Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
File:                     Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft (raw, json)
Hash identifier:          3Et53HILU0zI4L5wpmzTxU400HlHNg1K7/AaBbWzxCE=
Subject key identifier:   ED:58:85:8D:4D:FB:48:BB:D2:58:5D:72:49:16:82:48:CE:F7:DF:4C
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Certificate issuer:       /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial:       019FAF4075152D25B2D26183C11A3F337441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
Manifest number:          08F5
Signing time:             Wed 29 Jul 2026 19:01:04 +0000
Manifest this update:     Wed 29 Jul 2026 19:01:04 +0000
Manifest next update:     Thu 30 Jul 2026 19:01:04 +0000
Files and hashes:         1: O4W8V4ta9TPH3JBR2-Drko17mnI.roa (hash: eZbauCAYEP75NZzjmVokJXIEy1y7iTaIYD5JjGsUAuo=)
                          2: Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl (hash: 06oMQYX/9dSINUWiNd8Iz2bZ19a/rDX3PgiAmE16LVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:af:40:75:15:2d:25:b2:d2:61:83:c1:1a:3f:33:74:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
        Validity
            Not Before: Jul 29 19:01:04 2026 GMT
            Not After : Jul 30 19:01:04 2026 GMT
        Subject: CN=ed58858d4dfb48bbd2585d7249168248cef7df4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:a1:98:34:b4:1b:2e:ea:67:1a:94:a1:01:
                    b5:c8:c8:32:5f:68:b3:4a:5f:7a:96:a6:a7:75:e2:
                    1c:6e:b0:45:77:0c:e9:7a:d2:95:5d:ec:92:fc:0f:
                    c7:c0:fc:e9:9e:b7:7b:28:f0:f9:ca:c2:94:e3:67:
                    3a:b7:0a:40:60:97:7f:97:0f:a6:31:0f:ea:d6:6f:
                    29:aa:d6:fe:6e:be:71:c8:b0:bf:37:a9:ce:44:f4:
                    92:db:16:f6:8b:7b:8c:0e:fc:4f:68:cb:7a:18:02:
                    83:98:01:56:bf:07:a0:00:21:c3:fd:ec:38:de:95:
                    17:e5:a1:e8:e8:2d:fb:75:24:1c:6b:02:1c:0c:ec:
                    40:2f:24:37:ff:f0:b4:ad:01:4f:ff:8a:ff:1f:09:
                    fd:ec:c4:e6:de:c4:11:3d:26:ba:b1:48:0c:89:d1:
                    b5:7c:98:f7:72:77:26:6f:c7:63:7b:b8:08:59:d9:
                    bb:84:d4:be:4a:4a:ce:3f:91:12:9b:2c:a4:f7:76:
                    30:ac:db:fd:d4:0a:b4:bf:b1:ee:ae:7d:79:44:49:
                    80:21:dd:11:50:b6:5e:27:3e:5e:b3:de:8e:fd:7a:
                    43:c6:90:3b:eb:ec:90:ae:ca:5e:55:f2:03:be:79:
                    8e:4b:83:9f:e2:58:38:81:9a:3e:31:e5:db:07:9c:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:58:85:8D:4D:FB:48:BB:D2:58:5D:72:49:16:82:48:CE:F7:DF:4C
            X509v3 Authority Key Identifier:
                keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:08:a6:ba:d9:5f:19:01:8a:69:21:53:d8:7a:23:57:ec:
         83:c7:a9:c3:6d:a9:a3:4e:c6:27:8d:ae:64:90:fb:3d:d0:56:
         8a:fa:1f:03:51:46:02:75:77:90:7e:4c:1b:7b:00:2d:dd:f9:
         c7:7c:fe:9e:11:ba:d4:0b:27:d0:bd:6a:32:9e:8a:b3:81:ee:
         85:f8:6b:d7:30:a4:30:8c:d0:bf:25:b4:b7:a6:0e:48:4c:c2:
         d5:86:67:fa:20:28:4f:05:27:18:39:5a:d2:de:f2:7f:5a:89:
         76:17:23:a3:23:0f:72:7c:03:9d:ec:ca:10:40:32:03:3b:01:
         94:30:34:f1:03:ab:5a:18:18:3a:84:37:a6:a7:dc:15:9c:ad:
         d7:91:b6:d8:ec:6b:bd:8b:4e:c2:1e:49:e2:ce:87:5b:ae:6e:
         66:cd:72:23:14:60:29:9d:bd:64:bf:e2:6c:46:30:14:d5:35:
         01:e3:31:6e:c9:e3:1e:2f:13:aa:0f:a0:f9:2f:df:a7:3d:16:
         4c:5f:f4:e3:b9:be:0a:44:cb:7c:1e:9c:33:3f:aa:39:87:d6:
         bd:b8:70:26:b8:5a:d9:e1:af:0d:ef:9d:ec:dc:f6:56:c9:bc:
         8b:51:94:2c:0a:15:ad:3a:e6:42:cf:da:34:cb:f6:39:75:fc:
         c3:99:44:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:03:46 2026 by rpki-client