Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.mft
File:                     sEGLTKBrJ88hRqnV34ozWsJv66Y.mft (raw, json)
Hash identifier:          O0Y8SS7FyE02YBzzJctOfn1i5syJf+9TWYECrfg8vIE=
Subject key identifier:   EC:CF:4C:5F:2A:29:7E:EC:BA:CE:18:0F:DA:15:44:FA:E1:48:7C:BF
Authority key identifier: B0:41:8B:4C:A0:6B:27:CF:21:46:A9:D5:DF:8A:33:5A:C2:6F:EB:A6
Certificate issuer:       /CN=b0418b4ca06b27cf2146a9d5df8a335ac26feba6
Certificate serial:       019DCD4FB1958E2E5A1A67E4CA618E23983D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sEGLTKBrJ88hRqnV34ozWsJv66Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.mft
Manifest number:          F4
Signing time:             Mon 27 Apr 2026 05:00:45 +0000
Manifest this update:     Mon 27 Apr 2026 05:00:45 +0000
Manifest next update:     Tue 28 Apr 2026 05:00:45 +0000
Files and hashes:         1: 0piZVg6nYn1zr1D9tSdhmaFoiB0.roa (hash: 4/Aijc3U66ItVo2bUJk6n9moOAc6MXnBaHbZAgIrcwM=)
                          2: sEGLTKBrJ88hRqnV34ozWsJv66Y.crl (hash: OsY3wViFPV7f/kyL6KtxksTCJQNMG8E1MBtKWRbRimc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sEGLTKBrJ88hRqnV34ozWsJv66Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:4f:b1:95:8e:2e:5a:1a:67:e4:ca:61:8e:23:98:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0418b4ca06b27cf2146a9d5df8a335ac26feba6
        Validity
            Not Before: Apr 27 05:00:45 2026 GMT
            Not After : Apr 28 05:00:45 2026 GMT
        Subject: CN=eccf4c5f2a297eecbace180fda1544fae1487cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:05:4a:f4:fa:69:df:13:95:15:bf:29:66:
                    0d:e7:ca:9c:b6:9f:09:7f:a9:dd:ce:db:be:54:38:
                    2e:d5:1e:14:e3:50:4a:d5:92:96:4c:72:ce:84:27:
                    05:0b:42:9c:83:5a:bf:f5:76:02:43:69:50:e7:43:
                    16:3f:9a:aa:37:3b:61:d4:cb:53:3c:a0:9f:81:88:
                    76:42:a1:b4:c7:be:b2:55:eb:82:72:8c:08:1e:ad:
                    7c:27:2e:f5:db:6a:d9:27:d8:86:7a:24:90:9f:10:
                    b2:01:90:f3:5d:5e:b0:a2:f0:f8:3f:71:6a:3c:cd:
                    f3:4d:29:88:c4:5a:1a:f7:86:6d:4d:f5:db:a0:49:
                    f3:34:33:b6:bd:86:c6:05:67:d0:2c:76:ca:dd:13:
                    90:fe:8f:83:53:6b:64:b7:c6:b2:25:a1:14:a9:c6:
                    c1:26:fc:70:9c:93:95:8c:b4:49:97:f9:91:67:0a:
                    c3:ce:90:7d:60:b7:c8:78:72:2a:e5:74:24:1f:7e:
                    7a:df:26:78:db:f7:67:e9:6e:4f:09:6c:06:22:8d:
                    ee:da:2a:3f:a4:18:39:4e:79:0b:dd:54:93:82:05:
                    37:00:35:6d:4e:3f:4e:5b:cf:cc:85:e2:37:e5:34:
                    e9:06:cf:ee:21:0d:f0:3c:22:02:0e:9c:7b:bc:f3:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CF:4C:5F:2A:29:7E:EC:BA:CE:18:0F:DA:15:44:FA:E1:48:7C:BF
            X509v3 Authority Key Identifier:
                keyid:B0:41:8B:4C:A0:6B:27:CF:21:46:A9:D5:DF:8A:33:5A:C2:6F:EB:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEGLTKBrJ88hRqnV34ozWsJv66Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bf:e5:60:cd:e8:18:9c:04:3d:16:00:fe:8c:72:3b:fd:da:
         a9:47:b2:da:06:8d:33:13:3e:b7:a1:9e:87:44:f6:60:11:65:
         1b:46:9f:d5:e3:8a:9f:70:c6:1a:65:37:0f:e4:f3:57:7e:18:
         1c:29:d3:64:14:85:76:f6:ae:98:91:38:3b:8d:17:f4:d4:6e:
         72:be:92:af:65:11:25:ad:e1:97:d8:42:69:19:7c:c5:ba:28:
         53:17:c8:6f:22:96:97:ae:77:fe:54:3a:e8:39:96:f4:74:49:
         6a:91:53:7d:b1:50:eb:16:ff:3f:e5:02:80:90:79:73:4f:ed:
         5a:e3:41:17:2c:25:56:eb:dd:0c:59:db:2d:c0:03:d2:c0:82:
         01:6f:f4:9a:1d:c2:f2:de:e2:aa:cc:ee:9d:02:2a:11:d9:d1:
         c8:eb:56:5f:5e:22:97:70:5f:b9:b6:f0:2c:e7:5f:83:e9:6a:
         7e:2c:f6:e3:a9:1d:d7:08:49:6a:f6:ac:2d:43:71:7a:ad:a2:
         9b:ad:a5:fc:6c:4b:74:a1:c1:74:79:38:4b:06:4c:1c:29:3a:
         23:ac:0a:d1:a1:15:68:96:6e:0e:53:8d:c7:47:a3:80:fd:a7:
         21:53:20:84:42:1c:a9:62:7b:67:a1:0e:72:fb:fd:ee:c5:84:
         78:90:08:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:03:27 2026 by rpki-client