Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File:                     4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier:          qBZHAScaDnqFyte/wEVFozk0698db37utkPm6Uo9k8Y=
Subject key identifier:   33:63:F3:E4:3C:FE:73:40:03:F0:26:02:B5:A1:4D:D1:B3:13:90:B2
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer:       /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial:       019FA8CFFDBA408BA0C9F7E2FE48A5307A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number:          0C58
Signing time:             Tue 28 Jul 2026 13:00:30 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:30 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:30 +0000
Files and hashes:         1: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: ejJRWDBbSXyptPTKwqiIOIMc9sQberLK72LrnXFDPYk=)
                          2: 5F_Lv04RXNd_Y46Aej2XB7OXRCs.roa (hash: OFOrOgL1BwCDJs6vNTJlxJXJgyRTHA3y/UE7TO8d/LM=)
                          3: jn-Hv0IYlCEKrmAbyK_6k7lqISQ.roa (hash: J+qsyRuhmSWKW099fqXxFsiGbbSUDzkgcakOMIwreHQ=)
                          4: oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa (hash: sJuR4lvRXMBU3fcQ7PumT3oOEz1g58/Vsv/QWac8Orc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:fd:ba:40:8b:a0:c9:f7:e2:fe:48:a5:30:7a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
        Validity
            Not Before: Jul 28 13:00:30 2026 GMT
            Not After : Jul 29 13:00:30 2026 GMT
        Subject: CN=3363f3e43cfe734003f02602b5a14dd1b31390b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:22:28:4b:81:dd:3f:50:77:c3:9d:16:d8:09:
                    9c:a9:6a:89:e5:5d:fa:ae:8b:d7:85:a7:9c:31:96:
                    a8:fd:9e:8e:0e:d9:6b:b9:58:d3:84:3a:b5:90:55:
                    98:64:68:b7:9a:85:96:72:3e:e1:1e:47:f9:a3:0b:
                    a3:5e:c7:cf:81:de:7c:08:ec:70:89:c9:72:48:c1:
                    b8:a4:1c:6c:6d:e9:b2:6c:27:db:8e:66:b2:7f:87:
                    d0:35:d9:22:7a:f6:3a:d2:3b:6d:07:46:1b:d6:53:
                    4a:8c:f2:d3:24:03:b1:7a:e3:f4:2a:fd:cd:1d:38:
                    5a:dd:8e:dc:21:40:33:f3:33:b0:65:51:4b:55:22:
                    6b:46:3d:03:55:15:4a:be:c9:76:c7:d2:bf:62:46:
                    1b:4c:0f:58:aa:43:ad:c1:85:d6:fd:d4:85:c1:04:
                    5e:f8:af:18:ae:5d:b8:1a:2c:cf:57:11:03:66:41:
                    87:cc:ab:a7:6b:ba:c9:10:3c:74:4f:41:ae:be:a3:
                    d7:29:27:d1:8a:b7:c7:b6:70:f3:19:34:be:98:e7:
                    08:22:0e:7c:be:db:de:3d:b4:d0:d2:20:21:7b:88:
                    ce:e5:1d:42:f1:b3:89:d2:45:0f:c2:15:29:1d:21:
                    48:9b:1d:cd:80:23:78:bf:d1:75:9d:3a:49:12:1e:
                    12:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:63:F3:E4:3C:FE:73:40:03:F0:26:02:B5:A1:4D:D1:B3:13:90:B2
            X509v3 Authority Key Identifier:
                keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:80:8b:34:5e:d7:95:85:75:92:fc:e1:87:84:4f:da:53:13:
         1b:de:ea:1a:c6:4d:47:44:b5:cb:5f:03:d2:f7:d6:06:a5:76:
         26:a7:90:ff:77:a1:0e:08:8c:cd:e6:e1:87:bc:a4:d2:57:25:
         82:ee:df:d5:94:32:ad:ca:fc:0d:9a:c4:bb:3b:4b:0d:14:dc:
         1d:8e:b1:c2:98:a9:e2:c7:35:d0:fc:7a:81:d7:4b:51:bc:ca:
         64:f3:30:19:db:8f:bc:e0:91:a6:e3:66:7b:b5:c6:70:bb:72:
         ac:9f:8d:41:76:b9:bf:a8:6e:80:5e:33:d1:b9:1d:86:6c:58:
         b2:d7:11:96:46:20:9b:b8:e3:27:35:09:10:83:1a:42:63:c9:
         70:45:04:42:ca:41:cb:d8:ad:5d:d7:7a:5d:62:01:86:08:d1:
         ba:4b:4c:d3:d7:e0:4b:a0:16:9d:2b:60:67:d2:1c:ed:a9:06:
         ac:3a:f3:64:51:a3:3d:a6:3d:7b:bc:f0:ce:b0:ca:b8:a4:93:
         70:40:f4:0c:47:c5:3b:e3:71:68:52:8c:2f:34:f9:bb:10:70:
         fa:f1:ee:82:cf:52:d1:2a:c9:eb:5f:d7:0f:82:8e:10:f0:71:
         93:8f:73:24:a5:cb:d0:f1:1f:03:e0:7d:3f:44:e6:24:5d:6d:
         54:67:0e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:46 2026 by rpki-client