Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
File:                     u2qi6QuXDRvK7tElJWMlCBFT-dA.mft (raw, json)
Hash identifier:          lqlYesyn8WtRIIZhY2brLHdAvWKEypPiT44hPRI7RSQ=
Subject key identifier:   71:0B:B6:4B:5F:02:DD:2A:6B:A3:67:24:F8:E0:18:96:48:23:D3:E8
Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
Certificate issuer:       /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Certificate serial:       019FAA8835B3D9EA03CAE1D9D162F4191DDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
Manifest number:          4E
Signing time:             Tue 28 Jul 2026 21:01:21 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:21 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:21 +0000
Files and hashes:         1: 1-x0LA5b_Qa7duH02aAFMCbeAziE.roa (hash: D5E/NlS1WcmJBkiWUYiira8KCkqBtxvWMFgI/iWwLtQ=)
                          2: 57AVFEKk7vZln1xu08ncf1wfVP8.roa (hash: DpOPXY5JzxueLGeQrTDBAs7bP1zTXtO/7VEht/dL00M=)
                          3: 5AtrV7yOPOGzp3dD9scm4jFp88g.roa (hash: Iyw+z4hUQvrtjBYppz1+vkyM47qxvTh/rZ/AFbdmSyE=)
                          4: 75cRJGWWWeEGDBP5zSNTjgoUGow.roa (hash: q+98+01kCf3O5JbXFHN6n+KofQN/z5Q/5IhPWdMNYis=)
                          5: 929vYbDJj4se9paqibWN3-3R8HA.roa (hash: W9ddFPxvbc6tqGzHqj597SIXQeJ26nx3+gxFSTYVhW8=)
                          6: G8t30FnyqJ9nd31D40VQeRTEtBA.roa (hash: TUmnHq75alVMMqFrQcwFLzsSHCqRjTU+zq33n/KhuME=)
                          7: PA7a7k_FqAbOCSSdny8A5zy4pu0.roa (hash: 6VEOQ9K5YG9bmrKa0p42IftHBCyP7E0XhFsTGVC9+aE=)
                          8: kCEhbc-CjGlkrVP2PS1PYrIGODw.roa (hash: 9TV84/4RfuYCLfpfpR6Gh6BK5KQrek5oB2df/+w8lAo=)
                          9: u2qi6QuXDRvK7tElJWMlCBFT-dA.crl (hash: Y9DoWDQML9BTMd0CJpEKbA3CD992cElrDQsqjUK7ndM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:35:b3:d9:ea:03:ca:e1:d9:d1:62:f4:19:1d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
        Validity
            Not Before: Jul 28 21:01:21 2026 GMT
            Not After : Jul 29 21:01:21 2026 GMT
        Subject: CN=710bb64b5f02dd2a6ba36724f8e018964823d3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:52:3f:0f:d2:e3:2c:2e:8b:46:60:7f:81:
                    3d:a3:ad:f1:09:cc:5d:6f:03:a3:b0:70:6b:04:50:
                    d6:8f:85:26:16:9b:c2:0e:48:8a:04:c2:ed:ce:a2:
                    59:23:47:2c:b1:df:7f:05:88:24:89:47:d9:a1:19:
                    56:04:2f:de:83:dd:01:15:fc:4d:16:0b:50:b7:c1:
                    35:77:03:29:fa:94:c4:cd:95:21:8e:74:c4:d6:9c:
                    32:e5:a0:f5:a6:ec:bc:1e:f1:1d:29:89:72:02:a5:
                    5a:1e:6b:7c:4c:84:21:60:17:49:00:80:ca:e6:77:
                    37:b9:e0:c4:e9:25:22:a8:3b:1f:cb:86:4d:9d:0e:
                    ff:b6:94:df:f5:31:d5:6d:3e:32:d7:6d:aa:47:58:
                    6f:91:27:43:8b:aa:12:a1:bc:22:de:7d:02:1c:5f:
                    af:40:0f:8a:c0:a3:74:b1:da:89:2c:de:6f:be:d7:
                    03:e8:76:53:7c:a3:71:33:d5:eb:c3:fc:8b:58:a0:
                    00:bd:2e:7b:9a:fe:7a:54:9d:e3:84:f7:7d:77:61:
                    ee:9a:a5:88:69:8f:27:40:83:96:07:e2:5f:c4:31:
                    f1:4a:fc:b5:95:b8:1a:cc:f5:98:88:5b:70:f4:0b:
                    7b:4e:81:4a:55:85:e8:08:1d:a9:61:a0:76:1a:63:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0B:B6:4B:5F:02:DD:2A:6B:A3:67:24:F8:E0:18:96:48:23:D3:E8
            X509v3 Authority Key Identifier:
                keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:43:a6:15:a3:f3:61:c1:61:fe:42:8f:4c:f9:1f:a6:81:35:
         80:a8:30:ff:99:e8:2c:6b:95:e1:dd:b5:a4:5e:79:d1:05:b4:
         0b:c1:fa:15:08:26:56:d2:89:51:2d:c8:f4:34:6f:d7:8d:99:
         d5:ca:70:76:42:d9:3a:77:39:63:f1:2b:18:85:df:44:1a:08:
         4f:c1:4f:9f:a4:93:2a:41:74:f0:84:be:74:e7:b8:78:5a:48:
         09:6a:b3:5c:10:52:43:70:6d:cd:96:05:ea:92:69:2f:34:6f:
         43:1b:1b:fd:6b:9a:51:3c:8e:73:59:eb:85:67:1f:a2:6d:74:
         c1:9f:18:98:ca:6d:c4:ec:7e:1a:61:3b:1d:8f:7f:f6:3f:b6:
         84:49:1f:3e:b1:99:ff:9a:84:e0:c9:38:bd:6a:dd:83:c8:56:
         d4:14:83:65:29:c9:bf:97:75:80:77:80:64:25:13:4d:6f:94:
         32:b2:37:28:47:a1:a1:5e:f7:b3:e9:9f:46:fb:a2:20:cd:18:
         b7:34:15:23:95:70:46:ef:88:52:0d:d1:07:ca:5a:8b:70:c1:
         79:b2:f7:6d:3d:eb:20:00:ce:87:4d:30:f5:1f:a9:08:a2:6f:
         d2:87:de:df:97:5c:80:78:14:9e:15:08:b2:cc:6b:e7:e3:8d:
         61:93:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:29 2026 by rpki-client