Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
File:                     4m4BgY9rbo42iNfzYfdTwSNeDNw.mft (raw, json)
Hash identifier:          fXHCOncsnmubylfQn/oe9CIeiLNzggkEJ8anZ7ytCRE=
Subject key identifier:   69:1D:4C:92:D7:69:AA:5B:3B:EE:72:AB:D8:FA:38:54:F6:FE:0E:72
Authority key identifier: E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
Certificate issuer:       /CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Certificate serial:       01A02958D4F351469DC97F765BE36438B903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
Manifest number:          0204
Signing time:             Sat 22 Aug 2026 12:01:22 +0000
Manifest this update:     Sat 22 Aug 2026 12:01:22 +0000
Manifest next update:     Sun 23 Aug 2026 12:01:22 +0000
Files and hashes:         1: 4m4BgY9rbo42iNfzYfdTwSNeDNw.crl (hash: dgbP9eIepswGbn4RcOh9yJePo6NOWF7MT0Tq+G4H2MM=)
                          2: 55lgQHjawIWIBPegmtUWO19P1qY.roa (hash: xr29hGNw/G2B+5szsIy5zpkogZqhj2L/lLvicw1+OJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:29:58:d4:f3:51:46:9d:c9:7f:76:5b:e3:64:38:b9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
        Validity
            Not Before: Aug 22 12:01:22 2026 GMT
            Not After : Aug 23 12:01:22 2026 GMT
        Subject: CN=691d4c92d769aa5b3bee72abd8fa3854f6fe0e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:49:89:75:d8:03:0c:eb:5f:c5:24:8a:f1:5b:
                    83:53:d6:df:30:aa:f2:48:8e:4c:b5:11:16:8a:9e:
                    40:47:86:a7:86:6b:a9:a0:24:73:01:12:c9:20:49:
                    f2:98:c6:f1:1a:b5:6c:bb:b7:57:ac:1d:c2:98:c8:
                    ac:07:87:29:13:d3:6b:de:44:af:b5:e7:56:60:51:
                    67:e4:8f:9d:80:53:56:dc:e3:d2:18:bc:87:11:1e:
                    b4:e1:6c:28:ff:59:61:1d:ea:8d:39:35:e2:bb:4a:
                    1e:49:38:5d:7c:7d:50:5e:7e:58:0f:6a:f1:2f:91:
                    d3:33:8e:32:60:21:07:b9:85:f9:f8:c5:e1:7a:91:
                    16:e2:13:e0:f9:02:f9:53:27:46:93:73:22:36:28:
                    0b:ed:25:88:40:8f:61:a7:4d:c7:c3:84:2c:ff:20:
                    a0:7e:19:b0:48:b5:43:c1:7c:31:e6:2c:4d:32:26:
                    8e:c8:af:be:f2:d8:a3:65:4d:33:cc:4d:7f:11:94:
                    af:3a:42:21:fc:a5:36:76:e2:cb:5a:a7:ab:76:52:
                    52:f9:9f:e3:f8:27:b8:c6:49:6e:7b:80:0d:67:73:
                    a6:e1:5b:50:3f:65:95:79:cf:aa:90:4f:a3:c8:62:
                    81:68:53:35:d2:78:56:49:d0:93:49:86:ff:78:d4:
                    0e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1D:4C:92:D7:69:AA:5B:3B:EE:72:AB:D8:FA:38:54:F6:FE:0E:72
            X509v3 Authority Key Identifier:
                keyid:E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b5:05:d9:53:d2:b5:9f:1f:c0:37:83:eb:56:0d:27:84:85:
         d7:ad:38:1d:9b:55:7f:1f:dc:5d:f8:ad:c5:b5:ee:ae:e5:d8:
         3b:93:fb:37:53:3d:3b:82:7b:dc:fa:11:75:51:80:16:d1:e4:
         f5:1a:95:a6:a8:1c:72:ee:65:97:aa:c0:e3:fb:9a:3f:43:bb:
         01:57:1e:b8:af:ca:e9:89:f1:3f:0b:f7:23:56:e2:8d:e3:32:
         c1:d4:c8:43:9a:b5:1d:78:bf:0a:94:d4:8e:57:82:aa:5a:2b:
         5c:15:59:35:1a:d0:db:04:9d:1a:08:52:34:f0:20:a4:7b:25:
         24:65:a9:7a:a2:c2:3e:1b:df:1d:34:2a:22:65:56:ce:1c:3b:
         32:a0:89:67:e4:a0:37:70:47:93:2b:bf:ea:b8:2d:4c:59:e4:
         b9:27:16:4c:1f:90:3b:29:b0:69:69:be:c0:95:9d:c5:8d:57:
         5f:a6:20:a0:ab:ad:88:fa:90:fc:81:71:50:bd:6d:50:0f:4f:
         70:2a:83:89:e3:f1:16:d8:5c:fe:ae:85:6f:c6:ec:e1:0b:db:
         e0:b1:0c:4c:42:42:7d:23:85:da:32:c4:e0:09:a2:69:fb:b8:
         a8:70:d2:90:aa:69:d0:84:a5:2f:4c:dc:df:22:02:b8:d4:76:
         44:79:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:05 2026 by rpki-client