Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File:                     7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier:          5cpAs0dVGoFyZQGCoQ4gPvMcVndTjlGr+lq8tT/HeRo=
Subject key identifier:   C7:1D:4C:6A:18:93:19:AB:DB:44:82:00:D4:5D:25:75:93:F2:F7:33
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer:       /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial:       019FAA875C9973F25FC9AE3E0BE7C1329A6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number:          04D9
Signing time:             Tue 28 Jul 2026 21:00:25 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:25 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:25 +0000
Files and hashes:         1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: XU4Q1aaJDZIZgzt/P+geTEYdNaMI53vXG2hc1YFxKno=)
                          2: P92JZHPtYY3-_599bc_yBXOAyLA.roa (hash: zEkTEvnJRapseTP0KdSkFQigSFFq86JRm4Kqw9lBy+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:5c:99:73:f2:5f:c9:ae:3e:0b:e7:c1:32:9a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
        Validity
            Not Before: Jul 28 21:00:25 2026 GMT
            Not After : Jul 29 21:00:25 2026 GMT
        Subject: CN=c71d4c6a189319abdb448200d45d257593f2f733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:bb:b6:1b:36:5a:c4:ec:ba:16:a0:45:c2:
                    8c:82:73:57:2f:a7:0a:24:69:8f:01:35:7a:54:b3:
                    49:ca:f1:00:4f:f9:a6:97:08:1e:b1:3a:18:9a:17:
                    33:86:14:5b:0b:8c:7a:66:24:77:2f:b4:1a:5a:a9:
                    ae:bf:e2:0b:9c:f9:c6:6e:de:1b:42:c8:89:33:4f:
                    ea:56:92:57:18:9e:82:ce:31:64:d3:49:7f:51:72:
                    15:49:44:ff:78:86:25:87:b8:45:d5:01:0f:64:35:
                    6b:dd:8a:b2:6c:6c:5a:c3:e5:de:da:e6:9b:68:3a:
                    3f:32:9e:ba:d9:8e:33:7c:d3:c3:b8:74:62:c2:5f:
                    09:af:e4:ba:82:f3:84:fb:f9:7f:5c:7c:0d:05:d6:
                    dd:36:87:62:ff:c6:aa:15:3a:53:34:a2:63:9e:c4:
                    f0:58:e9:e6:c7:81:84:13:f8:17:39:53:df:19:70:
                    23:ad:45:d7:89:81:c9:f2:c1:2e:f0:ea:40:e3:db:
                    6b:80:af:57:a9:58:83:35:0a:be:a0:52:d4:79:66:
                    04:3a:da:d8:24:c0:36:e8:c4:46:e1:a1:c8:a1:9a:
                    e8:62:de:0e:c2:ea:a2:56:d3:1b:7d:f7:9f:79:ae:
                    50:bb:8b:37:b7:1d:95:67:07:3d:32:f6:b4:ff:8f:
                    c1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1D:4C:6A:18:93:19:AB:DB:44:82:00:D4:5D:25:75:93:F2:F7:33
            X509v3 Authority Key Identifier:
                keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a4:45:03:5c:70:66:3f:90:2c:e8:fa:4d:47:6f:37:04:20:
         0a:c5:1d:6a:a2:84:cc:16:22:8a:7f:ba:ce:fc:ed:6d:50:4f:
         51:19:e8:f0:35:c6:6b:8b:0c:d1:74:f5:03:8d:6e:7b:91:a3:
         f6:45:19:20:c3:32:19:d8:97:2d:61:bf:6c:8c:c7:fb:f9:1d:
         0b:4a:a3:89:f8:4e:14:53:55:ee:cb:ba:d0:a2:89:d2:bc:68:
         af:6a:c1:6e:1e:eb:01:81:e7:64:f2:9e:2c:47:f9:5f:e6:9e:
         0b:d7:8f:51:71:2c:e8:7e:d1:53:53:2d:5b:9f:27:87:64:1c:
         cf:09:9b:e4:e2:94:c8:f7:55:ca:19:7d:5f:fe:db:32:57:ed:
         9f:9f:a2:8d:af:8d:e8:a8:a0:42:d1:e4:0d:eb:c1:b3:04:5a:
         fb:f1:68:00:15:fc:61:78:30:9b:52:0a:58:53:dc:cb:ee:26:
         0d:a6:59:57:20:ab:be:49:41:4d:bc:3c:ae:65:88:bb:94:06:
         e5:fa:93:c0:f8:f3:8f:98:23:60:39:2b:31:79:37:84:2d:08:
         bd:d1:62:3c:3d:70:ac:f6:ee:b0:ea:66:a1:35:a6:1b:7b:99:
         b8:6e:d8:08:71:5d:72:b1:f9:3e:70:e1:b1:60:da:17:cf:89:
         81:b1:42:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:31:03 2026 by rpki-client