Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File:                     CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier:          docT2HPxidMl3P/IGoGio6QTyOMCyAQ0xV8z7BI9jVQ=
Subject key identifier:   D3:2B:F1:E2:B4:F9:1A:53:B2:1A:49:8B:42:47:44:A3:ED:63:9C:5F
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer:       /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial:       019FA89A41BFFC17DFC6E7BCA322592CFEE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 12:01:49 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:49 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:49 +0000
Files and hashes:         1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: Q+DnHHFeNahmU0uuyZulLaWj//0Tkm5xRhXwaQCvGOA=)
                          2: eh5UT6N-i9kmx7vR5P20UZhgNF8.roa (hash: lRNX0bzIDr2YwWBNK06CzH5DRudn1x/q4dYD7QozSeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:41:bf:fc:17:df:c6:e7:bc:a3:22:59:2c:fe:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
        Validity
            Not Before: Jul 28 12:01:49 2026 GMT
            Not After : Jul 29 12:01:49 2026 GMT
        Subject: CN=d32bf1e2b4f91a53b21a498b424744a3ed639c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:11:7b:15:5c:0c:ab:fa:d0:95:c6:f7:dd:
                    76:53:33:ae:dc:9c:ee:3e:a0:b6:4e:be:1f:eb:f4:
                    80:11:46:97:d7:28:89:7a:eb:bb:e0:26:f6:bc:f4:
                    c5:ae:d1:7f:81:d5:6b:06:65:89:26:59:c5:9a:14:
                    f0:15:8f:43:61:9b:cc:ef:75:42:5a:8b:9e:2a:3b:
                    1f:f4:ea:db:34:ae:cf:0c:b9:16:99:8f:de:7a:d6:
                    cd:b3:97:f2:a6:e7:9a:da:b5:f4:ae:bc:98:f9:a5:
                    41:d6:66:f9:0e:ef:3a:b1:32:b7:d5:02:3d:9a:58:
                    1a:06:45:10:74:ec:e3:38:30:13:8c:1f:b5:6f:f8:
                    5b:a8:06:93:d8:2d:fe:c7:9e:3a:ce:be:92:83:e4:
                    14:ab:53:53:ee:bf:98:ae:b1:96:00:c3:aa:b0:05:
                    be:db:d8:2f:9d:18:d8:7c:f3:10:7e:2d:64:90:36:
                    b6:ce:e5:31:c0:60:a2:65:dd:a1:ec:a9:34:0d:1b:
                    4c:6f:ff:d3:9c:35:8e:4c:67:dc:15:b7:03:89:f6:
                    74:e0:d8:aa:7a:29:97:a0:62:d2:81:9b:a1:7d:71:
                    b8:ff:c2:d0:d7:f4:d9:36:82:d2:6e:bd:cf:ac:af:
                    56:38:be:96:b9:ea:90:4c:5a:43:e4:26:1d:60:77:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2B:F1:E2:B4:F9:1A:53:B2:1A:49:8B:42:47:44:A3:ED:63:9C:5F
            X509v3 Authority Key Identifier:
                keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:14:e3:09:1f:4b:26:c9:f4:01:54:68:64:a8:91:ab:e7:
         30:0d:de:09:7c:fe:52:bf:c5:2e:81:09:7f:a6:88:71:06:94:
         6d:04:7a:24:1e:37:e2:a3:6a:c7:88:c7:05:e0:b0:ef:f3:45:
         20:1d:8d:e2:0c:24:38:68:66:0b:6f:c3:ec:8e:05:70:4e:98:
         db:41:e9:45:b0:57:86:fb:cc:ab:26:cf:3a:64:da:6a:ae:3b:
         1f:e8:d2:10:61:3f:d5:1c:a4:08:ce:0a:df:9f:db:43:b3:e1:
         a2:89:c6:cf:f1:c5:aa:0e:02:05:42:89:91:81:ae:7e:26:94:
         ad:cb:ff:4f:9f:ef:a2:7a:eb:45:b7:64:f4:23:15:f7:06:b8:
         76:a1:94:97:09:ba:d9:ea:e6:06:6b:1e:d8:d1:f9:91:19:7d:
         5e:7a:78:fb:fb:17:a6:3e:d3:e8:b7:0b:b6:0e:7c:56:1e:2d:
         e9:5f:78:e7:dd:4f:93:8d:7f:02:57:f6:7c:c2:16:23:b9:39:
         41:1e:ba:b4:76:e2:58:22:d7:26:90:55:e1:40:13:de:d6:2e:
         a5:9b:80:7a:d6:bc:7a:ad:15:6e:c3:0e:f8:1f:cd:37:a2:36:
         e6:ec:00:e2:32:fd:04:b3:e8:b1:5f:58:06:28:da:c1:ef:2f:
         50:9e:3a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:53 2026 by rpki-client