Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/75-JmCG1r1ymRI10FhwXw1QGkcc.mft
File:                     75-JmCG1r1ymRI10FhwXw1QGkcc.mft (raw, json)
Hash identifier:          oqz5XP620nSZdEZLppSav3OMJLrjBUq2bWiTaZyLTu8=
Subject key identifier:   31:88:A4:23:67:28:71:9A:A6:AF:09:F9:7E:0D:17:DA:4C:E5:9E:AF
Authority key identifier: EF:9F:89:98:21:B5:AF:5C:A6:44:8D:74:16:1C:17:C3:54:06:91:C7
Certificate issuer:       /CN=ef9f899821b5af5ca6448d74161c17c3540691c7
Certificate serial:       019FAC769CB152CB1F83EC7391A20ED86DA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75-JmCG1r1ymRI10FhwXw1QGkcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/75-JmCG1r1ymRI10FhwXw1QGkcc.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:22 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:22 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:22 +0000
Files and hashes:         1: 75-JmCG1r1ymRI10FhwXw1QGkcc.crl (hash: WmbiafZh7KhmtnUPwGuxoGbzof9gSAntt7cs/LwNM5k=)
                          2: 7WC5dAQzhGG7OLBjAxZ-y4prohM.roa (hash: 8NUw7v2A9xPb3EyEVmqnKX2Ck2zVVgu6MHzszWafSK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/75-JmCG1r1ymRI10FhwXw1QGkcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/75-JmCG1r1ymRI10FhwXw1QGkcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75-JmCG1r1ymRI10FhwXw1QGkcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:9c:b1:52:cb:1f:83:ec:73:91:a2:0e:d8:6d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9f899821b5af5ca6448d74161c17c3540691c7
        Validity
            Not Before: Jul 29 06:01:22 2026 GMT
            Not After : Jul 30 06:01:22 2026 GMT
        Subject: CN=3188a4236728719aa6af09f97e0d17da4ce59eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:de:16:ad:13:ce:08:dc:94:d1:76:c9:39:23:
                    72:0e:ff:f1:88:48:c7:de:7b:88:17:0f:25:76:59:
                    bb:a9:00:f6:0d:d7:e3:97:2d:42:e5:93:95:b0:d1:
                    d8:aa:cf:59:01:b0:59:bf:3e:8f:63:47:b5:1b:a5:
                    4f:0c:3f:af:c7:1b:7b:be:92:16:d7:e3:03:29:42:
                    04:b6:60:8c:ab:de:8f:b5:39:dc:b4:49:6d:25:23:
                    01:b4:d9:89:3f:9a:d0:d4:58:c0:56:dc:87:13:88:
                    27:1f:d6:db:d6:d9:8e:68:05:10:8f:bc:f6:25:87:
                    29:71:3e:8d:6e:7f:50:ef:b9:5f:db:72:54:25:fc:
                    ac:af:8f:ea:76:24:97:dc:65:96:26:2f:6a:16:fe:
                    bf:93:fc:a3:5e:81:b9:68:2b:a4:20:2c:ce:7d:80:
                    04:70:71:01:1e:53:d5:67:24:c2:55:f2:9f:fc:6c:
                    67:0a:67:f6:c4:d9:69:00:75:25:26:71:a3:06:ee:
                    04:b3:36:bb:da:0e:92:91:9a:f3:64:4b:5f:1c:fd:
                    e6:66:2d:03:db:60:25:8e:50:f9:27:f9:13:29:9c:
                    0c:98:96:94:67:ae:96:d3:6f:66:de:52:ee:44:b9:
                    91:df:46:fe:4b:1f:98:0b:5f:a9:b2:86:b2:b1:2a:
                    39:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:88:A4:23:67:28:71:9A:A6:AF:09:F9:7E:0D:17:DA:4C:E5:9E:AF
            X509v3 Authority Key Identifier:
                keyid:EF:9F:89:98:21:B5:AF:5C:A6:44:8D:74:16:1C:17:C3:54:06:91:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75-JmCG1r1ymRI10FhwXw1QGkcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/75-JmCG1r1ymRI10FhwXw1QGkcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/75-JmCG1r1ymRI10FhwXw1QGkcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:80:b1:30:59:32:0e:5d:57:59:ef:2a:17:41:7d:3e:1e:bb:
         e5:3b:5b:4a:3f:62:f8:b6:33:4e:b8:4a:7a:f9:b1:84:f3:cd:
         ef:93:c2:5f:9b:94:8c:e0:41:37:53:51:04:f3:03:3a:c7:ba:
         f4:0f:c5:53:12:85:9c:89:41:87:5f:ea:25:a6:74:06:be:8f:
         20:90:4e:4e:8f:f7:80:85:cb:b0:65:82:12:39:f2:03:0c:8c:
         f9:e3:aa:20:f6:f1:ea:a9:26:02:d1:36:dc:2b:1a:f9:4b:06:
         eb:3d:80:6b:86:a7:9f:4c:2e:32:64:59:05:79:28:33:1f:60:
         ea:80:08:cf:8d:39:4f:5e:fb:c4:3c:80:fc:9a:04:32:91:8b:
         6c:6c:b8:eb:29:07:f3:db:bb:3f:b0:00:50:2a:11:6d:d4:6c:
         bc:96:40:83:c5:c1:61:b1:77:66:0a:21:ef:3f:bf:ff:fa:99:
         be:c8:99:55:d2:4f:a4:8b:9a:dd:bb:3e:3c:d1:95:14:5d:67:
         7b:18:f5:4a:e6:52:de:36:ec:c2:ad:b3:9f:c7:e2:69:73:46:
         4b:97:69:8c:58:b5:69:66:f6:ae:40:74:d3:01:0b:a0:73:81:
         be:43:b6:1d:bf:dd:e4:6a:38:2b:f4:e7:f3:46:f1:c1:21:60:
         31:50:24:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:21:00 2026 by rpki-client