Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
File:                     RDO2ork3CiSzs5vwMBiRnDY1lYw.mft (raw, json)
Hash identifier:          5guCfKbghlzEqorhTrcJvFqTHGXALTIMixlabTDM40M=
Subject key identifier:   81:3B:00:0C:66:FC:B6:C6:8F:CA:BB:3D:36:4A:95:5F:9C:22:82:02
Authority key identifier: 44:33:B6:A2:B9:37:0A:24:B3:B3:9B:F0:30:18:91:9C:36:35:95:8C
Certificate issuer:       /CN=4433b6a2b9370a24b3b39bf03018919c3635958c
Certificate serial:       019FA0DFFF65DBAFCA305723910B2DE10EA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:01:02 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:02 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:02 +0000
Files and hashes:         1: RDO2ork3CiSzs5vwMBiRnDY1lYw.crl (hash: ZPUymXdEDi32vmZo+ltUM57RMXsGSsfq8l0SYhlc6bE=)
                          2: gG-xH4Wm1_ftJKGC0tQXiROr0_Y.roa (hash: oFf67BglbiSgcsuuPtbPySF0HlPBZgLM4o8ZIMj+qf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:df:ff:65:db:af:ca:30:57:23:91:0b:2d:e1:0e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4433b6a2b9370a24b3b39bf03018919c3635958c
        Validity
            Not Before: Jul 27 00:01:02 2026 GMT
            Not After : Jul 28 00:01:02 2026 GMT
        Subject: CN=813b000c66fcb6c68fcabb3d364a955f9c228202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c1:ba:31:e9:69:7d:37:15:a0:b8:8e:3a:d7:
                    2c:d2:28:46:69:02:09:07:ea:ac:22:2f:e9:cf:2a:
                    a9:72:b9:27:2c:ff:93:ab:da:11:4e:06:37:8f:75:
                    e6:18:cf:e9:30:1f:3e:17:6f:69:d6:04:96:b2:3b:
                    7e:d7:21:3e:f0:fb:b4:10:ca:61:c1:b2:36:c8:2c:
                    b0:35:aa:25:19:ff:06:08:89:e7:6b:eb:a7:5f:ae:
                    33:49:2e:03:bf:e6:6d:49:62:49:60:da:80:fc:eb:
                    6d:cb:2d:36:e1:5c:e3:b8:5f:47:a6:aa:4e:5a:b2:
                    05:04:28:cf:12:e3:9b:11:8b:8f:7f:98:40:f2:f9:
                    59:f3:60:ca:b9:1e:52:c6:99:b4:42:40:c3:e0:59:
                    0c:e9:e7:11:99:63:51:31:b5:32:bb:33:2b:99:aa:
                    3c:5c:fe:6b:1d:7c:d7:6d:63:4f:6f:e0:3a:c8:26:
                    ab:cb:94:28:bc:10:ca:cc:69:4d:6a:fb:40:7e:83:
                    bf:d4:1a:0d:ac:a2:4f:d3:9f:f0:a6:c4:18:d4:4f:
                    e6:6c:b1:45:3c:49:5d:12:11:ea:be:32:a5:51:28:
                    00:5a:4a:82:31:e6:36:62:fc:17:05:02:c2:d6:53:
                    40:8a:35:03:dc:5d:a5:02:a1:d9:d1:3d:44:e8:d8:
                    3a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3B:00:0C:66:FC:B6:C6:8F:CA:BB:3D:36:4A:95:5F:9C:22:82:02
            X509v3 Authority Key Identifier:
                keyid:44:33:B6:A2:B9:37:0A:24:B3:B3:9B:F0:30:18:91:9C:36:35:95:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3c:20:a1:87:a2:2e:74:c7:31:eb:2d:5d:7d:a1:57:01:cc:
         6a:1b:2a:ac:ec:bb:a5:d6:64:78:71:43:25:f5:71:81:8c:c9:
         30:15:df:a9:71:6a:7c:e0:02:dc:8a:f9:79:8f:12:c7:92:5c:
         19:80:8a:42:c6:52:0c:33:5f:0d:8a:a7:1d:7b:68:16:bb:72:
         65:e0:de:71:41:fb:72:b2:a8:a9:36:14:b5:da:58:65:7c:fd:
         fe:bf:98:ab:fa:c3:14:f5:66:40:19:e6:77:15:02:3f:74:97:
         2d:a0:f7:0c:99:32:d3:9c:36:0e:03:b6:e1:10:26:50:91:65:
         2f:16:ae:19:76:51:28:71:ab:7f:ee:c4:e0:77:5c:ce:db:8a:
         64:a5:e7:68:81:1f:43:aa:5d:e9:9d:5e:23:f5:6b:24:27:0e:
         92:fc:50:b3:81:8d:fe:71:9d:d6:90:8b:9b:41:09:de:4c:36:
         6f:cf:43:05:70:a5:42:05:d2:01:af:26:81:5a:56:20:60:68:
         12:53:e9:3f:81:88:23:5b:0b:af:f2:b5:8a:f2:07:09:91:4c:
         cd:df:37:e6:f6:c7:cd:b7:73:44:0f:65:4e:5a:42:01:5d:08:
         c9:78:ac:d5:d6:20:c0:26:06:8d:47:76:19:ab:44:bd:94:b5:
         9d:91:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:32:01 2026 by rpki-client