Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
File:                     FZLn4r66W82NQp2b7lN2sIEEdas.mft (raw, json)
Hash identifier:          Zvy39FsKBv0ZJCMU8wRRxYCon2+PBQciI8bxzDYvkSA=
Subject key identifier:   C9:A4:55:D2:C4:B0:73:80:0A:7B:1A:29:1C:D9:FB:C1:7F:3A:8B:03
Authority key identifier: 15:92:E7:E2:BE:BA:5B:CD:8D:42:9D:9B:EE:53:76:B0:81:04:75:AB
Certificate issuer:       /CN=1592e7e2beba5bcd8d429d9bee5376b0810475ab
Certificate serial:       019FAC7722A3E88B140CF970DD06D4A4EC26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:56 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:56 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:56 +0000
Files and hashes:         1: FZLn4r66W82NQp2b7lN2sIEEdas.crl (hash: R/xGg8yVZhDMaWxrOV42p4Kl1w7i0ewlPgCDS31J4g4=)
                          2: tVmxzUAxVXy4qWT2LiFbf_CGLYs.roa (hash: Ga9D1Kj+eOQFH1ST/P7sI0dH985uIKk/1LYCPBqpD78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:77:22:a3:e8:8b:14:0c:f9:70:dd:06:d4:a4:ec:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1592e7e2beba5bcd8d429d9bee5376b0810475ab
        Validity
            Not Before: Jul 29 06:01:56 2026 GMT
            Not After : Jul 30 06:01:56 2026 GMT
        Subject: CN=c9a455d2c4b073800a7b1a291cd9fbc17f3a8b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:67:eb:17:1a:78:5e:5d:a9:6e:1e:67:d2:
                    a8:7c:09:44:c9:2c:3b:68:b9:c7:3e:cb:c0:63:59:
                    6b:3b:51:79:cd:45:1b:4b:63:02:3b:c1:05:72:99:
                    d5:c6:77:40:23:7c:9d:c9:da:34:5a:b7:57:aa:bd:
                    6d:77:1e:e6:65:7e:61:97:67:57:1d:4f:4d:d6:bf:
                    e1:62:7c:19:4d:66:38:0f:53:d0:87:5b:d8:ef:ca:
                    82:d7:0d:55:6c:e7:7a:11:33:09:ff:58:84:27:bf:
                    4a:05:6a:34:ee:e2:e0:b2:78:f1:27:9c:c3:a0:e2:
                    79:3b:4d:a2:86:ce:ae:36:9f:03:a5:5b:d1:ad:8a:
                    68:64:70:ff:cf:da:a9:47:fb:81:bb:bf:73:4a:3d:
                    17:a0:d8:13:fc:2a:3f:89:45:34:0b:0a:44:0b:45:
                    75:2a:2d:64:12:7a:39:a9:30:12:8a:75:dd:69:e6:
                    ae:e9:81:85:2f:66:69:07:76:ba:37:b9:d8:89:11:
                    40:ee:9b:02:1c:34:21:2a:a5:ad:2c:ad:d3:f2:99:
                    c3:0a:09:00:95:71:f9:07:be:2b:d2:69:5e:74:d6:
                    aa:11:0e:72:2e:c1:e1:d2:8d:07:c8:fe:13:ed:5d:
                    a8:bc:58:0c:3a:b2:45:3c:a3:46:0c:dd:23:c2:eb:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A4:55:D2:C4:B0:73:80:0A:7B:1A:29:1C:D9:FB:C1:7F:3A:8B:03
            X509v3 Authority Key Identifier:
                keyid:15:92:E7:E2:BE:BA:5B:CD:8D:42:9D:9B:EE:53:76:B0:81:04:75:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7b:49:5e:46:b8:51:19:66:3b:07:48:46:0e:58:fe:fc:6b:
         be:61:48:2f:48:59:63:89:c0:af:69:4a:81:4d:71:3a:d0:b0:
         22:49:48:47:97:e5:20:11:11:be:bf:e8:15:b9:ed:21:90:f0:
         22:a4:f3:07:3d:27:e2:89:0a:4d:2e:9a:24:4f:60:a1:a4:ea:
         53:d8:ea:c0:0e:82:1c:37:80:79:74:13:a8:45:af:09:f2:7d:
         fc:94:95:fa:38:bc:7f:fe:d4:97:09:25:b3:62:58:fe:d9:5d:
         36:c1:a0:be:7f:60:92:f6:e4:07:3e:33:d8:8d:9b:6a:04:d1:
         6a:fc:90:2e:01:66:8c:c6:32:c0:cb:2a:da:5e:77:5e:16:8e:
         22:88:61:1a:6e:c2:98:64:4f:77:eb:a2:59:ed:45:e2:40:26:
         47:33:1b:0d:b0:30:cf:0d:60:7b:55:ce:ff:cf:93:ce:f8:9b:
         66:f3:ff:79:2f:65:e6:ca:4a:4e:36:4a:a9:8b:cb:bc:f0:17:
         22:88:55:3e:ee:3c:49:a2:2e:85:7f:12:7a:f2:8a:4f:6d:f2:
         95:b2:77:2b:19:72:d8:ef:76:30:8d:20:3a:df:7a:20:7f:71:
         3d:98:8b:00:15:34:23:30:40:88:c5:d5:8b:f5:72:f3:75:c7:
         57:11:1d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:24:14 2026 by rpki-client