Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
File:                     yiAvZExIQuX41ATgaJ-B9SwVS1E.mft (raw, json)
Hash identifier:          FmXiPM8o3OHmjHhsxeuHvl00mp+hGX4utUH6hg1OH5A=
Subject key identifier:   75:86:08:7D:A0:ED:32:6A:0F:D5:D6:B1:DE:10:F3:86:FB:6C:82:B6
Authority key identifier: CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
Certificate issuer:       /CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Certificate serial:       019FAC76E830C8867AA6312FE4E167BD51B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:41 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:41 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:41 +0000
Files and hashes:         1: RrGxYN2h_N_Vx45aQWWvFqoM3rA.roa (hash: NfGzv+ISe2v5iqjEcKNdZo4d+WrQJS0vL5wyjnXNlGQ=)
                          2: yiAvZExIQuX41ATgaJ-B9SwVS1E.crl (hash: vlWdDzTT53wg2+cudGWytuaAkFrMah9q3RC/3RxdPqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:e8:30:c8:86:7a:a6:31:2f:e4:e1:67:bd:51:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca202f644c4842e5f8d404e0689f81f52c154b51
        Validity
            Not Before: Jul 29 06:01:41 2026 GMT
            Not After : Jul 30 06:01:41 2026 GMT
        Subject: CN=7586087da0ed326a0fd5d6b1de10f386fb6c82b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:07:2d:28:3f:90:4b:bb:53:a7:83:a9:1b:
                    a3:95:a5:09:96:02:b7:9a:a2:fe:2a:f0:2d:9a:a1:
                    03:6d:24:d4:1f:e9:9e:5f:18:41:dd:13:5e:fd:ef:
                    8c:44:22:03:bf:fd:b0:7a:44:18:e6:fa:58:2f:30:
                    1e:d6:e1:9b:84:37:71:b6:14:71:a4:b9:2a:72:95:
                    d5:59:60:6a:1e:cc:e7:e1:2e:e9:e5:92:65:e8:51:
                    3d:6b:77:b6:4c:cb:64:22:0a:b8:b9:70:e9:a6:a1:
                    ba:17:f8:e6:d8:0e:32:b2:d5:9b:05:d6:07:fe:90:
                    49:85:69:da:7e:e0:a6:1e:69:2c:e4:1b:66:ad:c9:
                    8f:c2:08:7f:a8:fa:45:a7:39:8b:0d:52:0b:09:d3:
                    e9:cc:ae:fb:f6:af:4e:16:39:9e:f7:9f:53:39:3b:
                    84:1b:53:9b:9c:8f:56:a2:55:3a:99:b1:0d:f7:90:
                    13:8f:bd:d8:d3:3d:3d:36:af:75:32:46:68:55:c9:
                    b8:cc:7f:fb:84:48:bb:ec:f2:85:f5:cc:4e:2f:c0:
                    2f:69:80:a0:c6:8a:2f:a1:46:7c:36:f1:bf:04:63:
                    22:cd:53:c8:1e:ca:d1:92:7f:46:22:e5:8a:bc:7f:
                    d6:62:ce:dd:99:59:0f:0b:8c:80:6f:1d:b4:ca:86:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:86:08:7D:A0:ED:32:6A:0F:D5:D6:B1:DE:10:F3:86:FB:6C:82:B6
            X509v3 Authority Key Identifier:
                keyid:CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0d:af:45:24:7b:b5:66:38:ff:2e:20:0e:ca:c7:9b:9f:52:
         7a:e9:61:42:c0:1b:1f:27:0b:05:5d:8b:2d:09:74:1f:88:3f:
         a1:6c:7e:99:ab:b5:4b:c2:a6:e3:3c:30:de:75:d9:0b:a8:4e:
         48:6f:e5:9f:bb:2b:03:aa:39:97:08:89:de:78:99:ec:9a:e9:
         9c:ff:ee:60:b8:71:53:55:4a:3f:ad:68:22:a6:73:63:27:0a:
         b5:16:79:b7:3e:0e:d8:23:7d:00:79:5b:92:38:fa:83:01:d4:
         70:ba:c5:10:d4:21:f2:a8:0e:1c:f9:39:bc:45:12:53:ac:b5:
         f4:df:93:67:a5:56:15:29:20:7e:d5:5f:1c:d7:1d:e8:26:96:
         e6:93:83:85:36:32:0d:9e:76:c9:ec:f7:37:08:93:8a:60:eb:
         7a:de:a7:b4:3a:ab:e1:4d:b9:1a:35:63:eb:30:fa:f0:f0:29:
         15:ec:c5:bb:ed:8f:db:72:8a:4c:52:c5:00:14:fb:70:61:be:
         ce:c0:4f:b5:aa:cd:69:5c:2d:67:4e:75:3c:ef:9b:62:e7:ff:
         d3:0f:34:03:77:82:bd:55:d6:eb:07:49:df:22:53:91:34:7b:
         11:07:10:72:04:eb:72:a1:6d:9f:64:51:16:61:76:29:9a:e7:
         fd:ab:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:19:59 2026 by rpki-client