Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File:                     4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier:          70w5RNRb45Xoas/gAmgcZbHeQdYXS7T2VfHZQB7N5Rs=
Subject key identifier:   19:6C:C3:55:EE:A8:12:EA:0D:B3:EE:73:56:34:23:4E:D9:4B:82:34
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer:       /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial:       019FA8D03357A4095234E1A06A209FCA08C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number:          10E5
Signing time:             Tue 28 Jul 2026 13:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:44 +0000
Files and hashes:         1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: 3I9PLivzv03wTPC6N2v7tT5qS9wlJuD2E7vkgFLU2bE=)
                          2: a9UUQvVUQnxe273U6aniMeuVSV8.roa (hash: 7vEXbXNqwlMSgJyfX4S5RjxAdbJ6vW8VHoOqOei233g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:33:57:a4:09:52:34:e1:a0:6a:20:9f:ca:08:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
        Validity
            Not Before: Jul 28 13:00:44 2026 GMT
            Not After : Jul 29 13:00:44 2026 GMT
        Subject: CN=196cc355eea812ea0db3ee735634234ed94b8234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c5:c7:f1:39:01:42:50:0f:79:6d:03:8a:98:
                    73:3c:e1:3a:94:4d:d5:d5:ac:28:13:9f:db:fb:f5:
                    ed:d3:80:fd:5b:58:34:5d:cb:ae:9a:4f:28:fc:50:
                    c8:d1:eb:08:e1:d2:24:01:40:30:d2:7b:c0:61:00:
                    1d:d3:e9:3a:97:37:52:af:9c:86:47:4b:7e:49:25:
                    d9:84:77:51:09:13:96:2d:38:76:74:e1:b0:dd:80:
                    9a:98:bf:6c:85:03:08:43:35:de:a4:24:b2:2a:98:
                    ca:19:8d:79:a7:88:8b:a1:9b:e4:39:1a:10:9c:c7:
                    57:51:56:bc:11:75:29:ea:a8:ba:2a:8c:2e:e4:10:
                    7e:2b:c2:78:07:d8:41:91:8d:3a:e9:1a:17:9f:2f:
                    5f:48:67:4f:1e:34:ea:7f:e7:51:b0:4c:f8:5e:fc:
                    a6:5a:32:2f:2d:2a:f9:aa:58:c7:ee:cd:3e:d5:8a:
                    66:8b:66:15:ce:87:cb:65:61:06:34:ab:10:21:44:
                    b0:0b:b3:7d:87:ed:85:75:62:19:b0:d8:e9:03:91:
                    28:4d:e5:10:93:51:bc:69:e4:de:87:a6:79:9a:44:
                    58:3b:67:0e:49:5f:2c:3f:5f:56:a9:a8:7d:cc:1a:
                    e7:4e:08:2b:ff:d7:72:0c:15:f4:53:5a:2c:31:7d:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6C:C3:55:EE:A8:12:EA:0D:B3:EE:73:56:34:23:4E:D9:4B:82:34
            X509v3 Authority Key Identifier:
                keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:52:4e:c8:d5:25:3d:7f:52:06:f2:6a:33:04:f6:b7:80:e2:
         5a:21:be:16:fe:c2:e0:61:cb:90:31:d1:3d:24:53:d1:3c:f0:
         87:c8:2a:9b:e0:dd:23:c1:96:65:18:c7:d1:f3:4b:ae:6e:d4:
         64:e0:fc:5f:9c:09:61:3b:3b:05:03:4e:db:09:1b:48:bb:3e:
         95:ca:d1:d1:87:88:37:5d:04:d7:11:5f:68:ec:ee:3c:e3:78:
         af:19:7e:43:3b:9f:eb:4e:bf:97:3c:9d:aa:2b:99:0d:9c:95:
         e4:7b:2e:9e:00:13:f3:fc:43:d5:ff:62:58:0b:fd:71:5b:e5:
         b5:e2:09:b7:00:a8:79:82:e9:f2:02:8f:f6:f5:fb:38:25:6e:
         8a:33:83:fa:81:06:dc:ae:7d:4a:a2:68:16:7d:c4:f0:9b:c5:
         46:02:21:1d:0e:07:80:82:06:0e:aa:06:aa:99:09:57:3e:81:
         04:87:af:86:ee:cd:c2:84:f0:aa:36:91:5e:73:26:f9:76:14:
         66:07:68:af:29:78:06:c8:99:78:7c:a2:2e:84:74:fd:a3:c4:
         5e:a3:be:52:90:7f:a4:1a:84:23:6a:13:f4:cb:a6:0b:77:51:
         c5:26:a7:34:3f:cf:ca:99:f2:03:8c:c6:34:62:33:d7:16:16:
         f7:48:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:49 2026 by rpki-client