Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File:                     P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier:          iVqgiJ4RoJ+lTwm7T4XSr/+bZZTrHXj6aeFj8O4trGg=
Subject key identifier:   09:B6:78:AE:EA:BF:C0:90:48:E6:50:8E:5F:C7:AE:00:19:A1:3E:5D
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer:       /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial:       019F9EF0F734B0EDC91973B497B27BC5142F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number:          01C2
Signing time:             Sun 26 Jul 2026 15:00:19 +0000
Manifest this update:     Sun 26 Jul 2026 15:00:19 +0000
Manifest next update:     Mon 27 Jul 2026 15:00:19 +0000
Files and hashes:         1: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: SdmumtLw4QX1WRH4jUe6/ODv8cE4dO/2LD381GZVKt0=)
                          2: Z2hi7ItQ4ePG-89oC3NsOmcwohk.roa (hash: hpOgQ0YBy/9da8UmbyZyoarOicwd5QMZEwe4cjjhqvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f0:f7:34:b0:ed:c9:19:73:b4:97:b2:7b:c5:14:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
        Validity
            Not Before: Jul 26 15:00:19 2026 GMT
            Not After : Jul 27 15:00:19 2026 GMT
        Subject: CN=09b678aeeabfc09048e6508e5fc7ae0019a13e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:6a:31:ad:9f:a9:a9:9f:78:8b:b5:46:f7:
                    eb:b6:e7:dc:a4:b3:02:c6:2e:28:dd:75:f5:c2:08:
                    5d:7a:f5:e0:8a:84:1a:2e:d1:5a:bf:eb:35:05:93:
                    8e:ad:40:74:12:2e:a3:ba:2f:19:c6:d3:21:d0:40:
                    a5:0e:3f:b0:b3:55:8f:8a:4b:4b:e2:29:ad:f9:3e:
                    ec:ea:e0:41:59:cc:e1:63:8e:cd:5e:fc:d6:06:9d:
                    00:ef:22:b8:e4:de:58:f9:be:64:69:01:cd:d8:6f:
                    06:1b:09:78:cb:6a:28:11:9d:8d:8a:40:ab:d1:8f:
                    b1:27:51:77:64:bb:8c:23:5a:c1:27:6e:e5:d1:e2:
                    84:d2:71:03:a3:fc:9c:f8:d1:a9:1a:8b:f3:27:1b:
                    2e:1e:84:6f:f6:d2:a7:dc:e5:bf:a4:a8:e0:59:45:
                    45:9e:73:ec:91:3f:ab:4e:f2:d9:68:36:f2:6d:2d:
                    26:4f:85:88:5a:e4:0f:8d:c1:7f:9d:11:0a:39:a5:
                    9a:b7:e1:fe:1d:51:7a:e7:91:27:10:2b:2f:6f:37:
                    94:67:e3:7d:2b:b9:e2:d6:26:a4:a8:8c:06:82:87:
                    0f:97:b8:ab:0e:e3:db:24:92:d8:0e:c8:d2:59:f5:
                    1f:fe:70:95:59:37:b4:8b:d5:4e:4a:f4:c2:0a:82:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B6:78:AE:EA:BF:C0:90:48:E6:50:8E:5F:C7:AE:00:19:A1:3E:5D
            X509v3 Authority Key Identifier:
                keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:3f:b9:5d:52:0f:0d:f1:bf:75:34:ad:e7:d6:b0:41:30:
         49:5f:d2:d8:5a:90:b8:e7:c7:10:64:46:64:38:17:71:86:a4:
         2d:1e:20:38:af:34:eb:57:d3:64:b3:96:30:b0:19:fa:d8:cd:
         40:8e:e1:3d:7f:13:d3:63:51:c7:b6:8d:65:7e:ba:ac:57:ff:
         8b:14:9e:6e:26:0f:24:06:05:2b:98:b8:a1:c6:4b:5a:8c:8a:
         0a:b5:04:83:97:d8:db:97:e6:09:03:80:28:41:cd:a4:f5:87:
         38:be:70:d6:43:db:29:36:08:b1:fc:a7:87:45:8f:ad:7a:23:
         e8:4b:3a:3e:86:8a:f0:67:76:a9:dc:78:64:7d:73:29:85:cf:
         a9:c3:8a:d0:1f:c1:68:8b:f3:c9:53:d2:52:46:29:8f:f9:ba:
         2b:a1:92:8a:aa:8a:36:d8:30:ce:5f:bf:e5:60:97:33:bb:f0:
         dc:18:81:55:64:29:86:3d:5d:2c:22:b9:aa:3b:bf:09:8d:ba:
         6a:b4:a4:87:2c:e3:21:8b:68:ec:c2:c4:6a:53:4c:58:09:8f:
         b7:8c:42:45:44:1f:2f:7a:54:34:59:a2:b8:6f:a8:eb:f6:03:
         ee:c4:10:3a:38:fd:01:69:3f:05:6a:94:67:63:f7:b1:7c:d6:
         9d:0e:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:37:48 2026 by rpki-client