Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
File:                     4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json)
Hash identifier:          IVRrsagGtUXMx9EE27rf3Ouwkyw5W4JNy0Gw1Zc107U=
Subject key identifier:   E0:15:4D:04:DF:59:8A:F2:6B:A0:74:43:85:72:6F:39:11:8D:DA:83
Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
Certificate issuer:       /CN=e0c2866398142a574ba47b197d71791b5e23af7c
Certificate serial:       019F18D6925EF9B7B7BEC379B59E493598C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
Manifest number:          1986
Signing time:             Tue 30 Jun 2026 14:02:22 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:22 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:22 +0000
Files and hashes:         1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: HVG85kFZkW8HQ0qHJNhFXurOfG78lq//kEw/LdJSnFk=)
                          2: QH02WxuzjvjRn51oLBiPvrujLa4.roa (hash: IQDzIfbbVCDUYyTY4gs2wjyKwyhZrH0/tzgcEn65G5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:92:5e:f9:b7:b7:be:c3:79:b5:9e:49:35:98:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c
        Validity
            Not Before: Jun 30 14:02:22 2026 GMT
            Not After : Jul  1 14:02:22 2026 GMT
        Subject: CN=e0154d04df598af26ba0744385726f39118dda83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:a0:fc:58:ea:6f:48:5a:0f:ad:ee:02:32:
                    63:c0:66:93:3d:c0:58:dc:d8:86:fb:d7:a3:fd:52:
                    a4:e7:a8:e0:11:72:90:54:3b:2c:39:6e:00:b3:ff:
                    a4:a4:cf:1f:a5:18:e3:8c:36:3b:08:d8:b2:e1:ec:
                    d9:a6:6e:83:65:aa:f6:a2:a8:a7:97:86:d2:8c:d6:
                    ef:28:c8:e5:79:33:92:ef:b5:59:64:c2:ee:99:56:
                    1d:43:a9:10:07:e5:8c:62:ef:00:e6:75:86:da:01:
                    9c:26:09:fc:61:2f:b7:4e:0c:3b:a7:54:31:d2:c7:
                    91:4a:6c:e9:ac:4d:1d:a0:40:e4:41:0d:50:b1:b3:
                    3a:30:84:81:05:7f:cc:27:3d:74:1e:44:83:40:11:
                    f3:76:8d:98:dd:f1:2a:be:8f:c6:ce:3a:89:50:7d:
                    c5:2d:14:d0:93:1b:61:51:82:6e:71:d0:c7:c0:5b:
                    eb:0d:75:35:a2:45:ae:92:ab:9c:c1:cd:17:d8:be:
                    7b:ce:6a:c8:23:9d:be:66:c7:0a:56:83:90:ff:1a:
                    99:0c:77:ee:23:6d:7e:ff:29:c3:4e:21:bc:03:da:
                    5f:3f:3a:c8:33:61:b6:20:59:bd:4f:d6:ff:4f:95:
                    af:ee:bd:b9:46:d7:8d:5d:03:98:59:fb:18:96:0a:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:15:4D:04:DF:59:8A:F2:6B:A0:74:43:85:72:6F:39:11:8D:DA:83
            X509v3 Authority Key Identifier:
                keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2a:79:6a:c5:25:38:e8:3d:1e:7d:43:03:fe:38:60:ae:fc:
         1d:69:60:4f:57:ef:4f:97:95:d9:18:42:5a:79:e8:46:f7:51:
         66:33:00:47:37:d4:f8:b1:0f:85:f3:33:36:f6:e3:bb:4e:36:
         80:b0:e7:47:dd:26:1f:7b:40:09:1f:54:23:3f:40:4a:34:17:
         3f:bb:11:5c:7d:a1:3f:1e:82:60:24:64:1b:85:43:85:40:14:
         a6:54:bf:b7:f0:c3:55:9c:6a:0a:d9:25:ca:b2:26:76:c5:62:
         f9:f8:c3:36:22:2f:89:3d:cc:d1:81:62:73:19:c4:50:64:a3:
         19:6b:e2:e7:f9:83:1e:ed:73:6a:5e:c0:de:08:bc:56:a9:ab:
         e1:ea:18:dc:c3:be:83:47:7f:30:e8:c5:f1:42:4a:9c:68:e7:
         2b:e6:fe:bf:d9:1b:13:e9:85:f3:48:bf:9b:5a:c0:36:18:6f:
         f4:19:d3:74:20:55:28:9f:60:23:c2:32:3d:57:d4:3a:6c:3f:
         06:a5:e1:94:92:ce:70:21:bc:2a:dd:de:c8:dc:1d:6f:92:20:
         2f:d0:b8:97:f8:69:73:cd:0c:31:7a:6a:53:2a:11:d1:87:93:
         8c:0c:ec:49:c3:44:11:03:00:88:a1:66:5c:d9:76:49:6a:b0:
         e8:ad:8f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:29 2026 by rpki-client