Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File:                     4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier:          yQQIakKlc5EtmNRWMl7xMwtbCJek4o1fQuIjxT3j3Qk=
Subject key identifier:   DA:8A:75:59:40:A9:38:DF:CE:07:21:D7:CC:8B:0A:4A:7D:5F:9F:FC
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer:       /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial:       019F9F27E6C5291B2A021C20D3B9D97575E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number:          0C83
Signing time:             Sun 26 Jul 2026 16:00:20 +0000
Manifest this update:     Sun 26 Jul 2026 16:00:20 +0000
Manifest next update:     Mon 27 Jul 2026 16:00:20 +0000
Files and hashes:         1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: E1POrI+UKGCaNKmmdqkpz6alQr3e2UXV2FRPAfg539g=)
                          2: YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa (hash: zJ9iDYD1yuxkbyK8khRTA4UqxwT49qevZssCV62H0OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:27:e6:c5:29:1b:2a:02:1c:20:d3:b9:d9:75:75:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
        Validity
            Not Before: Jul 26 16:00:20 2026 GMT
            Not After : Jul 27 16:00:20 2026 GMT
        Subject: CN=da8a755940a938dfce0721d7cc8b0a4a7d5f9ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:74:7b:92:83:53:38:da:ac:4b:01:94:f3:
                    bf:3a:b8:b5:84:68:e6:d6:1b:b1:f4:7d:61:da:1a:
                    a2:a2:d4:88:ff:5d:6d:6d:67:1a:7a:54:1d:2c:34:
                    c5:d1:1e:64:cb:4e:c9:e4:a4:7c:d4:bb:95:14:41:
                    f9:f1:fe:63:1a:f0:cc:68:f2:d8:2a:e4:c0:01:fa:
                    0c:4f:34:90:a7:b0:49:4d:df:e5:e9:78:2b:71:11:
                    a6:a0:4a:00:1d:65:79:40:fa:fa:63:86:27:08:db:
                    19:46:bd:4d:3e:75:69:21:39:00:d7:7e:c7:39:3f:
                    fd:8a:d6:16:88:9c:bb:ef:e0:b8:df:c9:fc:f9:40:
                    fd:55:87:78:8e:83:df:27:6c:64:2d:f4:b1:16:86:
                    68:23:2c:4c:97:21:17:ab:a8:13:03:80:c4:2f:98:
                    0c:d9:fa:8f:f6:ff:9a:46:8e:b5:a9:8a:49:2b:fe:
                    78:44:a2:ea:7b:86:2a:ff:dd:14:c6:98:58:6c:73:
                    54:b9:98:7b:dc:81:5f:bd:46:33:2f:88:99:5b:c2:
                    2e:05:41:57:20:aa:a7:00:0b:b0:b0:e9:9d:f5:74:
                    8e:21:52:d6:6c:8d:87:d7:28:48:35:b2:7d:2e:87:
                    0c:5b:bc:24:a5:4d:cf:98:31:71:87:d7:e4:c5:8a:
                    43:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8A:75:59:40:A9:38:DF:CE:07:21:D7:CC:8B:0A:4A:7D:5F:9F:FC
            X509v3 Authority Key Identifier:
                keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:74:49:76:bc:37:62:50:67:65:cd:e5:25:d8:45:60:06:7f:
         65:d2:05:ef:8a:4c:e1:d3:62:c3:0b:c6:a0:dd:ec:69:d4:80:
         63:83:31:ab:35:24:53:a4:fe:aa:48:a0:17:f4:35:cf:cb:11:
         fd:75:c5:0d:34:9b:60:0f:2c:07:98:77:b8:15:b8:1b:d1:a2:
         89:38:5a:fc:ed:56:22:41:3b:dd:a0:58:39:ad:71:83:4f:d6:
         57:16:09:a1:9a:ba:c7:e6:8a:04:41:87:73:f6:80:f4:e9:06:
         a9:47:b8:b7:64:2f:61:ae:b4:df:24:56:87:31:f2:ff:6a:d6:
         24:9b:0f:d0:00:5e:6c:a2:0b:f5:60:ed:34:a4:ec:5b:d9:0b:
         2d:60:c2:59:06:44:1d:6c:7a:3e:ba:1d:21:da:5f:60:74:5d:
         66:f6:ff:17:e4:93:29:63:30:e2:b0:c9:53:ea:cc:5a:c6:17:
         b7:3d:95:13:07:be:e4:51:fb:a5:5f:5a:e6:fb:fe:42:0b:b0:
         1f:6f:c7:d7:58:16:17:09:d2:47:99:04:6b:07:f2:d4:39:58:
         eb:73:b7:ad:2b:90:81:8e:f1:50:cf:9a:72:1d:b5:f9:3a:6c:
         dc:27:b6:db:af:2c:e2:b7:8e:bb:d9:71:4f:66:11:a5:28:27:
         ed:0a:6f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:26:33 2026 by rpki-client