Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File:                     4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier:          xqUgLPldYn16vYWKjdQmw0ctw2mE6hussnLHZxfAXOo=
Subject key identifier:   55:F6:ED:8E:92:02:B7:3D:BF:CF:3A:B6:00:E6:9A:34:A8:C3:61:10
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer:       /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial:       019FA975B8F91413151E3BEC2638D660D558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number:          1026
Signing time:             Tue 28 Jul 2026 16:01:32 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:32 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:32 +0000
Files and hashes:         1: 0okF-0SC05COeO8yZcXV41DKYTQ.roa (hash: 84QdZnJ3IbXKy/3dxIJgvDtuCv1JRPJqt/K+MUPi0mI=)
                          2: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: UwwCbfH43fRnfp5bdH3wKmBE8JSzAenUKMeZXES6V5g=)
                          3: FR-mBIRRF77kp9f_A_tdLCi7jhI.roa (hash: ls0AadaeNbnlTalpbJupO/oWIdL0LohHfGz3dRZulFc=)
                          4: kJytGYOElfqrC3DHKmoh96BhevM.roa (hash: /mTOzryyb1u7CjMFfOIX5gO5vlkkJlQ566zrAJlL2zU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:b8:f9:14:13:15:1e:3b:ec:26:38:d6:60:d5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
        Validity
            Not Before: Jul 28 16:01:32 2026 GMT
            Not After : Jul 29 16:01:32 2026 GMT
        Subject: CN=55f6ed8e9202b73dbfcf3ab600e69a34a8c36110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:88:f4:94:d4:cc:bf:03:59:b4:41:9e:c8:
                    30:a5:06:61:2b:41:ed:1f:d5:84:6a:3d:f1:c5:45:
                    cf:99:4e:3d:1f:28:f8:1e:c9:ff:e1:a4:21:1d:e9:
                    8b:fd:6e:44:23:ed:b0:b0:b4:67:b4:94:34:94:24:
                    ae:a2:87:49:b3:21:9c:96:63:af:5a:83:b0:b2:c5:
                    2d:cf:ab:64:65:c8:a8:fe:09:aa:cc:3a:0f:94:c2:
                    97:54:7e:0c:b2:01:fa:9f:33:6e:00:4e:cd:84:2f:
                    bb:09:9d:10:b0:5a:62:a7:cf:22:57:8d:82:b5:39:
                    62:35:7c:a8:76:5a:8c:af:48:2c:92:f4:a0:ad:db:
                    b8:bc:20:34:ff:58:79:ca:b7:c0:70:dd:b6:8b:5d:
                    90:56:62:b9:25:0a:9d:84:2e:89:31:11:ad:80:de:
                    12:6b:60:4d:b7:80:23:42:ed:ee:c9:ea:f4:f9:88:
                    ad:7a:0a:3d:7d:65:42:59:9e:39:c8:56:01:6f:a0:
                    8a:d4:dc:bd:c1:49:87:45:65:a3:42:bb:52:77:d2:
                    f6:ab:e0:e4:20:50:27:3b:37:71:94:70:5f:9a:ba:
                    08:a3:01:fe:14:71:2d:99:84:b6:db:07:78:e6:07:
                    86:95:6e:a4:09:90:17:30:2d:0f:63:aa:e4:8a:22:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F6:ED:8E:92:02:B7:3D:BF:CF:3A:B6:00:E6:9A:34:A8:C3:61:10
            X509v3 Authority Key Identifier:
                keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:64:28:a9:d5:d4:c7:0b:d1:82:3d:e4:74:21:b5:11:0b:55:
         37:47:4f:a5:eb:7c:6f:9f:0d:be:62:f0:d6:e9:29:83:6f:b9:
         34:66:61:ca:ae:38:3c:14:e8:37:03:a5:2c:cf:35:20:66:f2:
         1e:07:d8:8f:d7:b6:6d:17:40:2f:49:1e:df:c6:cf:b1:d8:80:
         ad:a6:a2:c2:05:bd:3c:74:40:c7:77:fa:8a:c4:72:87:f6:28:
         b7:d7:3d:c2:a0:e8:5c:05:5d:d3:fc:0e:dc:da:d5:c3:b2:c2:
         f1:e5:84:d3:8e:a1:7b:19:d7:aa:3f:55:36:65:0c:95:a4:38:
         df:d9:27:83:81:35:b2:3a:d9:24:aa:45:c3:bb:41:61:10:4a:
         34:be:5f:01:47:29:77:10:b9:12:7c:c1:51:a7:d4:be:0f:ed:
         c2:46:2b:27:91:3b:94:0d:3a:61:34:88:12:da:2b:74:6e:8e:
         4b:9b:dd:3a:96:ec:7a:c9:32:07:a4:21:f9:a0:04:1c:90:f4:
         b6:d9:7c:0a:5e:9c:5b:5c:fe:ca:ab:8a:10:6b:d7:ac:b7:13:
         51:db:74:a2:1d:2f:51:d7:d1:4a:fa:bb:a2:65:46:3e:e8:ea:
         0a:09:a5:eb:ae:bb:41:00:28:de:e2:57:82:a5:10:d6:6d:c5:
         37:e1:6a:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdbj5FBMVHjvsJjjWYNVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzQ0YmE2MzQwOTYxZGE1ZWViNGFlMjM5ZTlhMDYyNjc3
OTNlMmUwHhcNMjYwNzI4MTYwMTMyWhcNMjYwNzI5MTYwMTMyWjAzMTEwLwYDVQQD
Eyg1NWY2ZWQ4ZTkyMDJiNzNkYmZjZjNhYjYwMGU2OWEzNGE4YzM2MTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+OI9JTUzL8DWbRBnsgwpQZhK0Ht
H9WEaj3xxUXPmU49Hyj4Hsn/4aQhHemL/W5EI+2wsLRntJQ0lCSuoodJsyGclmOv
WoOwssUtz6tkZcio/gmqzDoPlMKXVH4MsgH6nzNuAE7NhC+7CZ0QsFpip88iV42C
tTliNXyodlqMr0gskvSgrdu4vCA0/1h5yrfAcN22i12QVmK5JQqdhC6JMRGtgN4S
a2BNt4AjQu3uyer0+Yitego9fWVCWZ45yFYBb6CK1Ny9wUmHRWWjQrtSd9L2q+Dk
IFAnOzdxlHBfmroIowH+FHEtmYS22wd45geGlW6kCZAXMC0PY6rkiiKXdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX27Y6SArc9v886tgDmmjSow2EQMB8GA1UdIwQY
MBaAFOI0S6Y0CWHaXutK4jnpoGJneT4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2Qt
MDJlYjlhNDEyNjM3LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2QtMDJlYjlhNDEyNjM3
LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGQoqdXU
xwvRgj3kdCG1EQtVN0dPpet8b58NvmLw1ukpg2+5NGZhyq44PBToNwOlLM81IGby
HgfYj9e2bRdAL0ke38bPsdiAraaiwgW9PHRAx3f6isRyh/Yot9c9wqDoXAVd0/wO
3NrVw7LC8eWE046hexnXqj9VNmUMlaQ439kng4E1sjrZJKpFw7tBYRBKNL5fAUcp
dxC5EnzBUafUvg/twkYrJ5E7lA06YTSIEtordG6OS5vdOpbseskyB6Qh+aAEHJD0
ttl8Cl6cW1z+yquKEGvXrLcTUdt0oh0vUdfRSvq7omVGPujqCgml6667QQAo3uJX
gqUQ1m3FN+Fqew==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:31 2026 by rpki-client