Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
File:                     CzENu2344GIhv_3pKCDHnLsUrlw.mft (raw, json)
Hash identifier:          TWYu2jrxBkxAHwljJQrLZTibOC4Twpkk5r92DrZFRiY=
Subject key identifier:   74:0D:10:AD:98:6C:7A:A5:BF:FC:1C:61:46:40:E3:A1:88:8E:9B:7E
Authority key identifier: 0B:31:0D:BB:6D:F8:E0:62:21:BF:FD:E9:28:20:C7:9C:BB:14:AE:5C
Certificate issuer:       /CN=0b310dbb6df8e06221bffde92820c79cbb14ae5c
Certificate serial:       019FAC75A311A1FF4D6D71C13AC1669577DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:18 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:18 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:18 +0000
Files and hashes:         1: 2QbBHswT4LyT9MKxWibJ_ZC77bY.roa (hash: OMywM0jRuHNbVt6pewn8yF5ZOU7J3bKnC67SOzWkkWU=)
                          2: AMQVPdnd5gupAf5BUQnxLVvfPz4.roa (hash: s2nhQfFPjFWsBfYKQNz+So9BoEG35m98vEDyLpUK0wg=)
                          3: CzENu2344GIhv_3pKCDHnLsUrlw.crl (hash: e7KCRR8T70zpJ5Nl7UqV3bXtxuLQYD9/XHdYvYoS9Mo=)
                          4: LXXfQN2bkC9puw5dqkTeVg1dAuM.roa (hash: enCJ6utAPOkQVHVt862XMSScyncqVjbigRDYlmgELSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:a3:11:a1:ff:4d:6d:71:c1:3a:c1:66:95:77:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b310dbb6df8e06221bffde92820c79cbb14ae5c
        Validity
            Not Before: Jul 29 06:00:18 2026 GMT
            Not After : Jul 30 06:00:18 2026 GMT
        Subject: CN=740d10ad986c7aa5bffc1c614640e3a1888e9b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:cd:9a:7f:46:7e:7c:2e:26:0e:7d:ea:2b:
                    73:95:14:6b:d6:52:86:82:a4:d3:cb:15:42:d2:09:
                    af:6b:d5:0b:5f:ca:ff:7f:9e:f8:b6:3e:e2:72:46:
                    a6:57:27:d3:54:6f:4a:2f:e9:d9:f4:c7:6f:91:e8:
                    e6:25:97:3d:7a:ed:97:b4:5f:7e:f8:14:92:b9:08:
                    6e:08:04:b4:6a:7f:6a:d0:6b:52:8c:9f:6c:d1:9f:
                    1f:6c:a2:3c:4c:ef:fe:ca:02:88:c0:9f:50:27:1e:
                    dc:98:97:f6:a8:10:bc:28:55:c0:02:c0:e0:88:6e:
                    26:af:b1:80:88:0d:ce:10:f0:7c:d0:a0:1f:10:4a:
                    06:cd:9c:d4:22:c2:f1:ca:f8:87:18:fd:b9:cd:a1:
                    72:2e:45:54:b8:8b:b5:13:1c:c9:e7:a8:f2:e5:a5:
                    f8:8f:0d:f4:bc:ba:01:28:2f:f1:a2:6b:a5:dc:b2:
                    48:60:41:71:27:72:fc:8c:56:58:18:9e:a5:5e:8a:
                    40:e1:10:7d:59:4d:fc:26:42:97:a5:06:f1:4f:12:
                    e5:92:33:12:50:e0:d3:38:e6:ea:ef:f7:48:ea:6f:
                    32:df:b3:1b:8a:be:3b:be:9b:3d:c6:a5:81:4d:95:
                    45:b0:78:c0:94:ce:92:09:d8:17:11:a6:5c:1a:ca:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0D:10:AD:98:6C:7A:A5:BF:FC:1C:61:46:40:E3:A1:88:8E:9B:7E
            X509v3 Authority Key Identifier:
                keyid:0B:31:0D:BB:6D:F8:E0:62:21:BF:FD:E9:28:20:C7:9C:BB:14:AE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d6:15:ec:48:e2:32:7c:d0:77:52:8f:7a:c6:e6:fe:d6:7d:
         15:97:68:c4:25:0e:ea:ce:d8:22:a5:0f:ed:9f:0d:0b:d4:99:
         87:be:3b:0f:25:23:a6:ee:0c:d7:e3:5a:37:86:ce:ba:3e:40:
         4a:a9:9e:92:5e:1a:cc:c4:8b:a2:b3:f1:74:e8:0c:e5:77:2b:
         89:8a:3b:89:92:79:65:a2:25:ee:23:42:50:31:2e:7d:ef:37:
         57:86:7b:2c:3f:bf:d4:1a:bd:40:37:06:34:3c:7c:3e:cc:64:
         84:34:51:36:d4:5c:e1:1b:b5:7d:38:51:1e:9f:ec:7a:07:4b:
         b7:3c:3a:5a:2e:cb:ed:2e:e2:29:d8:1e:44:01:cb:ac:46:24:
         53:e6:17:db:52:25:e2:b1:7b:02:ea:12:e9:de:b3:bc:cd:84:
         be:5b:7d:12:b8:8f:c0:ff:3e:99:a1:2e:6b:a1:c6:e9:49:9d:
         47:ce:f0:b2:d7:2e:2a:8c:48:dc:b7:2e:a1:a7:7f:f6:e3:d4:
         b1:8a:11:f9:00:80:af:9a:51:60:f1:87:c9:79:16:0a:1c:a7:
         81:22:70:da:23:de:41:ae:9f:8b:ab:60:82:30:d9:cb:69:3d:
         35:22:17:b0:40:94:ec:6d:3c:15:90:f3:ab:e1:81:18:0a:07:
         0f:8c:43:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:46 2026 by rpki-client