Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.mft
File:                     30_pyXBh_5n12lqE9OMulGpOeIk.mft (raw, json)
Hash identifier:          Dh4d/UNxfi97sfHPrYfAfvm1bpc3RvFQ6aIQMrkyRQ8=
Subject key identifier:   60:6F:B8:A0:29:29:00:0D:8D:0A:90:9D:C4:08:E3:BC:C3:5B:5F:67
Authority key identifier: DF:4F:E9:C9:70:61:FF:99:F5:DA:5A:84:F4:E3:2E:94:6A:4E:78:89
Certificate issuer:       /CN=df4fe9c97061ff99f5da5a84f4e32e946a4e7889
Certificate serial:       019FAC7601FC81BAB583DB9AD146BE167086
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/30_pyXBh_5n12lqE9OMulGpOeIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:42 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:42 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:42 +0000
Files and hashes:         1: 30_pyXBh_5n12lqE9OMulGpOeIk.crl (hash: 4fQCZETy0JAVXHXf8OgUtZafDhSQ7vsnOaK0aWZFRno=)
                          2: 8ZvH2moT5LWA0pvGUb_nhaecrRA.roa (hash: vQ6P8MGQM1plUIoOIqS+HYiN2U0Ko89LQ4s+pHmv7B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/30_pyXBh_5n12lqE9OMulGpOeIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:01:fc:81:ba:b5:83:db:9a:d1:46:be:16:70:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df4fe9c97061ff99f5da5a84f4e32e946a4e7889
        Validity
            Not Before: Jul 29 06:00:42 2026 GMT
            Not After : Jul 30 06:00:42 2026 GMT
        Subject: CN=606fb8a02929000d8d0a909dc408e3bcc35b5f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:41:a7:09:eb:91:0d:f0:5d:a2:5d:b4:c9:
                    d9:b1:b5:61:fc:d3:d2:b2:4e:ff:7e:21:78:b4:13:
                    4b:fb:2d:b2:26:5b:50:4d:0b:8c:b0:bc:5d:1a:34:
                    8a:4d:38:5a:40:50:c1:85:af:ae:cb:de:fd:5c:91:
                    f1:ba:6c:a3:a0:3d:e6:8c:cf:1c:ec:59:e4:0d:20:
                    df:97:68:0b:2c:14:1c:0d:01:ab:4a:0e:9b:08:3c:
                    cf:44:1e:75:81:36:d2:4e:dd:fa:d8:32:51:17:0f:
                    4e:66:7b:cf:aa:00:3f:d9:f1:64:27:5d:da:80:2b:
                    07:ab:7c:42:1b:e9:90:60:1d:9c:31:d2:1d:3d:fb:
                    de:05:7c:08:c3:69:32:49:5a:a9:4a:bf:31:99:e0:
                    85:2c:00:0c:39:36:aa:8d:fd:c5:e8:24:11:63:4d:
                    1d:55:dc:63:a3:ea:a1:46:00:48:85:00:b4:04:41:
                    54:3b:af:99:bd:62:2b:54:35:56:88:73:92:da:b8:
                    dc:11:3b:b2:70:c2:50:0e:2f:6f:9c:34:cc:3a:77:
                    23:9f:d2:2a:7d:13:b7:78:27:7a:47:6c:4d:9f:fb:
                    34:b2:d2:dd:98:5f:d6:e9:c6:0c:99:a1:0a:f5:60:
                    76:6f:57:92:5a:d0:fd:d2:68:d7:f2:cb:99:01:18:
                    72:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6F:B8:A0:29:29:00:0D:8D:0A:90:9D:C4:08:E3:BC:C3:5B:5F:67
            X509v3 Authority Key Identifier:
                keyid:DF:4F:E9:C9:70:61:FF:99:F5:DA:5A:84:F4:E3:2E:94:6A:4E:78:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30_pyXBh_5n12lqE9OMulGpOeIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c9:f4:9c:72:97:62:8e:eb:a3:ac:86:62:c5:17:a0:66:67:
         02:0e:57:ae:3f:cc:35:ae:94:6d:6a:2a:fa:87:72:54:b0:60:
         d0:68:40:0b:79:ca:6b:3d:a2:66:ee:ee:15:3f:bc:d7:3f:84:
         92:62:20:55:92:40:1f:79:ab:ae:61:db:71:53:55:b4:29:0f:
         c4:ff:81:db:1e:83:2f:0b:5d:8a:89:42:c5:cb:6f:48:0f:1c:
         bd:6d:68:56:39:9e:e4:21:9c:b1:4b:28:cb:57:63:34:0c:e7:
         b1:ac:20:23:d1:20:42:5e:a6:90:dd:cd:15:d3:aa:cb:2a:a9:
         7a:d2:7c:17:62:0a:27:14:15:7b:d8:67:95:34:94:83:34:ac:
         3a:2f:22:14:bb:76:ff:b8:f8:9a:90:01:5f:a5:8b:f9:96:dc:
         4a:3f:82:41:7d:25:8d:eb:50:0d:f3:62:8b:ab:7b:3e:10:91:
         d5:f1:18:d8:fa:a4:19:f1:5b:b3:f0:4e:17:6c:1e:81:fd:7f:
         f9:e1:a5:d7:71:4b:0a:d0:3e:2d:f7:7e:22:b4:6f:db:dc:a8:
         e8:f7:1d:25:2d:d1:e9:67:8e:24:e5:60:00:c0:83:47:08:65:
         26:f3:53:73:cd:f6:e3:d0:c2:f1:63:fe:b2:52:4b:34:a3:60:
         fb:59:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:16 2026 by rpki-client