:3a:52:09:
                    51:9a:3b:74:c1:df:55:45:4b:ea:da:95:67:8f:ee:
                    60:71:7e:25:cc:64:cb:0d:48:d2:a5:68:df:3b:cd:
                    02:a3:9f:b7:49:e8:28:8d:c6:ab:66:37:76:75:08:
                    a2:0f:57:9c:1e:b9:22:c7:a6:f4:71:84:b7:3a:9a:
                    aa:6a:dc:cf:1a:59:8a:43:05:60:a4:f2:8a:3b:c8:
                    a6:12:cb:4a:46:44:4b:43:26:db:a2:70:46:29:81:
                    e4:74:1b:d7:67:fb:16:c4:b1:9e:3a:d0:fb:9c:a2:
                    c9:14:1f:c5:92:12:ab:b2:2e:25:c0:d3:9a:26:c2:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1C:C9:3D:DA:2E:26:7C:2A:2F:CD:E9:E1:EC:10:11:10:1E:11:92
            X509v3 Authority Key Identifier:
                keyid:48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:20:97:f8:8c:2d:41:12:5c:3d:f7:48:b7:ae:a1:1e:9a:92:
         00:75:23:77:6a:f4:7b:f1:d4:1b:89:df:e5:57:dd:5f:ed:d1:
         ff:23:f1:37:c8:cf:d2:af:06:16:89:d2:a5:46:59:c8:06:aa:
         f8:e1:e8:63:d5:79:05:76:fc:a4:36:f9:82:bc:72:47:6e:0c:
         7e:e8:64:3a:0a:66:aa:e3:7b:df:82:0b:d8:f5:4e:a8:93:48:
         a8:2a:28:a8:32:d3:cd:f4:f6:22:39:4f:a4:ff:60:6f:81:6e:
         a3:e0:40:71:bc:64:fb:43:90:ab:f5:f3:17:e1:ca:51:e5:71:
         78:8f:4a:f9:f7:a6:64:e1:7f:54:8a:76:c0:de:c0:8d:c5:0f:
         2c:ac:8b:5e:c3:ff:c6:66:a9:46:ca:81:8a:d0:3e:c5:72:21:
         96:32:4e:c0:9f:cb:96:d5:6d:23:17:0d:f5:87:39:f3:13:68:
         97:c8:b7:3e:6d:10:86:21:43:0f:5e:ea:e8:3f:7c:50:83:cd:
         8c:ec:35:2a:b2:e7:d2:0b:f0:ec:8f:f6:0a:78:90:c4:38:38:
         b0:55:a5:a0:98:5c:ae:93:be:25:dc:b4:e9:97:04:5b:e9:15:
         4a:2d:89:9a:e4:64:59:30:ea:e7:c3:e1:32:c1:db:74:bf:de:
         10:60:80:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:03:57 2026 by rpki-client