Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
File:                     4WgoY-mYep64ZougfJbJmhst_mk.mft (raw, json)
Hash identifier:          TWLSJeem9Jk847PkbrTiWB5Ebo8fQ8VUGCmO/V/I5r4=
Subject key identifier:   A3:D2:A6:1B:B9:B4:DB:A5:C1:54:10:08:8D:6A:69:51:FB:64:D1:FB
Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
Certificate issuer:       /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Certificate serial:       019F374EBE5719298A68F80E54D2E3D8B65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
Manifest number:          030A
Signing time:             Mon 06 Jul 2026 12:02:15 +0000
Manifest this update:     Mon 06 Jul 2026 12:02:15 +0000
Manifest next update:     Tue 07 Jul 2026 12:02:15 +0000
Files and hashes:         1: 4WgoY-mYep64ZougfJbJmhst_mk.crl (hash: 0zEs6bi0WRWA2fRaVKL5vEZnGYI7G6zQCZu9B65HrgY=)
                          2: Ac2bylIr7B437ec52nmYNkxcBLU.roa (hash: NVzCCl4oqQBqLlnzk4NHLtjdOZIYGTwFiCs0i6US8YQ=)
                          3: VurYQADeNAyQZfVqHtE93Y07CDc.roa (hash: zo7Q7XfiMqpPBNsTQ58E9qm/cSZ4esMUjH52zOEyenA=)
                          4: ey-McRgW79AZU_fzpE-27yI2jAk.roa (hash: pO+sInd8rxx8H+MS6Ps1T/UlLYjOIIjg8OASDn/RsGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 12:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:4e:be:57:19:29:8a:68:f8:0e:54:d2:e3:d8:b6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
        Validity
            Not Before: Jul  6 12:02:15 2026 GMT
            Not After : Jul  7 12:02:15 2026 GMT
        Subject: CN=a3d2a61bb9b4dba5c15410088d6a6951fb64d1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:14:f4:80:e4:45:99:64:de:9f:bf:20:d3:
                    85:86:aa:a9:b3:29:b7:5d:62:04:14:ac:fb:4c:d2:
                    33:84:6c:0c:b2:3f:dd:ba:4f:d6:2c:1a:60:34:19:
                    0e:9c:9c:50:92:2a:54:a8:ea:26:2a:1e:9a:7d:ab:
                    6f:cf:37:6f:44:cc:90:84:d7:2e:56:88:2f:a7:e9:
                    28:26:09:e1:19:c4:23:6c:21:0d:b2:69:e5:4a:fb:
                    75:f0:be:2b:79:7a:b8:a1:39:3c:29:a2:bb:5b:dc:
                    99:ba:ed:0f:eb:4d:e2:48:b9:6f:a5:df:ca:68:bc:
                    47:1d:0b:b1:3a:7d:52:f0:42:c1:a3:5b:3b:6e:94:
                    3f:0a:cd:77:64:0b:e8:2a:fc:f1:5f:aa:1c:fa:e9:
                    33:6d:0f:82:25:66:86:c6:1b:f3:6c:2d:2e:b2:7c:
                    d1:02:e7:f8:68:af:23:f5:57:16:8d:7b:05:b5:16:
                    b5:a4:d4:9d:0f:be:32:45:88:e6:75:e7:92:66:70:
                    b0:eb:d5:4e:c9:7f:72:00:8e:bb:1a:69:52:c0:4f:
                    c8:73:45:0b:fc:fa:c7:d8:cc:bc:b1:95:98:c5:d7:
                    18:c2:9b:79:de:d7:d7:61:3f:95:d3:84:67:9b:e8:
                    cf:41:ee:e6:a7:f9:f0:f0:10:be:5c:ef:f4:0c:1e:
                    ae:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D2:A6:1B:B9:B4:DB:A5:C1:54:10:08:8D:6A:69:51:FB:64:D1:FB
            X509v3 Authority Key Identifier:
                keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b4:f3:1f:e3:d9:06:3c:a1:ab:ec:9e:71:49:94:29:ce:e5:
         9a:ea:b7:52:e1:9d:63:7e:4c:0d:3a:10:24:24:b6:31:d4:96:
         1d:fd:df:b7:b3:be:71:57:c1:ca:c7:c7:78:58:f4:51:2a:87:
         66:6b:50:8f:17:b7:58:57:33:aa:75:9f:74:32:46:43:99:5f:
         60:0a:9d:92:3b:da:10:c4:34:39:e6:4b:7f:62:af:07:7c:e9:
         03:b1:86:67:a1:0c:ab:93:e5:21:e6:25:24:8e:91:1d:19:3e:
         c6:44:f2:3d:6e:82:b0:1f:58:57:02:ac:f2:0a:d2:81:39:7f:
         1d:05:c2:39:af:f6:e8:a8:c2:b8:e2:74:2e:55:e2:f0:bb:43:
         e7:76:7f:5a:f3:8e:8d:04:af:27:5c:b6:62:65:ac:b1:2e:04:
         28:37:6b:a1:87:2a:e9:63:86:d7:e3:2e:1f:ae:c0:75:a4:e6:
         6b:99:43:ce:b1:8b:33:1c:89:af:92:fd:9f:0f:1d:90:55:f8:
         22:b5:65:80:60:3a:a3:c5:68:74:e8:15:01:da:45:f4:97:75:
         66:19:66:d3:c8:07:20:fc:92:e8:ed:14:2f:a0:97:57:7e:e3:
         2b:a3:96:76:27:1c:8c:b3:b1:6d:5e:15:8f:e3:fa:85:dd:05:
         15:6c:de:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:18:14 2026 by rpki-client