Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
File:                     U4LANwL31t1s72Zs4gUxU8mv6Us.mft (raw, json)
Hash identifier:          LFONh1QNLz9VeJOKwru0aNtjZG5xEo2G0otaKT1G1Yc=
Subject key identifier:   6E:27:DF:EA:DC:45:71:37:23:96:7D:14:79:5C:4D:E2:89:62:DC:F2
Authority key identifier: 53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
Certificate issuer:       /CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Certificate serial:       019FA8D0A41F3E4A01891715691FBC20A714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
Manifest number:          C0
Signing time:             Tue 28 Jul 2026 13:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:13 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:13 +0000
Files and hashes:         1: U4LANwL31t1s72Zs4gUxU8mv6Us.crl (hash: 16pqSCfVb6Fzw6C4KS1le6fKQLgU2FgTA0CnHRBr+qs=)
                          2: m_nKiCuVzTi2TKccGiONJSKEB70.roa (hash: S3r/rA3wAxsL4UrMnk+l9Ka3WgxOB/UdzMyaqt2gqiY=)
                          3: xNohHyHNAtZbFs1TNTPBi4HGfmM.asa (hash: RKzmJOhU01ix0w7bW/M3Ue48L0hu6xJh91dZNeFrjAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:a4:1f:3e:4a:01:89:17:15:69:1f:bc:20:a7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
        Validity
            Not Before: Jul 28 13:01:13 2026 GMT
            Not After : Jul 29 13:01:13 2026 GMT
        Subject: CN=6e27dfeadc45713723967d14795c4de28962dcf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2d:d0:3b:30:da:e2:38:63:22:05:7d:09:ca:
                    76:e8:0f:ab:51:6e:92:8f:36:c8:33:b7:ec:e4:f1:
                    d6:c4:a1:37:67:4d:fa:03:86:8a:fb:9e:ff:3c:9e:
                    62:98:9a:68:c0:48:1f:56:2b:0a:ec:66:34:cd:21:
                    a8:24:2f:58:6d:51:a3:18:73:26:f2:8e:1a:34:fa:
                    8d:a8:83:6c:6f:d9:56:93:3b:43:43:8f:6a:ba:33:
                    30:89:3a:a0:83:c0:e9:1d:69:e7:49:e5:ef:61:a4:
                    ad:26:29:28:53:db:db:4b:bd:58:d4:f0:08:a2:45:
                    1b:c3:43:26:b9:bf:68:fc:a4:0d:55:bc:8e:72:93:
                    83:93:d6:30:9c:84:e7:9f:a0:14:39:a8:53:44:6b:
                    64:a4:6c:8a:41:92:49:0c:7c:29:9f:58:ac:2a:44:
                    ab:5f:e2:f3:80:5a:4c:6e:bb:42:ad:1e:83:a0:65:
                    a1:e9:92:43:2e:a5:c4:53:3c:a4:4f:cd:1a:13:f7:
                    ce:61:0a:2d:11:81:a8:00:f1:99:06:a8:ba:9f:db:
                    8b:c9:fc:f7:0c:83:6c:fe:67:4e:21:1b:b3:90:fc:
                    9d:25:49:40:e1:61:34:c8:ae:ec:89:39:a5:af:03:
                    9a:55:01:fd:15:12:c5:0e:de:1c:91:60:c0:5f:bb:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:27:DF:EA:DC:45:71:37:23:96:7D:14:79:5C:4D:E2:89:62:DC:F2
            X509v3 Authority Key Identifier:
                keyid:53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:88:ff:42:41:29:cf:35:10:d5:33:10:0f:1d:21:10:18:9a:
         73:7a:3b:00:31:1a:29:84:93:e8:21:e6:81:bc:75:3d:05:26:
         57:9e:90:d0:de:d2:8b:36:eb:9f:be:22:4d:71:a5:68:2b:83:
         a2:ec:a2:8a:28:14:5d:79:2c:f6:f0:47:06:d2:31:f5:bd:3d:
         9b:df:f0:0f:30:db:a1:b0:01:fe:8c:0a:ef:38:e8:56:4a:39:
         da:89:ac:0f:63:28:ff:a8:17:a5:9a:8f:cc:c3:bf:66:61:8d:
         d0:a3:4d:99:5e:bd:fe:88:3b:fe:2f:9e:3f:56:0b:ef:e3:65:
         c2:ce:42:86:21:45:2f:1b:c3:fd:c1:44:14:34:9d:0d:5f:62:
         75:01:7b:be:aa:de:28:8e:ed:f8:29:3a:03:27:b0:76:a0:df:
         a3:51:03:f9:f3:30:55:e8:0f:d9:50:ac:3f:c7:3c:8f:53:4f:
         eb:a7:45:79:80:73:2a:22:da:c0:35:4a:bf:6c:9a:b6:74:94:
         3b:e7:63:16:78:66:02:16:1a:87:dd:42:82:75:c8:81:bb:08:
         5b:0d:d0:6b:42:9d:73:4a:a2:5d:6f:5e:df:1d:2d:42:38:f9:
         01:e1:1d:52:7b:20:04:5e:2f:88:8f:de:14:4d:fd:e2:04:cd:
         5f:9c:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:11 2026 by rpki-client