Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
File:                     4chbPfGRu7SHTyElY_U2-CPqQzI.mft (raw, json)
Hash identifier:          SthVzJmbw8EdANSGxY3LD7qqyY0JmYXj6sWBONvEDSE=
Subject key identifier:   79:E7:AE:2C:3A:53:D1:30:F2:69:77:76:8D:63:44:1F:9B:00:F4:3D
Authority key identifier: E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32
Certificate issuer:       /CN=e1c85b3df191bbb4874f212563f536f823ea4332
Certificate serial:       019EFC4C0C0C1C4CBDE5AA5458711E6216EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
Manifest number:          E7
Signing time:             Thu 25 Jun 2026 01:01:42 +0000
Manifest this update:     Thu 25 Jun 2026 01:01:42 +0000
Manifest next update:     Fri 26 Jun 2026 01:01:42 +0000
Files and hashes:         1: 4chbPfGRu7SHTyElY_U2-CPqQzI.crl (hash: DWTTqXdWUDw6IjjsFsr7TTZ3V2pY45FxnRjDWH5xxQU=)
                          2: HGJATmPx_lb-up56PA9sws4LXzM.roa (hash: rP4ippAFPKo3N/gSznr5pBHOOcDkPGB3VJz0DMBiGGk=)
                          3: ZKlPGz4kI_uOgsyApeExYa33cEk.asa (hash: gHtpE0/vy2kYs9vRGqmcozAsLFQTnGOPyUQhZ0q23wc=)
                          4: vR8-TTbXfVDHZdgSnOr8TDlwnBk.roa (hash: jMzlWmBuharjGRH2L1aGRJN/4ce3UkOwdCSnIziX6x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:4c:0c:0c:1c:4c:bd:e5:aa:54:58:71:1e:62:16:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c85b3df191bbb4874f212563f536f823ea4332
        Validity
            Not Before: Jun 25 01:01:42 2026 GMT
            Not After : Jun 26 01:01:42 2026 GMT
        Subject: CN=79e7ae2c3a53d130f26977768d63441f9b00f43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:21:91:22:15:40:de:80:95:96:06:25:ca:
                    8f:d5:0a:de:6f:62:59:a1:69:9a:c9:cf:ea:61:a8:
                    bf:2b:17:42:50:6f:64:9c:17:1c:ee:70:d8:f9:76:
                    d2:41:83:67:c3:7d:7d:ad:c9:f8:c8:19:c7:19:87:
                    8d:b7:46:04:53:e9:e3:77:1c:89:b7:34:89:e1:44:
                    45:0a:83:39:80:ca:6e:be:3d:f1:f0:ca:b8:71:4c:
                    96:bd:3e:21:97:18:b5:45:c8:d9:f2:61:2e:24:59:
                    44:7b:40:7b:d0:72:f4:72:48:9d:30:bd:b3:97:6a:
                    7d:7a:12:ed:ce:77:51:fa:75:6e:ca:4e:ef:8e:22:
                    ea:74:c1:2b:5b:ce:c4:3f:54:77:49:92:3e:25:6c:
                    b2:a0:87:51:38:e8:8a:f4:f0:cd:58:91:11:d0:cb:
                    e2:c8:f1:a8:a4:c4:b5:f4:c0:b7:79:b7:e8:83:6d:
                    fc:3b:e2:20:24:c1:9f:2a:93:bb:7a:e5:5f:d1:be:
                    49:52:ca:be:c1:52:4d:f7:2c:c3:26:17:86:21:f0:
                    8b:c5:89:9e:5e:bf:e1:db:20:a4:50:a7:1a:d9:87:
                    11:76:c6:8a:df:bc:a7:b5:b3:fd:b2:97:61:b0:a8:
                    52:41:bc:8d:b0:cb:df:56:87:a6:59:f8:f6:1a:10:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E7:AE:2C:3A:53:D1:30:F2:69:77:76:8D:63:44:1F:9B:00:F4:3D
            X509v3 Authority Key Identifier:
                keyid:E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:1d:66:16:f7:21:9a:a7:38:55:af:9c:63:95:13:4e:09:
         30:3f:f3:b3:75:7a:43:08:bd:3d:c6:52:4f:f5:6e:aa:88:4a:
         88:b4:24:92:1c:1a:20:ca:72:44:a0:b7:fe:70:83:c3:9a:b9:
         0f:f2:97:f0:95:50:3c:3d:42:a8:ad:d3:70:cc:49:f1:88:a5:
         15:db:4f:0c:f9:de:8f:d3:9e:04:ee:e5:e6:a8:4f:92:1c:2a:
         54:6f:8f:52:99:73:78:e9:db:66:32:32:df:3b:03:43:dc:7a:
         7c:10:aa:e7:ad:c5:de:a8:62:4d:b0:e8:f9:de:5e:d2:e8:48:
         cd:bb:be:1c:f6:61:40:58:a7:ae:db:34:c2:23:11:a4:76:79:
         a6:f7:1a:1a:dc:ff:8e:87:37:86:2b:2c:f7:e1:f4:70:e3:74:
         a1:bf:12:e6:eb:69:28:68:f0:53:c7:eb:e1:f7:56:a5:33:c9:
         de:04:f4:37:cd:06:fc:91:0d:3b:10:c5:47:ed:04:81:9c:02:
         9e:94:20:6f:c5:69:7e:57:79:32:24:7b:65:2b:d3:a9:6b:3c:
         5f:1e:08:52:cc:a8:69:70:89:d2:fd:22:10:8d:ef:a8:2b:8d:
         bd:8b:53:fb:47:fd:9f:fb:31:f8:30:69:91:db:54:5b:c4:55:
         d7:c5:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:37:00 2026 by rpki-client