Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File:                     4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier:          Dn7KXtsVcCJSpxlp7JYP3l1ML7DKbXv25TC0yE8G3qo=
Subject key identifier:   1D:1E:63:FE:E6:20:3F:39:42:04:A8:63:E4:D2:01:DC:08:9B:B0:05
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer:       /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial:       019FA9AB8F3024B9A7BB2398AFCC2BBFB5AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number:          07BE
Signing time:             Tue 28 Jul 2026 17:00:20 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:20 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:20 +0000
Files and hashes:         1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: XnvkXtNoa0hQQAkfykzOvMBzTSw4poTZ8WoOFZDeEkM=)
                          2: jm7CLkDkWjLyx0drk5u0jmFrhNY.roa (hash: ammB/HZj8/N3/UAaLNlwGxNZkAQiwMa1PgzKQkDpB6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:8f:30:24:b9:a7:bb:23:98:af:cc:2b:bf:b5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
        Validity
            Not Before: Jul 28 17:00:20 2026 GMT
            Not After : Jul 29 17:00:20 2026 GMT
        Subject: CN=1d1e63fee6203f394204a863e4d201dc089bb005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c2:4d:36:7c:e8:bd:48:a5:2c:64:78:c3:4e:
                    94:96:c5:27:ea:2d:69:0a:42:09:30:e8:53:81:db:
                    da:47:5d:05:2f:11:7b:ee:47:78:ab:7d:9a:c9:24:
                    4c:b3:bd:48:f3:7f:25:45:82:b4:17:b6:a8:b8:0d:
                    73:33:ca:82:8a:df:13:81:fc:09:ed:d4:be:80:2c:
                    46:15:b3:25:26:cd:9b:2b:79:2f:a4:48:3c:34:31:
                    ba:9d:8b:82:c9:3f:f7:87:58:b2:87:37:09:b3:cf:
                    b0:71:0e:ef:a9:fd:18:ff:95:e0:c0:66:16:46:a6:
                    d4:ff:f2:7a:f0:78:1b:ab:a0:da:2a:17:df:cb:63:
                    a7:9b:91:8d:1b:e3:b5:d7:b0:c1:fc:c0:7f:4c:49:
                    98:19:b8:0a:c6:1c:ec:b4:25:ca:cf:77:f5:6c:dc:
                    5d:04:98:6c:70:c9:e5:38:d2:d6:e8:c8:c2:d8:5f:
                    a2:dc:df:25:3c:4b:ae:0f:74:d8:89:42:6d:3c:a2:
                    f7:73:6e:4e:be:59:2e:2f:e4:40:b8:57:56:17:f4:
                    82:95:62:14:00:62:b3:e5:ed:6e:02:86:6c:5a:ac:
                    0c:39:22:a1:10:0d:d4:f7:c3:9d:bd:ba:99:ff:90:
                    67:c8:7d:c5:e3:ef:ca:5c:d8:70:3f:4e:50:1b:a7:
                    40:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1E:63:FE:E6:20:3F:39:42:04:A8:63:E4:D2:01:DC:08:9B:B0:05
            X509v3 Authority Key Identifier:
                keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a4:83:26:9b:3a:6e:68:59:18:ca:ed:be:7f:84:16:de:07:
         74:17:fe:0f:7d:6b:40:47:23:b9:ce:db:97:0a:9d:1b:18:aa:
         40:cd:cc:0e:8c:bd:63:44:b3:c4:6b:89:c0:26:b0:c5:b1:19:
         88:b6:58:6b:8a:88:81:2c:8e:8f:c4:0a:53:99:65:c8:25:a4:
         49:1b:e2:39:57:0e:9a:37:95:0f:f5:22:f6:c7:f7:d4:ba:e8:
         45:2e:48:1e:c7:0c:0a:b3:97:45:7e:b5:38:8f:14:26:43:ac:
         31:5d:be:ff:b2:4c:9c:86:ea:98:17:d1:eb:f6:79:3a:50:15:
         14:79:e6:7b:f7:06:ba:65:e1:ee:55:d1:8b:52:46:3f:00:f6:
         5d:e4:47:73:8f:f1:2b:a1:91:67:e3:e3:4e:4d:1f:d3:7f:d9:
         1e:79:40:b7:59:f6:2c:42:f2:07:cf:d7:68:9f:c6:4f:b7:a0:
         86:f3:fa:13:da:e8:0d:c4:24:f4:2d:db:bf:20:f2:1b:a7:61:
         6c:14:d3:30:e7:13:45:43:1b:0d:06:29:06:1d:77:9b:d6:6b:
         68:c5:a6:34:9c:a4:59:42:1b:c4:d7:b7:69:53:f0:49:ba:0b:
         36:a6:9d:2a:65:c4:b4:59:d6:9b:ca:24:30:6d:5b:d2:ad:3e:
         68:35:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:55:19 2026 by rpki-client