Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File:                     4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier:          UX+vcV86kmnFyd7+6wH/Ib6nMtQ8gbofbVlRms7gpD0=
Subject key identifier:   55:5E:C1:3D:A0:2C:06:A7:41:BD:A1:96:CD:5F:80:CF:49:AD:88:52
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer:       /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial:       019FA9752A738B37CE24B382E765D2BD8CE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number:          0E00
Signing time:             Tue 28 Jul 2026 16:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:55 +0000
Files and hashes:         1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: vBR6+kZaR9QHTWa5ffPyLgAHC1vIvBn3OBjz5OOeoOo=)
                          2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:2a:73:8b:37:ce:24:b3:82:e7:65:d2:bd:8c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
        Validity
            Not Before: Jul 28 16:00:55 2026 GMT
            Not After : Jul 29 16:00:55 2026 GMT
        Subject: CN=555ec13da02c06a741bda196cd5f80cf49ad8852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:6a:4a:5f:3f:3e:ce:57:fb:2d:a2:fa:25:
                    36:80:1d:0d:02:91:4b:d5:12:de:6e:72:73:3e:00:
                    50:9b:64:c2:4f:0d:fb:4d:d0:8e:8a:f4:85:2a:58:
                    5b:df:5f:94:0f:b7:85:05:ea:c3:e9:38:0d:58:2c:
                    9b:1e:ed:38:d4:f7:82:e3:9e:07:fc:c4:f2:26:4b:
                    92:12:a3:2f:b4:3d:37:c3:12:47:fa:70:a0:56:b1:
                    60:f1:3c:33:7b:69:64:32:d1:0c:fc:3b:9f:2c:a1:
                    67:88:bc:e5:ca:fd:b7:69:d8:c1:d5:08:03:0d:9c:
                    e8:f0:09:ef:28:08:a5:f8:5d:2d:f5:e6:bd:bd:c8:
                    bf:32:35:c3:17:0a:4a:37:59:bf:8b:84:13:b7:fc:
                    6f:38:10:ca:79:a8:de:99:a0:fb:f6:4f:df:77:bc:
                    fb:2a:fe:b6:d9:8c:aa:d7:5d:dc:5a:a8:5e:5c:fd:
                    4b:bf:a8:5c:29:0b:71:84:58:ee:d2:05:0b:b9:32:
                    da:4c:f6:8e:f6:f3:9d:60:f0:ba:95:24:8a:d6:16:
                    71:11:65:75:38:35:a9:cd:f7:55:fb:d4:93:33:db:
                    d3:a9:05:d9:ec:56:86:2b:78:c0:5f:61:7e:31:92:
                    dd:b7:cb:df:b7:04:c3:c1:20:7f:5a:37:0d:de:3e:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5E:C1:3D:A0:2C:06:A7:41:BD:A1:96:CD:5F:80:CF:49:AD:88:52
            X509v3 Authority Key Identifier:
                keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:a5:93:d4:2b:ff:17:ef:d5:ee:01:49:c8:25:27:d5:48:
         ac:43:41:64:e5:50:de:19:d4:24:d6:f1:eb:4b:d3:7f:b9:2a:
         85:8f:40:72:ab:e7:ac:af:fc:fa:a0:a2:f0:54:50:2c:ad:73:
         a7:1f:88:fa:d4:33:56:9a:07:97:e3:b9:b7:54:f1:2b:8f:ae:
         10:af:e8:0d:b9:2e:34:fd:5b:09:aa:ba:fd:56:0b:ee:21:fc:
         fd:00:5e:ac:fb:35:62:a6:d9:80:4c:10:9f:d1:37:75:69:09:
         d8:ad:c0:28:9a:41:3c:26:f5:04:a0:a1:ac:77:fb:ef:53:ad:
         63:0b:8d:e4:fe:25:a1:f0:6e:c0:8b:35:3a:79:c1:20:e4:f3:
         f5:f7:be:fe:39:17:d9:b0:b3:ec:7e:6b:f9:fb:96:ba:a6:c6:
         9f:ad:6b:40:27:d4:3e:48:91:5c:82:9a:a7:4c:fa:ae:68:62:
         6f:61:82:70:32:9c:61:7b:a5:f0:4a:b9:01:eb:e2:b4:f8:08:
         16:de:22:fb:cd:d3:8b:c2:78:da:84:1e:9e:56:2e:7b:97:53:
         55:08:a0:10:95:29:74:d7:61:51:72:1d:74:80:46:5c:65:8a:
         35:3b:19:ad:c4:ee:24:9e:81:21:5e:f3:0d:a2:4b:1e:5a:51:
         77:bc:c0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:04:07 2026 by rpki-client