Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File:                     4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier:          BTHNRI0e3auejo2jGQhyY8ZAxHG8N/FRR5JgJZXtXPw=
Subject key identifier:   50:19:5B:6F:4A:0A:E8:AA:37:EC:BC:EC:41:5C:84:25:1C:24:25:B6
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer:       /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial:       019FAA506580C6021D465E0B720F7BE8EC0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number:          19DD
Signing time:             Tue 28 Jul 2026 20:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:23 +0000
Files and hashes:         1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: zGoN74bTV4snPoMTqrm20GabMxcPepDflJYBWZqZgjw=)
                          2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=)
                          3: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=)
                          4: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=)
                          5: mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa (hash: CKUhSDm/qBK/JCbTgbEQJEgA0HKSbKEajcNdo2qCwys=)
                          6: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=)
                          7: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:65:80:c6:02:1d:46:5e:0b:72:0f:7b:e8:ec:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
        Validity
            Not Before: Jul 28 20:00:23 2026 GMT
            Not After : Jul 29 20:00:23 2026 GMT
        Subject: CN=50195b6f4a0ae8aa37ecbcec415c84251c2425b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:48:b5:7b:b2:c5:fd:2d:5c:b1:5a:1a:dd:
                    48:5c:0e:45:80:fd:90:9a:4f:e7:43:ff:d9:68:0c:
                    5e:cd:ba:63:ee:59:c4:a2:6a:4d:8f:70:ba:04:90:
                    f7:bb:a0:ee:04:0d:7c:d4:b2:d9:85:ce:eb:18:51:
                    ff:30:86:b7:3a:b7:90:99:dc:c1:d0:09:38:d1:22:
                    0f:fb:18:22:21:cd:5e:6c:18:0a:d5:8b:e2:df:cc:
                    0b:3b:c1:53:1e:44:21:fb:73:f0:c8:cf:ba:0a:8e:
                    b6:f8:35:9b:7f:21:a6:11:05:2c:00:bc:46:a5:1e:
                    84:30:10:f7:33:19:7e:05:8f:8a:45:72:ee:8d:6c:
                    b5:c9:62:7c:6c:dd:ab:7f:dd:59:97:17:f5:46:09:
                    dd:d2:d2:57:8a:4b:87:af:58:8c:48:86:99:e1:1c:
                    ef:11:13:07:df:1d:2c:19:28:27:d2:d7:5e:9f:29:
                    58:aa:19:5a:08:e5:ad:ef:c8:c4:38:27:65:72:da:
                    3a:40:20:f2:79:d0:0b:30:d6:9f:6f:e9:d1:80:30:
                    fe:cb:e1:91:0f:f6:66:de:ca:b3:58:c4:32:68:12:
                    0b:b9:75:ba:a1:f3:78:22:8d:2b:51:1c:7b:7f:05:
                    98:c4:8d:b8:cd:f0:5d:b3:cb:18:d1:91:8f:4f:79:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:19:5B:6F:4A:0A:E8:AA:37:EC:BC:EC:41:5C:84:25:1C:24:25:B6
            X509v3 Authority Key Identifier:
                keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5f:72:78:ee:28:92:fc:2b:e5:e9:ab:6a:55:1e:d2:16:da:
         d7:7b:9d:82:33:2f:13:ee:59:60:7e:cb:f9:cd:83:5b:fa:2f:
         6f:36:af:46:9c:be:9c:7a:2c:ec:62:04:f2:c1:f9:03:3a:62:
         25:e9:2a:5f:77:ab:6b:51:c1:34:6d:e4:3e:21:02:de:83:ca:
         14:03:e8:cd:99:c4:10:ab:6d:3c:ac:9f:71:a7:c7:41:ec:4c:
         09:25:72:3b:36:56:33:97:fa:21:22:c2:42:32:38:ca:3f:e6:
         ed:21:90:2e:c4:e3:01:e6:f6:d3:20:d5:d9:f4:98:09:41:0a:
         38:af:09:6d:11:80:69:b8:7a:71:49:af:5e:9d:a0:9f:2f:a3:
         67:73:32:f5:cc:6d:30:d0:8e:4c:33:c1:d6:d5:9b:33:30:98:
         a2:62:4e:89:9f:ea:dd:4d:a6:cb:ec:bb:21:f4:e6:99:08:72:
         86:1e:0c:85:22:2e:f7:ee:65:34:82:f7:c6:8a:48:8b:d1:af:
         80:90:d0:93:fd:41:25:c3:0c:5a:a1:d6:30:d8:bd:75:d2:04:
         3a:22:36:3f:17:f6:7d:69:24:f5:67:0a:cd:4c:f9:8c:94:bf:
         77:36:2f:74:52:c9:42:d4:51:0a:06:11:81:f1:b3:c6:c2:3b:
         35:09:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:56:08 2026 by rpki-client