Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File:                     4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier:          c0nkpbNSTKCORELc26PtxkEAbbg8tjNRwRau1YghyDQ=
Subject key identifier:   78:ED:B4:86:08:A5:8D:B7:6F:06:6C:DA:EB:23:9F:DE:35:E5:45:6B
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer:       /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial:       019FAB2C33C5087EA6C09BF14D39061E59A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number:          0C3B
Signing time:             Wed 29 Jul 2026 00:00:28 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:28 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:28 +0000
Files and hashes:         1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: JWJoInRSYcPvzTw8t+umB7bFsHWZMBOY1r089sC7aXQ=)
                          2: JHxvjWc19A1tU7KyYGlgqUyLkL8.roa (hash: 9C5Ys0C3mf/K+bjsErUIoK6hkq5Fu1f77/hUUvfMpdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:33:c5:08:7e:a6:c0:9b:f1:4d:39:06:1e:59:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
        Validity
            Not Before: Jul 29 00:00:28 2026 GMT
            Not After : Jul 30 00:00:28 2026 GMT
        Subject: CN=78edb48608a58db76f066cdaeb239fde35e5456b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:df:2a:8d:8c:53:3a:c4:8e:07:55:38:f4:
                    eb:b4:3e:56:45:bf:1b:74:15:3a:1f:77:fb:fb:4d:
                    dd:ce:65:18:54:ce:e8:9c:2f:fc:a4:5d:ed:ae:6d:
                    e7:64:1c:7d:13:f2:de:75:3a:80:58:74:b6:f2:d2:
                    2b:e7:8b:a5:c7:2c:11:be:8f:20:ed:16:af:55:97:
                    59:ee:c1:0b:13:ac:e4:e4:d0:02:52:03:f0:44:d9:
                    76:57:5e:43:37:1b:94:f9:cd:3a:02:ca:f5:42:d5:
                    9e:bb:6c:e6:9d:93:26:70:67:76:5a:18:9c:11:fa:
                    a4:19:d5:00:f8:2e:7c:a4:a3:28:d4:24:3d:f9:d8:
                    f8:41:be:61:86:77:79:04:4a:6e:5b:06:8d:fe:3f:
                    ee:61:0c:44:7e:44:47:9e:ee:d5:eb:78:0e:ee:19:
                    cf:c0:4b:6c:69:4f:09:96:23:e2:cc:bd:17:81:22:
                    8e:2c:1d:6d:d6:fd:c5:f5:4d:8b:c1:41:bd:0f:eb:
                    4d:00:4a:0e:77:11:9c:2e:9f:8e:4d:99:2d:67:00:
                    44:c8:2a:b2:16:c0:d8:51:99:5c:bd:b6:69:f4:04:
                    af:56:22:a2:b4:a6:db:92:b2:63:1b:29:e4:53:c4:
                    c0:c3:bc:96:c0:01:b7:17:84:7d:78:6e:04:13:f2:
                    5e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:ED:B4:86:08:A5:8D:B7:6F:06:6C:DA:EB:23:9F:DE:35:E5:45:6B
            X509v3 Authority Key Identifier:
                keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:35:0a:d4:90:75:9a:4e:18:04:30:2c:4e:81:fa:26:7b:5b:
         db:e2:c2:10:18:46:c4:77:2c:9f:dd:ec:32:ec:ed:39:d8:04:
         11:f5:c3:b3:8d:70:de:8c:e6:3e:9b:26:10:d4:ef:df:07:0f:
         1b:d6:7f:3c:13:4b:b0:93:40:7b:a3:9b:91:f1:9d:63:61:7e:
         1a:57:37:0e:30:a2:ca:70:d5:b4:e4:56:5d:34:23:30:58:dc:
         1c:12:3f:36:e0:32:a7:32:73:8f:5d:70:d7:2b:45:91:f9:10:
         00:13:d7:43:6e:90:f4:7b:b8:e5:7f:9a:f6:b5:89:ad:da:b1:
         8e:fd:b5:a1:42:2e:39:36:b2:58:9d:cb:70:fd:5b:62:d0:4a:
         b3:f4:31:4d:63:ca:a1:8e:3f:42:20:99:77:30:cf:4c:23:92:
         b5:df:96:62:e7:49:8d:86:bf:2a:90:a2:88:bb:7d:b1:d0:8b:
         33:4a:bd:8c:5c:e1:58:ab:12:d7:11:cc:02:cc:51:d6:84:ff:
         84:50:57:c6:46:d1:0c:44:cc:2d:26:aa:52:69:32:2a:ff:e1:
         05:9f:b8:40:7e:fd:21:75:89:4f:0b:87:6d:18:35:31:ac:b5:
         1a:7f:18:b1:b8:bd:9c:0f:24:8d:f1:0f:3b:fc:94:ff:02:e0:
         b4:18:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:59:06 2026 by rpki-client