Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File:                     4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier:          PL52NpBKdibCx1dnJRTf6tme1ntDG8fGjwMLlVg+6aw=
Subject key identifier:   F4:01:B6:75:B2:CD:89:E9:F3:7E:E2:03:96:AD:8B:10:E6:54:04:16
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer:       /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial:       019EC14943178A6F4E8692685A5B2B5BB722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number:          0440
Signing time:             Sat 13 Jun 2026 14:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:04 +0000
Files and hashes:         1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: z0yKF8m+qGUZfdw3crEigUrEOIOaP9mT1RdMYJeW/s4=)
                          2: valzYXczYY3RJ6xb_g__yzBDYXU.roa (hash: bbU6NTwqQ5O7qErPjl86r7BZfQa4g2RHPM0gnU6rCb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:43:17:8a:6f:4e:86:92:68:5a:5b:2b:5b:b7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
        Validity
            Not Before: Jun 13 14:01:04 2026 GMT
            Not After : Jun 14 14:01:04 2026 GMT
        Subject: CN=f401b675b2cd89e9f37ee20396ad8b10e6540416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:2b:ed:8e:44:f9:4f:c4:83:3a:2a:d5:d9:
                    3a:16:74:a9:ba:1c:bb:e1:8e:0e:79:f2:dd:72:3c:
                    29:67:78:a6:f2:c4:6f:9d:27:15:39:8c:5d:ff:8c:
                    df:36:66:57:63:8c:53:d7:56:40:ee:bd:52:06:a0:
                    58:b3:d1:09:8a:28:06:e9:c2:3f:4c:92:97:48:4e:
                    6d:e4:ac:66:52:83:18:2f:31:d4:bc:09:66:e0:f2:
                    85:ad:d2:3f:14:88:3f:0e:f3:3b:b8:06:8e:38:2a:
                    83:87:6e:45:97:40:07:0f:71:87:7d:97:59:fe:bb:
                    48:ee:62:18:2c:ea:62:09:3a:a9:7b:4f:a4:2f:9d:
                    7d:f0:ea:b0:92:80:dd:62:c3:82:52:df:03:4b:35:
                    d7:cc:60:22:e7:7f:07:e1:7b:7f:5b:83:e1:14:c0:
                    5b:fb:48:f3:d4:12:e5:10:cb:9e:0b:c6:cc:77:a6:
                    a1:62:72:4c:fd:1b:05:c7:a4:5a:07:76:c1:f8:f3:
                    b7:c0:90:19:ea:7b:80:4a:13:1f:78:57:49:76:29:
                    77:b5:8e:fc:80:01:0b:7b:e3:74:94:7d:09:7b:f8:
                    33:fe:a0:ae:3e:1f:0f:f0:3f:02:79:20:0c:39:a7:
                    12:ab:8b:f0:ae:2f:86:75:5a:52:9d:9c:1d:e3:0a:
                    33:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:01:B6:75:B2:CD:89:E9:F3:7E:E2:03:96:AD:8B:10:E6:54:04:16
            X509v3 Authority Key Identifier:
                keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:13:a2:14:0f:03:c0:77:7f:ba:92:b1:fa:c8:8b:07:3e:df:
         7e:b5:18:99:9e:a3:6e:62:70:2a:1d:85:ed:da:bf:01:19:37:
         b5:20:48:07:a5:65:34:d4:74:a4:03:53:73:7e:c2:e9:24:03:
         9b:c8:e8:7a:fa:73:0f:ac:a6:2c:ae:98:bb:40:d2:37:49:70:
         fa:0a:56:ca:ab:07:1b:3b:17:c5:d7:3c:e7:39:c0:85:40:40:
         6a:84:33:69:99:05:af:d6:16:18:69:d5:73:5a:8a:30:c7:0e:
         fe:9a:2a:43:5c:89:43:14:2c:54:02:ca:5c:1d:3f:7a:24:62:
         00:2b:c4:e9:24:17:b1:20:19:a6:6b:e9:f4:12:d5:f7:30:44:
         95:a8:ae:5a:71:42:1a:da:e0:48:dc:8c:3f:ac:c9:f0:95:3b:
         8f:86:a3:94:0b:f2:01:7d:32:b0:01:f5:1a:02:6d:c2:34:d5:
         b7:69:19:4a:0a:21:94:39:ea:23:7b:f9:1b:53:14:5e:89:9e:
         63:e5:d2:18:e4:28:d0:d7:44:55:31:79:eb:6b:bd:27:07:1d:
         51:6b:98:8c:85:02:07:1c:16:ff:b1:64:54:06:9d:4c:5b:6e:
         98:77:fe:59:35:32:20:90:99:f0:bb:ad:22:e1:83:15:5c:fa:
         1a:f5:95:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:37 2026 by rpki-client