Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
File:                     4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft (raw, json)
Hash identifier:          RLO/EEhzciJUJga24xB/J45XHbnNGaO5wNtGo8T2MLo=
Subject key identifier:   EC:3A:67:30:E3:4D:24:77:DD:14:B6:50:09:C6:FA:AC:F7:88:4B:9A
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Certificate issuer:       /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial:       019FAC07D4A12684094C1E97093F6AC1C0CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
Manifest number:          0FFA
Signing time:             Wed 29 Jul 2026 04:00:22 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:22 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:22 +0000
Files and hashes:         1: 4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl (hash: GP108UB4dzlgqTIDsgM3QesX2KCscU+AkNzkbvnVl/I=)
                          2: GG5Z9bcgRhj5bvdTmqMJRrOoL1M.roa (hash: YTbCU6GzTrIzftbZbD0fHbZANynvTnyxCIyn5sAM1mc=)
                          3: GgOfbd9F5KPJoYLhExG-OXyRwK4.roa (hash: Av0WKgdWyMP5jVBTfHweW1CBduaCDbaswF0VMggKgCk=)
                          4: hYLRUg0SQqMstMmusnhckxfWhuY.roa (hash: 1x1ITik47KH9EPZ8bGLZz5XWRPVBO6Cz1LvH0CdcCtM=)
                          5: vtwUYAYY8HgSzf0nS8zvrbl0txg.roa (hash: J5aRxIaRZQn03q+9SRxqwbVkAXCYWQNCOSEx8+r+upI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:d4:a1:26:84:09:4c:1e:97:09:3f:6a:c1:c0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
        Validity
            Not Before: Jul 29 04:00:22 2026 GMT
            Not After : Jul 30 04:00:22 2026 GMT
        Subject: CN=ec3a6730e34d2477dd14b65009c6faacf7884b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:9d:50:46:fd:03:23:44:67:3d:0f:a0:66:
                    4b:96:b0:64:04:21:20:c9:50:ba:b2:d1:5e:d6:7a:
                    a5:39:63:bd:21:19:21:15:0e:87:42:52:ee:da:02:
                    45:97:4c:ce:af:ab:2c:83:7f:72:3d:e8:ff:72:09:
                    b3:ef:eb:10:7d:2f:93:84:8b:11:8f:e0:e2:70:b3:
                    af:4a:67:4e:e1:ab:06:a7:d3:af:d4:c3:e4:42:ab:
                    c7:41:fe:c9:4d:02:85:49:a3:a4:dc:f3:e2:ce:16:
                    dc:98:5b:9b:b2:00:65:76:0a:bb:3a:4d:3f:14:bc:
                    de:4d:1f:40:86:97:ac:77:35:bd:07:67:e3:4d:a4:
                    ab:1e:a9:b0:79:c2:5c:b9:4f:a5:2f:2e:73:88:ed:
                    89:fc:88:83:ed:11:57:80:d1:20:31:a7:55:17:06:
                    f3:62:23:e5:c9:08:a2:0a:78:d7:43:2b:2f:a5:f4:
                    94:af:ba:eb:ac:11:51:f3:2c:89:33:c4:44:6a:25:
                    df:06:1f:1f:46:0e:6e:44:8b:5e:86:b9:5e:8a:ee:
                    9c:72:a1:2b:d9:72:7d:91:91:4e:63:f6:99:5a:87:
                    02:e8:80:2e:cc:07:fb:5d:02:a3:87:e9:88:43:45:
                    bc:5d:1c:52:62:6f:69:11:91:58:48:a4:0b:e0:5b:
                    30:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3A:67:30:E3:4D:24:77:DD:14:B6:50:09:C6:FA:AC:F7:88:4B:9A
            X509v3 Authority Key Identifier:
                keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:f2:08:74:01:23:94:72:0a:de:e7:e7:1c:7c:58:dc:75:
         9c:84:6a:3a:2e:48:1a:11:d3:7e:87:83:85:d6:1a:8b:1b:af:
         91:80:18:a2:31:d2:b7:a9:5d:6b:68:2c:2b:fa:70:b0:b7:15:
         90:02:6a:e4:6a:a5:14:f7:57:25:ff:d2:1e:62:82:4b:9a:fa:
         8d:76:94:4a:30:22:5e:85:8e:f1:44:ba:34:be:6e:8f:b5:f5:
         e3:1f:90:54:57:4d:dd:fb:78:05:a1:e4:a7:36:de:61:28:61:
         45:63:65:04:fe:63:33:20:b1:d5:86:01:e4:d0:b2:7b:0b:e9:
         d5:41:48:cd:b3:77:ae:92:c2:55:a6:d1:7d:6d:5e:6a:c8:03:
         5f:56:1c:09:e9:49:d4:f3:bc:75:86:a4:3b:ad:ad:03:88:94:
         d1:41:20:ec:6c:88:02:51:b5:5d:f3:a8:5d:ed:b6:80:12:7c:
         96:36:54:c8:7b:96:89:30:ea:1d:96:89:2e:28:25:b1:50:92:
         84:a6:25:af:27:d5:41:1e:91:1c:e2:29:25:a1:a8:5e:09:87:
         75:ae:38:19:a5:b0:8c:06:7d:47:3d:2c:af:fa:2a:1c:23:e1:
         9e:2e:79:a5:f7:1d:8b:80:a6:7d:09:c2:4e:f2:9f:8a:7f:a7:
         26:3c:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:24:15 2026 by rpki-client