Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File:                     4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier:          6JvkxcNtK0aSjbP7Jzla8RnB/VE+5Lz0qYbD/Okzz4E=
Subject key identifier:   D4:36:10:29:46:78:C2:86:60:D9:5F:B4:BB:DA:B1:D3:35:95:01:9A
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer:       /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial:       019FA906E4B26A0A0B4F6B689CBE4E06B638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number:          1911
Signing time:             Tue 28 Jul 2026 14:00:28 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:28 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:28 +0000
Files and hashes:         1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: jm4AZfTLQG2s+BMwcItwjP/mOC9kbfFedgsR0phEoFs=)
                          2: pZ2DG9liFeCKNbzetKHvN52UJO0.roa (hash: ngpoJdoTiDK1ogZAlMttmztrBQw9vwYksg/OwsA6X2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:e4:b2:6a:0a:0b:4f:6b:68:9c:be:4e:06:b6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
        Validity
            Not Before: Jul 28 14:00:28 2026 GMT
            Not After : Jul 29 14:00:28 2026 GMT
        Subject: CN=d43610294678c28660d95fb4bbdab1d33595019a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:35:c9:6a:5a:70:7c:9d:5d:6e:a1:76:82:
                    37:78:2e:92:f8:e7:a1:bd:ea:a9:fc:4e:7d:08:42:
                    9f:7d:a6:36:0d:bb:94:de:eb:9d:dd:a9:ed:63:27:
                    7c:07:d6:ab:14:7f:cf:d6:54:ab:40:aa:37:39:b5:
                    31:f4:a7:eb:d5:87:80:35:00:04:84:a4:22:b4:ef:
                    97:d8:9e:5e:8e:4f:d8:08:5b:0f:82:f4:65:d2:ea:
                    89:39:96:1b:4c:fe:af:9a:ec:6f:7c:f8:3e:d8:ca:
                    d0:e1:99:56:b3:73:b3:0c:f8:e4:aa:55:df:51:09:
                    0d:7a:81:09:9a:8f:2a:ab:8f:7e:76:3d:13:05:3d:
                    1a:37:d9:b3:9d:01:ba:cd:8b:50:7a:bd:b4:c3:49:
                    01:07:1a:eb:a1:8d:49:a3:41:4d:8e:27:16:49:da:
                    9b:59:6d:ae:66:3f:5f:a0:5e:83:41:74:d2:3d:8a:
                    90:6a:15:75:df:44:0f:a4:d6:56:ea:5e:fa:86:90:
                    5e:e5:79:5f:cc:c8:5a:8e:52:62:0e:c5:27:54:ac:
                    b6:b3:4c:3d:31:b6:d8:23:61:db:7d:aa:26:f1:09:
                    3d:02:22:e0:46:97:08:43:78:27:cc:cf:a3:ac:5b:
                    c8:a7:65:8e:5c:da:06:8e:2d:c3:de:d9:63:f8:c6:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:36:10:29:46:78:C2:86:60:D9:5F:B4:BB:DA:B1:D3:35:95:01:9A
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:77:91:82:5b:16:fe:a4:b8:04:c9:6a:3a:0e:c0:ce:2d:01:
         2d:99:57:9a:82:2e:ce:93:6b:dd:d9:53:f4:6d:69:4a:db:62:
         7a:2c:3b:eb:bf:d4:94:34:a2:aa:f5:02:06:c9:e6:e8:fd:aa:
         60:9f:28:c7:19:bc:0f:67:e7:0c:97:e0:72:2b:90:96:9f:07:
         d2:a6:75:8e:c4:c5:c2:2f:77:f1:8b:f5:64:c7:66:80:b8:24:
         31:ab:27:c6:22:b9:26:49:24:6e:11:5d:be:93:cd:db:c5:04:
         24:68:f1:19:83:3f:04:e3:d2:ef:8b:c9:80:0c:5d:bc:e7:1f:
         40:13:68:e0:ed:ca:63:5f:38:43:de:58:3c:e7:95:49:44:a9:
         14:5c:a2:5f:1f:83:7b:10:e5:bc:bd:c5:ab:49:19:8d:90:27:
         81:b0:4c:5c:e4:59:63:94:9b:39:2b:6c:80:36:c8:16:50:d2:
         03:ef:74:5a:75:eb:d1:fb:ca:35:3b:7a:93:d4:d1:2e:00:5b:
         f2:20:76:f4:e8:7e:0d:0f:92:73:d7:9b:de:ba:1a:1b:ae:30:
         09:1c:87:93:e4:bd:7a:7d:22:6d:41:e8:fb:29:4f:81:d6:f8:
         a3:ef:da:8f:b0:8d:d1:5f:7e:d7:62:c2:34:d8:c6:4b:d7:5f:
         0f:d1:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:22 2026 by rpki-client