Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft
File:                     4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft (raw, json)
Hash identifier:          fAsPAPzoTfLYB5uSgSVKQYUF7WPOxjzYbmUMCl8nrVc=
Subject key identifier:   08:7F:71:68:55:A2:A2:9F:1B:82:F3:1C:3C:C4:19:74:17:AD:E0:A1
Authority key identifier: E0:97:38:5E:91:6D:CD:17:5C:F3:8B:96:5F:C3:2A:FF:30:3C:E4:25
Certificate issuer:       /CN=e097385e916dcd175cf38b965fc32aff303ce425
Certificate serial:       019EFD27BCDBBEBE0573A9C58CA1B5217FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Jc4XpFtzRdc84uWX8Mq_zA85CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft
Manifest number:          2A
Signing time:             Thu 25 Jun 2026 05:01:40 +0000
Manifest this update:     Thu 25 Jun 2026 05:01:40 +0000
Manifest next update:     Fri 26 Jun 2026 05:01:40 +0000
Files and hashes:         1: 4Jc4XpFtzRdc84uWX8Mq_zA85CU.crl (hash: EHXNwKB9OrfclhRwPnV6HehoKrXd6s/3i6+LQEERYoc=)
                          2: hvZKToBFprnrpLaFvP2GP4f29o8.asa (hash: adL+Hr0Myv5tfA8wDedAlh2DFcBTImxKKAjiZtHMF+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Jc4XpFtzRdc84uWX8Mq_zA85CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fd:27:bc:db:be:be:05:73:a9:c5:8c:a1:b5:21:7f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e097385e916dcd175cf38b965fc32aff303ce425
        Validity
            Not Before: Jun 25 05:01:40 2026 GMT
            Not After : Jun 26 05:01:40 2026 GMT
        Subject: CN=087f716855a2a29f1b82f31c3cc4197417ade0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:a4:1e:fc:f8:5d:3e:eb:85:4a:0b:2c:9d:
                    33:ec:c9:af:34:1d:cc:e2:bd:44:6e:2c:45:84:f5:
                    96:35:c4:7a:92:58:21:c1:64:7b:bd:f5:ba:76:46:
                    96:03:b9:70:1f:06:5f:83:fd:40:5b:0c:c1:5e:c9:
                    79:de:f3:15:55:15:cc:ef:fe:ea:b3:8b:1a:53:f4:
                    9d:a4:89:5c:21:99:5b:2d:b9:c0:9d:18:11:8c:81:
                    73:9e:c8:ce:1b:43:95:36:19:78:c3:43:99:5b:fa:
                    1c:be:fe:80:da:ae:1f:c4:ca:06:c7:11:d7:28:b9:
                    52:5d:5f:48:37:56:0e:ff:d2:66:e3:6c:a8:33:00:
                    cb:b8:bc:d4:6a:ac:4c:b1:5d:0d:24:63:7d:24:87:
                    4d:69:6c:6e:98:b7:01:c0:60:bb:18:74:f6:c5:75:
                    80:08:26:22:72:e1:1a:da:2d:73:b9:c5:be:16:62:
                    78:be:53:03:d3:19:75:3c:41:79:ce:33:d8:03:ed:
                    ea:60:65:04:25:0c:89:e8:2e:75:4f:53:25:4f:63:
                    b0:7a:fb:5e:bf:f6:34:0d:82:df:c1:42:05:fa:12:
                    52:37:7a:3d:70:4b:89:2c:59:48:d9:df:a8:40:f2:
                    ea:4a:cc:ba:1a:12:88:60:56:e9:6f:e0:c5:a6:ec:
                    20:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7F:71:68:55:A2:A2:9F:1B:82:F3:1C:3C:C4:19:74:17:AD:E0:A1
            X509v3 Authority Key Identifier:
                keyid:E0:97:38:5E:91:6D:CD:17:5C:F3:8B:96:5F:C3:2A:FF:30:3C:E4:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Jc4XpFtzRdc84uWX8Mq_zA85CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:ee:df:fb:3f:65:87:5e:28:e0:e6:a3:c3:01:43:61:9a:ee:
         16:21:b5:9a:c7:df:62:5b:b1:3b:46:29:95:59:b3:9d:1e:42:
         3c:64:03:1c:82:bc:3a:58:d9:d5:dd:66:a1:ae:1d:2e:21:d3:
         19:df:98:38:64:e0:8d:6f:5d:f2:e5:55:a9:f1:9a:a4:0a:d1:
         94:6f:6b:b6:0c:fb:64:91:42:32:92:b8:27:ea:ce:0c:ed:88:
         88:81:61:25:2e:4e:0b:58:12:38:06:67:da:85:ca:5f:94:b6:
         0f:10:dd:5d:fd:f8:aa:a5:77:b0:5c:a7:25:7a:7f:16:7e:37:
         dd:d6:86:52:86:06:8a:b5:ed:d5:6c:c8:97:9b:d0:17:65:da:
         49:a2:68:35:46:b6:a0:5c:c2:1a:be:15:c8:e4:a7:f0:78:09:
         ba:bc:c9:d7:2d:43:db:0e:df:10:02:48:c2:81:e4:7e:89:b2:
         95:b7:aa:65:73:c3:e8:40:30:76:3b:c6:f7:52:3b:6c:5f:83:
         9f:4e:10:5e:cd:d6:18:02:eb:fc:53:ff:67:9c:1c:9e:42:d8:
         0c:1b:68:23:9b:5c:71:d1:0b:f2:0e:93:c2:a6:d9:6e:2c:a5:
         c9:a4:11:cd:d4:7b:80:c8:5e:49:26:0f:ac:79:d9:86:8f:76:
         94:9c:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:34:36 2026 by rpki-client