Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
File:                     7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft (raw, json)
Hash identifier:          JYiUpCbjJLxiB0OgPiIb7uE6kXXFiHmRjQhfoBAZ6/8=
Subject key identifier:   52:B2:48:A4:55:9E:23:D1:B2:C2:38:7B:C0:88:27:B9:93:B3:9C:B2
Authority key identifier: EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
Certificate issuer:       /CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Certificate serial:       019FA89992CBD50D7F7FFBD4C943235AAB93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:04 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:04 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:04 +0000
Files and hashes:         1: 7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl (hash: EFfJw+3IWQJXvkiB+XV2g8lxonH8LDyq2F1sbAct6YI=)
                          2: HCihUF_5hDpIqXqYUJrzBJumeUI.roa (hash: f9CXT6KQWpEiwwhV9yK1XmVpJI+yxpUMYfkH0B1xxTc=)
                          3: K5IqS4P79U0rKvWInjWR5wEFe2Q.roa (hash: 9q13mYvOIEN+e4PDt27Up4NO4FxU8lAzXOS+dNjdg84=)
                          4: d7Aas885l3KjzbxzDRzrGQP7qlo.roa (hash: 49B2bk75lbQU3fm+06dc2qLUyXkN1RUhU0NMkmUUNbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:92:cb:d5:0d:7f:7f:fb:d4:c9:43:23:5a:ab:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
        Validity
            Not Before: Jul 28 12:01:04 2026 GMT
            Not After : Jul 29 12:01:04 2026 GMT
        Subject: CN=52b248a4559e23d1b2c2387bc08827b993b39cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:80:b1:5e:71:2a:a4:3c:fd:1f:69:ef:26:
                    02:3e:d9:bb:4f:37:e8:41:ba:f7:75:a5:fe:3f:40:
                    58:4b:36:38:49:9e:49:f4:36:24:38:71:27:84:b1:
                    6a:6b:7c:d6:06:07:13:e0:b6:e7:02:c3:14:34:f3:
                    0c:8f:e6:90:81:51:2b:d4:5d:18:5e:c5:d1:1b:7f:
                    bc:43:44:2d:39:40:72:8f:df:fa:75:cc:dd:38:1e:
                    c7:9b:44:bd:28:2a:88:c6:3c:25:c9:97:14:5f:42:
                    ae:6e:df:b5:78:ba:cd:c7:00:40:ae:27:82:31:b8:
                    6c:c4:17:e8:5b:f3:ad:03:a6:a5:34:3f:30:65:9b:
                    55:00:99:e8:72:3a:1f:12:d2:36:f7:c8:8d:7a:4f:
                    0e:f7:0a:b6:89:df:89:05:c8:21:97:98:6a:93:17:
                    92:14:63:65:fa:6e:6b:30:e4:9f:ce:84:7d:90:15:
                    05:f5:77:5b:76:6e:65:b8:9e:b1:e0:0c:ef:fb:53:
                    78:75:ec:e5:b3:7e:13:fd:03:e7:63:71:e3:8f:a1:
                    f9:6c:fc:82:ea:7f:93:5e:1d:6e:4d:3b:12:12:60:
                    0a:92:d6:da:ad:74:4e:51:f8:26:ee:8f:56:8c:8d:
                    e5:16:1c:23:f7:82:4b:f5:31:d6:da:ba:61:92:38:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B2:48:A4:55:9E:23:D1:B2:C2:38:7B:C0:88:27:B9:93:B3:9C:B2
            X509v3 Authority Key Identifier:
                keyid:EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:03:a4:c2:7c:55:92:d8:4b:64:52:63:9b:70:32:90:57:61:
         0b:d5:c3:8d:77:dd:f9:54:9a:de:c0:c1:25:8d:13:9e:cd:a3:
         a8:f9:fc:79:47:9f:55:35:b4:3f:3a:2e:89:28:36:8c:e0:f3:
         d7:29:87:80:77:0e:b6:13:71:0b:9c:d9:14:fb:5a:0d:72:45:
         7f:2a:93:56:ad:13:dc:6f:c6:73:a0:91:53:31:e1:b4:7c:55:
         46:fc:dd:a7:55:77:61:55:5e:3b:e1:dc:0c:42:7b:c2:cf:55:
         bf:21:bd:8b:6b:27:78:76:09:5b:8c:ee:e5:8c:19:57:f8:87:
         a3:1f:8c:95:f7:6d:ce:e9:40:f8:cd:b6:11:82:a6:cd:37:a8:
         7d:e7:ae:dc:41:eb:a0:40:7b:40:c4:31:e8:30:6d:12:6c:b5:
         73:08:4b:63:12:3b:e5:d5:62:70:67:6f:f1:35:b7:16:10:d9:
         46:ac:d6:c2:f5:d6:4b:cd:cf:c7:36:9a:e1:54:53:b6:2a:42:
         52:2f:e7:6e:1f:46:10:1f:2d:05:a9:57:a9:07:df:97:74:99:
         02:2a:35:d4:82:8d:91:9a:a3:c2:29:83:14:db:ea:70:bb:5e:
         88:1a:a2:e7:7a:c9:59:1d:1c:9e:f4:c6:d9:87:88:27:43:eb:
         35:02:a0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:53 2026 by rpki-client