Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
File:                     MrMqZabMfuIwaf0rCTD3gY89Fnc.mft (raw, json)
Hash identifier:          h7yb2uhUnI0uHEReFEeCirtRbaq606/BcrqZlnAxKpk=
Subject key identifier:   94:93:99:3A:B5:85:DE:CE:C7:A5:9B:CC:EA:44:E1:98:52:39:E3:B0
Authority key identifier: 32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
Certificate issuer:       /CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Certificate serial:       019FAC75E90CE6DA333FBFB3D39684DBB22B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:36 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:36 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:36 +0000
Files and hashes:         1: MrMqZabMfuIwaf0rCTD3gY89Fnc.crl (hash: K+KdQ/Y+ZUQUXwurAooGPjqHpqY6IivYXhNHa2yClx8=)
                          2: w5kGAlkXu1R2au_PFUdeLD-JIFQ.roa (hash: b+TK2HXHDyzRDfPYR9/xdu7k+Y5KpsBW0vWTYp/Lw+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:e9:0c:e6:da:33:3f:bf:b3:d3:96:84:db:b2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
        Validity
            Not Before: Jul 29 06:00:36 2026 GMT
            Not After : Jul 30 06:00:36 2026 GMT
        Subject: CN=9493993ab585decec7a59bccea44e1985239e3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:ec:11:eb:c4:a9:f7:c6:a7:01:d2:23:27:
                    d9:ea:cf:3f:4e:50:5d:09:73:ae:28:58:27:2c:39:
                    f4:6a:29:1f:b5:49:7a:dd:29:c8:ef:a6:a5:db:92:
                    e6:a8:a4:2a:42:75:23:ef:42:d1:c9:72:74:23:5b:
                    33:32:e2:37:03:f6:ec:ed:37:95:7a:9e:f1:54:7f:
                    e4:03:d5:ef:19:b8:41:a8:01:bf:2d:74:34:bf:74:
                    39:71:52:c7:0e:24:c1:28:0e:24:6a:4b:f6:66:2b:
                    f9:1f:d5:a9:fd:57:3a:57:74:40:55:79:78:34:c1:
                    ca:1e:a1:99:e3:f1:d5:c1:06:5e:d5:f3:b8:45:ac:
                    d3:12:1a:6d:a6:97:c8:18:48:f1:07:79:74:d4:54:
                    a6:50:db:9c:79:b1:ef:5a:94:09:c3:b0:c0:63:8c:
                    12:15:e4:b7:20:76:23:95:d7:52:5a:a1:ac:1e:db:
                    8b:76:05:70:83:32:4d:04:f7:a3:fd:b3:fc:a0:57:
                    4d:a0:00:31:16:ed:76:7b:46:f9:bc:2d:cd:21:a6:
                    89:8e:fc:38:dd:d5:1f:22:38:31:24:44:37:e8:31:
                    50:e2:6a:78:68:1b:88:b8:8d:7a:cd:83:1b:36:03:
                    e5:c2:67:75:c4:95:f2:5a:93:3f:99:ea:ec:12:29:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:99:3A:B5:85:DE:CE:C7:A5:9B:CC:EA:44:E1:98:52:39:E3:B0
            X509v3 Authority Key Identifier:
                keyid:32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a8:eb:79:fa:f8:14:c4:a4:c5:fd:9b:d0:7a:1a:5e:de:2d:
         8a:dc:a3:6e:23:83:96:10:41:23:8d:cd:79:65:01:fd:1b:0b:
         2d:82:35:90:38:8d:d9:6e:71:84:e8:c4:3a:87:1e:93:81:6f:
         27:2d:36:b8:67:b2:50:72:42:6f:ac:82:d3:28:cb:8c:f0:d9:
         45:03:f6:6b:35:89:5d:bd:6b:b4:98:f2:4c:17:c1:9a:ab:09:
         b3:7e:ab:f0:c9:f7:c5:d3:29:a4:af:b3:77:64:17:81:d2:9e:
         ce:60:1a:0e:20:90:fa:f1:c0:0f:39:5c:66:ad:d7:ea:f6:51:
         35:df:6e:63:2e:18:7a:eb:7a:d6:37:d5:63:35:04:1f:ed:90:
         02:5f:75:a6:d8:9b:22:17:56:07:34:ef:ea:49:9f:30:9e:67:
         60:d8:36:98:39:15:d4:02:6f:7e:3c:f9:34:c4:da:e7:21:99:
         ea:4b:f5:c6:c5:28:00:5a:d4:69:d5:3f:6a:f8:9f:5f:fe:fd:
         9a:bd:a4:d6:c3:3b:9f:64:d7:b8:8c:45:e0:1b:d7:a7:0f:fa:
         0a:bb:ab:d5:9f:ea:ad:d9:db:4f:d5:ec:21:db:f8:21:cb:17:
         19:9b:8d:01:9d:7f:d1:56:96:24:cb:c1:4c:8d:7e:55:ba:c8:
         f5:da:2b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:55 2026 by rpki-client