Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File:                     43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier:          4PKQx6xdZhOm6BC+XWETFQW5bDJOaGzjXKpRww0af+4=
Subject key identifier:   7E:92:24:4F:2A:85:EE:62:2B:7D:A5:67:6E:02:7F:3C:99:B7:C5:F3
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer:       /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial:       019FA9AC3B0462F90F2268F2645F4E707A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number:          1965
Signing time:             Tue 28 Jul 2026 17:01:04 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:04 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:04 +0000
Files and hashes:         1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: znsIyUUHa8LxBiPMocAIz2bV3rq8GXCTFUCV3bthU7k=)
                          2: lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa (hash: AGs+ir4ro7QQV7jYL9La9S53EvSqLFzPT1Ni572Pi50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:3b:04:62:f9:0f:22:68:f2:64:5f:4e:70:7a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
        Validity
            Not Before: Jul 28 17:01:04 2026 GMT
            Not After : Jul 29 17:01:04 2026 GMT
        Subject: CN=7e92244f2a85ee622b7da5676e027f3c99b7c5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:2b:a2:04:4e:dc:69:26:78:9b:61:f3:17:
                    04:1b:50:4d:32:17:cc:ca:bf:08:89:98:a6:de:22:
                    a8:a8:3b:c6:50:e9:2f:b1:a7:0d:d1:a0:6c:96:a0:
                    94:d0:cf:7f:e0:d8:a8:de:62:6f:36:0c:49:ee:e0:
                    b1:e6:c2:64:1e:27:59:b3:1c:e4:b6:91:ff:32:2c:
                    58:83:2a:c0:cc:12:ff:0f:f0:fa:d5:54:22:fd:d1:
                    75:0a:3c:2c:7a:70:d6:4c:c5:d1:5f:09:f4:87:62:
                    e4:55:33:8f:4f:4c:27:c8:d3:40:e5:b0:63:f2:2a:
                    4e:d4:65:4c:4e:00:98:3e:4d:bc:68:97:0e:6d:0a:
                    c5:eb:88:b5:e6:1c:6b:21:73:76:00:98:b8:77:bb:
                    80:ab:a2:ea:bb:28:7b:13:4e:af:52:77:c3:0b:e4:
                    d8:37:c7:82:9f:c9:dc:fb:71:9d:ca:fb:aa:07:95:
                    31:c0:bd:1b:13:1c:c4:cd:d0:5b:bb:da:39:06:47:
                    e3:04:db:88:16:8e:c5:8a:b2:00:42:f1:81:72:2d:
                    8e:27:c7:c1:37:51:41:a7:3b:75:ac:07:f6:db:f7:
                    ce:d1:ad:89:86:c2:5f:5e:0d:cd:00:d1:d2:de:ab:
                    49:5e:4e:a0:cf:da:67:d8:36:7e:4c:5c:f3:53:95:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:92:24:4F:2A:85:EE:62:2B:7D:A5:67:6E:02:7F:3C:99:B7:C5:F3
            X509v3 Authority Key Identifier:
                keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8e:dc:ca:a4:a9:4f:07:78:b9:e7:06:04:2c:7e:55:79:28:
         f5:bc:71:e1:6f:09:c0:6a:c8:98:61:94:c2:08:54:ad:68:c5:
         4d:ff:1e:11:eb:d3:ab:10:02:db:e0:41:b0:ae:ac:3f:19:3a:
         45:94:55:7e:73:33:7d:d7:ff:81:62:1f:b8:c2:17:ae:b7:63:
         16:54:4d:ba:81:07:4f:da:23:c2:cc:2d:9b:59:25:c1:16:63:
         06:51:e2:f1:92:10:9e:f8:ba:14:cc:48:0f:0d:fa:f2:46:8d:
         eb:da:34:0a:c6:83:a3:67:c1:04:67:02:94:3b:3c:cd:67:3c:
         50:0e:4f:88:6b:4e:6c:c9:da:2d:27:de:54:9a:69:6f:df:81:
         5c:a9:d8:54:90:df:74:f9:45:9d:08:08:e8:80:22:bc:3e:f6:
         e8:c4:97:9a:25:66:ee:cf:05:58:30:fa:9d:21:30:1d:6f:e4:
         2b:f2:d3:bb:95:16:65:42:76:4a:9d:ff:3f:8f:6c:21:86:ad:
         95:8f:f5:d5:74:7a:b3:d0:6c:7f:ab:34:54:7b:19:e1:c1:9a:
         82:a8:76:a7:6c:2d:f4:3a:ac:b7:e9:32:25:0e:f7:82:86:92:
         c6:57:f6:7e:84:77:e1:cd:1c:d5:1f:30:fa:f9:b2:37:e5:61:
         56:64:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:39:12 2026 by rpki-client