Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File:                     4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier:          ObztDOiofxmnl+oO6BavC1/AE6ZQjYluWtlG4UelsM4=
Subject key identifier:   60:4E:A1:31:04:A3:0D:85:4C:41:F1:29:55:E1:F5:BA:DF:ED:30:9F
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer:       /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial:       01A0024ACC7305047A35A16AFDA67D69B290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number:          16BA
Signing time:             Fri 14 Aug 2026 22:00:51 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:51 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:51 +0000
Files and hashes:         1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: J70o6fQRY3TekwsOPFCa1gVW4e5V4KVmIO9kI8a48ak=)
                          2: fJgYZ4ej2JhPoX-SwafXWVTllE4.roa (hash: oBfl5sq0NvI5C3NZdb3K0ESRoAncOv9TLGKLm+7rmlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:cc:73:05:04:7a:35:a1:6a:fd:a6:7d:69:b2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
        Validity
            Not Before: Aug 14 22:00:51 2026 GMT
            Not After : Aug 15 22:00:51 2026 GMT
        Subject: CN=604ea13104a30d854c41f12955e1f5badfed309f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:be:2e:33:c6:e1:51:68:48:b5:8f:a7:34:
                    59:9a:ef:28:fa:57:6b:53:f9:e0:f9:63:96:8b:eb:
                    03:fc:aa:94:e3:33:75:08:21:55:e7:49:ae:f1:83:
                    2f:61:30:0e:7b:7b:a9:41:d1:5f:73:68:ef:27:a9:
                    2c:8c:99:cd:00:f2:ec:49:1d:8d:c5:c3:2c:23:3d:
                    ec:25:c0:f5:11:cd:13:e4:de:89:80:21:da:50:c0:
                    fe:56:07:c5:63:e4:62:96:ec:ca:8d:06:b5:22:51:
                    ec:fb:38:94:93:37:c8:f3:c4:c0:33:d9:a6:e7:a2:
                    b0:7d:c1:c6:12:59:e3:3c:eb:f5:10:95:25:26:95:
                    58:3d:40:cd:d2:03:a6:41:7e:5c:e5:50:7c:65:7a:
                    ef:7a:e5:db:0c:57:f7:56:65:79:58:b3:91:32:a2:
                    e2:5b:59:2a:5f:c4:38:3e:25:15:86:5c:c8:5c:c7:
                    e2:ed:44:fb:00:17:db:d8:76:e9:a0:bd:73:a2:2b:
                    f7:23:b6:5c:18:08:05:81:a4:1a:a2:f5:4c:92:51:
                    9d:e5:cc:82:1e:9a:07:44:04:41:83:b0:6b:0a:64:
                    b5:49:a3:7b:b3:34:3e:e1:bd:a8:b9:44:be:d4:24:
                    5e:8b:ad:18:28:8e:19:21:c1:49:0c:da:81:57:0d:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4E:A1:31:04:A3:0D:85:4C:41:F1:29:55:E1:F5:BA:DF:ED:30:9F
            X509v3 Authority Key Identifier:
                keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ce:e8:c0:99:25:84:63:2b:93:ef:47:69:43:bf:df:70:fb:
         ea:c6:d5:21:ea:67:fc:90:f3:e2:42:55:b4:33:8d:2f:09:e8:
         95:70:d6:e7:0a:15:ef:56:97:7c:ac:66:8a:b5:a7:5b:aa:68:
         38:2f:95:d2:16:52:1f:5a:fc:fc:ba:6a:bd:e2:b5:05:3d:04:
         c0:72:32:61:5b:00:45:95:07:fd:9a:cd:18:2b:36:05:6f:79:
         0c:eb:ca:52:81:d2:5d:d5:b9:ba:54:50:c0:61:aa:34:bd:f2:
         df:72:ea:92:ff:63:3e:e5:b3:08:2c:95:27:17:aa:99:1c:95:
         26:f0:a9:47:6e:ec:60:73:51:e3:5b:82:6a:e9:4a:7d:da:4c:
         c4:ea:cd:ec:c7:0c:57:9e:07:0d:d6:c0:3f:c6:13:88:40:8d:
         76:50:c3:98:ed:68:4d:cb:74:f9:23:19:85:e0:4d:49:8e:78:
         14:b6:f8:db:d7:81:3b:74:10:78:7f:78:4f:09:8f:55:f3:5c:
         36:bf:3c:07:be:4a:58:bf:ae:be:97:4c:a8:41:3e:ab:82:c8:
         49:c9:b0:80:fe:53:f4:40:79:22:b9:b0:9e:ce:0e:ab:e0:40:
         af:48:fd:ea:6e:ae:1e:d0:62:e0:45:e4:bf:ce:3e:fe:49:1a:
         eb:a4:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:38 2026 by rpki-client