Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft
File:                     mPrK__I6YsGQOx6Vr0DG0INOXjI.mft (raw, json)
Hash identifier:          zmLE3VwykP0BPeQ08be90Uj4e6RrYDJHeFCHQHZaQD4=
Subject key identifier:   5B:35:0C:49:56:6B:34:A4:10:7C:33:79:29:25:7F:AC:3C:A0:7E:88
Authority key identifier: 98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32
Certificate issuer:       /CN=98facafff23a62c1903b1e95af40c6d0834e5e32
Certificate serial:       019FA4BC0B3B8DB60D7E13E9664247ACFEB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft
Manifest number:          4A
Signing time:             Mon 27 Jul 2026 18:00:14 +0000
Manifest this update:     Mon 27 Jul 2026 18:00:14 +0000
Manifest next update:     Tue 28 Jul 2026 18:00:14 +0000
Files and hashes:         1: EXGKHVIo_osI3Gb68ip0jBzAF5U.roa (hash: R34cNQW7ksM11PmBeSLdiBzAeEJM8HIjBSNbskLK9H0=)
                          2: R2VwpfxLGkkZ_BAomobXq01wNg0.roa (hash: Tul1AZ3wqqQ37mlAynAUXK1enEBxW5/PblRblDDJnZ4=)
                          3: SJHy8Z4pgOYa2725cUU-voSbrO0.roa (hash: YQon4VLpwG8xCn9mQJ3+mnWdYaPabTWtSH7TJkq0upI=)
                          4: mPrK__I6YsGQOx6Vr0DG0INOXjI.crl (hash: eMhjPaCQ+WFQy/XUd05Ku359nni4LtM3769g/ICTiFw=)
                          5: nE0kjz4gu6CKpIoLlyITIPbyA4U.roa (hash: voWdCDPQFGs2drY8xamnvDVEzZpGhMgl+be11o+sgAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:bc:0b:3b:8d:b6:0d:7e:13:e9:66:42:47:ac:fe:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98facafff23a62c1903b1e95af40c6d0834e5e32
        Validity
            Not Before: Jul 27 18:00:14 2026 GMT
            Not After : Jul 28 18:00:14 2026 GMT
        Subject: CN=5b350c49566b34a4107c337929257fac3ca07e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:33:fe:e2:52:4e:99:33:f1:c4:24:e1:f2:
                    8c:17:4e:fd:2b:0d:88:aa:31:f2:a1:56:56:25:6d:
                    39:39:9f:63:30:7c:42:33:a8:ac:e5:bd:1a:68:d8:
                    b4:30:93:a4:90:6b:7a:6d:39:ca:3f:74:2a:4d:fd:
                    4f:60:63:04:82:f6:c9:3f:62:0b:9b:1b:6b:3c:d5:
                    50:97:41:66:92:34:28:c7:11:4a:8f:47:86:9f:39:
                    7a:50:a0:17:3b:b8:a0:48:7c:5f:24:81:3e:b1:c0:
                    97:33:35:e9:57:11:35:33:e5:b5:b7:3f:e6:ff:25:
                    3c:32:da:f0:9a:8b:50:89:00:19:3a:0d:a1:d4:d4:
                    3e:0e:fc:e9:7f:71:ae:8d:3b:34:ff:a1:65:9c:12:
                    9f:e0:48:2b:bb:4a:a9:01:04:07:0f:f1:36:c9:ce:
                    5c:52:ee:53:fa:a5:7d:23:8b:80:cb:ce:d4:41:50:
                    72:c0:71:15:5e:16:23:23:b9:5f:fc:37:c8:cf:db:
                    6b:dd:b4:0e:b1:bc:13:12:55:38:93:ef:05:60:a4:
                    46:f0:b8:fd:3a:ff:f6:f9:da:83:09:8e:08:90:ba:
                    36:eb:62:24:58:84:cf:e3:b0:1d:b2:d9:87:aa:fb:
                    78:ac:6a:a0:a3:f4:ce:0c:73:31:07:79:51:de:95:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:35:0C:49:56:6B:34:A4:10:7C:33:79:29:25:7F:AC:3C:A0:7E:88
            X509v3 Authority Key Identifier:
                keyid:98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:80:b1:ba:15:1c:dc:b1:ce:ef:92:b3:ca:9d:3b:c3:d3:
         09:a7:d5:af:87:49:4e:5d:fc:4c:74:e3:6f:ef:de:cd:cb:7b:
         a9:82:ed:df:00:20:88:33:b0:03:1f:cd:f3:89:1f:9b:5b:e1:
         3d:30:56:ce:94:3f:8a:d5:d3:fa:5f:9f:9f:13:4c:6a:e4:22:
         bc:85:19:c2:7b:19:26:62:cd:a5:31:e3:db:5b:2e:f7:b6:fd:
         e6:34:0a:b5:33:b5:8c:74:0f:48:54:a0:a9:be:4c:2c:fd:6c:
         fa:fc:fc:ef:44:a6:cb:a9:96:7a:4a:46:10:54:2c:a5:32:e5:
         9c:5a:9f:8d:79:b4:7e:89:2d:ee:1c:73:63:77:0a:9b:e6:af:
         36:08:78:81:13:cd:45:1e:a5:3a:0b:87:e5:1e:cd:a6:15:c5:
         40:8d:b8:ae:4e:db:06:a2:0b:15:c8:88:f6:43:5f:76:ad:aa:
         fb:0c:16:4c:bd:27:92:f8:f3:eb:68:67:bb:a5:ac:21:4a:3a:
         41:d1:4d:21:cf:e1:dc:c3:76:90:4e:cf:40:02:9a:ec:0b:6e:
         87:1a:34:1d:53:ac:36:79:64:5f:d4:53:c2:6d:0f:bc:db:cf:
         9b:d0:d1:c6:5b:64:c5:a1:06:30:15:75:5b:39:43:a2:4c:30:
         15:ec:e5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:27:40 2026 by rpki-client