Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft
File:                     7RpXpPGG_CJ_LgHhycRthas77dw.mft (raw, json)
Hash identifier:          ndVO0fHmNslT+2JR1j0zyUVc9cVWLw8WHBq0cYzEGNU=
Subject key identifier:   E2:CD:A7:14:01:54:E6:25:FA:4D:B3:2D:A1:00:C3:1C:77:85:65:90
Authority key identifier: ED:1A:57:A4:F1:86:FC:22:7F:2E:01:E1:C9:C4:6D:85:AB:3B:ED:DC
Certificate issuer:       /CN=ed1a57a4f186fc227f2e01e1c9c46d85ab3beddc
Certificate serial:       019FA786CE2635DBF778A5A6B7D6BD886F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7RpXpPGG_CJ_LgHhycRthas77dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 07:00:57 +0000
Manifest this update:     Tue 28 Jul 2026 07:00:57 +0000
Manifest next update:     Wed 29 Jul 2026 07:00:57 +0000
Files and hashes:         1: 7RpXpPGG_CJ_LgHhycRthas77dw.crl (hash: PxbFmKpswPFEYGZu8B0lg6Omc+kjPolnavffQ/Ykf5Q=)
                          2: dTd-s2kzr6zPGlBsSBhTqjjZxV4.asa (hash: g3rSCH17kTajNOiom6f2kvmwIPGfrWb06N4I32V9KxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7RpXpPGG_CJ_LgHhycRthas77dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:86:ce:26:35:db:f7:78:a5:a6:b7:d6:bd:88:6f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1a57a4f186fc227f2e01e1c9c46d85ab3beddc
        Validity
            Not Before: Jul 28 07:00:57 2026 GMT
            Not After : Jul 29 07:00:57 2026 GMT
        Subject: CN=e2cda7140154e625fa4db32da100c31c77856590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:b6:33:74:8f:4f:54:fe:5b:ad:1b:03:91:
                    9a:cd:cc:3a:18:b1:0a:4e:5f:9b:99:7f:b5:a1:2c:
                    88:12:a8:bd:73:b1:9e:f2:c8:ea:11:58:0a:29:b1:
                    93:fc:c3:ee:27:74:e2:7a:22:81:c4:a5:8a:57:82:
                    28:df:38:4e:ff:8a:9a:67:b4:92:06:d9:15:4c:68:
                    ae:c2:84:cd:46:ca:6a:fd:f9:ef:23:c2:59:32:1b:
                    f7:3e:7e:7b:1e:8e:0a:23:05:be:54:8e:e5:87:b8:
                    2b:bb:e8:23:37:e8:b3:52:e5:10:0c:df:62:d0:8a:
                    6f:ed:a0:7a:a2:7d:f5:81:c6:cb:25:c9:7c:14:f8:
                    cb:9b:5e:6e:5a:01:5a:45:c1:90:b3:30:5e:28:b6:
                    c7:04:81:4d:47:87:c5:de:cd:08:ed:73:1f:a2:83:
                    c1:c6:87:b1:87:af:a0:5e:cc:4b:bb:70:78:77:d7:
                    9d:01:7d:35:55:c6:e5:4e:cc:b6:71:3d:50:81:62:
                    2a:f0:a4:77:b0:c7:13:a1:6c:2b:b9:bb:b1:22:45:
                    7e:b1:0b:84:e3:4e:4c:2c:2b:43:83:23:3b:7a:69:
                    91:fc:1c:8a:d6:4d:84:5f:b3:ec:50:da:90:cc:3d:
                    2e:49:dd:2f:f8:85:1e:89:68:11:ef:2f:c6:3e:5d:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CD:A7:14:01:54:E6:25:FA:4D:B3:2D:A1:00:C3:1C:77:85:65:90
            X509v3 Authority Key Identifier:
                keyid:ED:1A:57:A4:F1:86:FC:22:7F:2E:01:E1:C9:C4:6D:85:AB:3B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RpXpPGG_CJ_LgHhycRthas77dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d3:2f:c2:f4:2c:30:04:6b:56:66:36:12:92:e6:d3:c8:d4:
         4e:6b:44:d0:bc:cf:0b:75:35:3b:8c:2e:2f:fe:ff:b2:76:b2:
         6a:7d:1b:3d:c2:46:73:86:ca:b8:48:7d:e4:e3:84:3e:65:6e:
         04:63:c9:7a:bc:ec:60:e0:ae:2e:b6:f2:64:af:29:62:92:eb:
         9c:23:00:e8:5a:f0:fc:a4:c0:b5:90:56:5e:c1:ba:f7:0e:01:
         60:a1:18:df:04:1e:6a:1a:5c:55:1f:9c:31:2d:b5:e5:d8:46:
         35:ec:f0:3d:16:ea:c4:7b:17:a5:31:fe:ed:81:1d:8b:fe:06:
         30:c6:43:d4:f1:d7:41:b6:df:7f:4b:88:e6:38:7f:32:71:c4:
         c2:ba:0c:f0:b7:1f:1f:cb:a3:b4:53:b1:5f:65:23:b0:7e:07:
         ec:58:70:b9:a8:5d:04:49:b5:9a:01:ce:08:e2:69:45:34:7b:
         e0:dd:07:10:bd:42:ef:0e:d8:b3:8e:08:28:03:10:70:c1:aa:
         8d:90:20:1e:db:17:8a:39:45:5c:a6:6f:56:1f:01:6e:01:12:
         52:d9:27:0a:9c:12:5c:46:5e:28:fe:34:7f:2b:e2:1d:98:70:
         7d:db:5d:20:ae:be:50:1a:4f:9e:0a:37:81:ae:5e:e5:80:f7:
         45:06:05:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:35 2026 by rpki-client