Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
File:                     2q99feqywLmZjuJntfO25TEEA-E.mft (raw, json)
Hash identifier:          MPzKWWH4Im0tyIJojYGaWWQhVzHNZZzmCSi5nWbc6Nw=
Subject key identifier:   E3:DA:1E:DD:E5:AF:A6:25:A0:47:91:8D:7E:96:06:BC:D8:7E:8B:32
Authority key identifier: DA:AF:7D:7D:EA:B2:C0:B9:99:8E:E2:67:B5:F3:B6:E5:31:04:03:E1
Certificate issuer:       /CN=daaf7d7deab2c0b9998ee267b5f3b6e5310403e1
Certificate serial:       019FAC76B1FE8B5B0592E8B219D36B02D6EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:27 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:27 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:27 +0000
Files and hashes:         1: 2q99feqywLmZjuJntfO25TEEA-E.crl (hash: IVmfVMHN2/j1D2fSukYIAlD7EgZQ9UnEyRuiz0OpV/c=)
                          2: 7RGCArg6zHYj0Iou9jA7oVTdAb4.roa (hash: mGoXGOaisyNwd8zq8IefJ6jzjpEEa9vteqG8Ej7ZF/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:b1:fe:8b:5b:05:92:e8:b2:19:d3:6b:02:d6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf7d7deab2c0b9998ee267b5f3b6e5310403e1
        Validity
            Not Before: Jul 29 06:01:27 2026 GMT
            Not After : Jul 30 06:01:27 2026 GMT
        Subject: CN=e3da1edde5afa625a047918d7e9606bcd87e8b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:6a:b0:59:ed:d2:60:9f:71:41:02:d0:73:
                    8f:74:f8:a5:ea:fc:89:43:62:cd:f5:db:39:8f:d7:
                    4d:6a:73:af:aa:a3:52:8b:02:2b:36:0c:a5:4f:6a:
                    7e:a9:05:b8:ab:e5:48:98:cb:ed:e0:49:7f:56:01:
                    7a:15:12:8b:80:cd:7c:47:2b:20:44:fb:fe:f3:97:
                    cc:4d:81:b9:41:2e:10:ab:9b:d1:1c:b3:75:fe:67:
                    b2:e1:1b:ac:1b:d1:70:8b:62:98:27:58:56:9e:a9:
                    b9:2f:eb:dc:82:70:18:b7:38:f5:50:eb:54:49:9f:
                    92:2f:a5:49:6d:51:4f:43:05:2d:78:63:0e:8f:80:
                    88:b7:82:bb:e8:e7:d8:ed:ad:62:60:6c:0c:58:fd:
                    8d:75:08:4f:bf:3a:49:48:04:10:e7:54:2c:88:16:
                    d6:4a:6b:89:0b:c8:f6:8f:2f:eb:17:47:b2:64:9c:
                    89:34:8a:42:80:a2:15:fa:40:69:ff:8b:64:f4:76:
                    a9:32:99:b9:b7:00:f5:4c:05:d8:f9:93:e1:35:b3:
                    5f:6a:14:13:48:d8:56:15:bb:b7:36:2b:4d:5a:22:
                    fe:ce:2a:50:50:32:f2:82:66:5c:be:6b:bf:68:cc:
                    1d:85:62:70:26:54:47:8a:25:b5:04:d9:db:df:be:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DA:1E:DD:E5:AF:A6:25:A0:47:91:8D:7E:96:06:BC:D8:7E:8B:32
            X509v3 Authority Key Identifier:
                keyid:DA:AF:7D:7D:EA:B2:C0:B9:99:8E:E2:67:B5:F3:B6:E5:31:04:03:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:78:bd:92:81:e1:51:91:4d:8e:fb:99:55:a7:cc:82:87:44:
         38:b9:cd:60:88:55:aa:f6:83:16:ad:d5:b5:df:74:30:a0:da:
         a7:f6:f7:73:ec:9e:c4:a7:be:5b:8a:7b:28:91:54:ec:b6:f8:
         77:69:ef:96:f3:2c:ce:45:60:09:47:74:0c:a9:6b:f1:cc:6b:
         3e:16:1e:85:63:d9:c5:60:57:7c:d2:49:80:37:7f:ec:e0:54:
         d6:90:87:66:a6:12:1e:71:c2:7d:3e:76:49:22:8b:92:95:5f:
         ec:fd:c0:5d:96:b1:78:76:7a:1f:49:5d:dc:c8:e5:4d:1c:ef:
         53:b3:ec:97:63:5c:c2:dc:16:89:bb:bd:da:58:0d:cc:f8:ad:
         7c:cd:36:ac:b8:23:92:78:0b:02:0b:12:36:d4:d6:9f:ee:11:
         eb:ac:05:07:fe:a2:04:aa:af:6a:ec:9e:57:45:7f:e7:f1:0d:
         f7:4c:a6:14:3d:9a:0c:90:83:5f:67:bb:d7:f2:96:77:00:a3:
         71:f2:83:da:3e:e6:0e:63:f8:98:e7:68:5b:cb:73:da:45:01:
         3f:6b:aa:8b:3c:c1:75:3c:62:f1:ba:7e:44:a6:e7:09:5c:42:
         c4:b6:b0:46:73:74:57:56:82:5c:6e:ff:68:7c:63:5f:55:24:
         e8:51:df:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:47:12 2026 by rpki-client