Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File:                     4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier:          ZBoN97XpbCoSIeflD0A2BvYeJBOuIGlF5aOZl+6fKZc=
Subject key identifier:   60:2F:B6:80:0E:2A:27:54:02:45:5B:EA:C8:5E:6D:F4:4C:9F:D0:A8
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer:       /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial:       019F18D6735B64E6C9B3E409205AFCB83E77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number:          151F
Signing time:             Tue 30 Jun 2026 14:02:14 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:14 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:14 +0000
Files and hashes:         1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: b4e1cibzuoZvNjiwqkMrUNdP+TsqFHaLRI3xC4/5wA0=)
                          2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:73:5b:64:e6:c9:b3:e4:09:20:5a:fc:b8:3e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
        Validity
            Not Before: Jun 30 14:02:14 2026 GMT
            Not After : Jul  1 14:02:14 2026 GMT
        Subject: CN=602fb6800e2a275402455beac85e6df44c9fd0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:e1:f0:8e:88:5e:9c:95:33:b2:62:b9:45:
                    a5:c0:77:2e:1e:07:d6:0a:34:59:19:eb:f5:f5:9f:
                    95:10:4d:79:d3:78:f5:e9:6c:66:8a:8b:43:9b:1c:
                    5e:cb:4e:f8:bb:8f:d0:69:1d:87:0f:70:fb:0c:bd:
                    a8:3d:97:cb:a3:e9:4d:90:e7:fa:c4:e8:65:76:f2:
                    18:3a:97:63:81:c5:4e:1a:88:c9:5d:20:bc:5c:2c:
                    5d:1a:c7:f6:8e:ce:20:40:04:7c:f9:1d:71:95:c7:
                    c1:fa:8f:5a:dc:87:2b:9b:66:ba:56:21:18:71:27:
                    76:06:11:ea:e8:bd:9c:78:20:f1:43:fd:d0:f7:fb:
                    55:f4:54:b5:a7:35:4c:bc:c7:17:a4:ba:86:b3:f4:
                    aa:a5:fe:e3:ce:c2:f0:5a:2f:62:81:41:4f:09:d4:
                    36:8e:09:1b:03:6a:02:fd:83:60:03:0e:fb:c5:91:
                    cf:5f:0e:67:48:84:42:26:8d:01:79:c1:d4:7f:f1:
                    da:7f:9a:d9:c4:f2:e1:c3:61:88:ca:17:ae:e8:a1:
                    40:8c:43:74:40:e7:96:c4:ea:e5:0f:8d:4b:d1:68:
                    a0:6f:44:c2:a3:00:4f:77:3a:62:14:18:d8:8c:dc:
                    18:17:42:2a:1d:27:b2:cf:d4:b9:a0:13:00:29:8f:
                    1b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2F:B6:80:0E:2A:27:54:02:45:5B:EA:C8:5E:6D:F4:4C:9F:D0:A8
            X509v3 Authority Key Identifier:
                keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:7c:38:ae:9a:da:00:ba:a0:57:86:5f:ec:a0:2b:6b:83:59:
         72:32:d8:61:54:41:f6:93:4c:d1:b8:f1:0f:8b:e4:42:73:7f:
         72:a6:c9:de:a9:ce:b8:9f:3f:08:c2:35:78:fa:8b:10:39:6d:
         5b:05:04:fc:41:c7:35:e9:05:22:af:9d:9b:d8:a6:b2:db:b3:
         ae:97:76:60:2e:e2:a9:67:12:21:cf:c4:2b:42:76:9e:c0:15:
         c3:9c:ef:7c:e4:51:72:53:f7:50:77:64:0d:9f:41:16:83:95:
         34:b8:24:9a:5f:d2:e7:75:44:a4:34:35:d8:0d:ee:a4:e5:57:
         8f:9f:bb:4a:ec:88:ba:7d:3c:01:06:7c:40:24:b6:c4:a5:56:
         a6:5b:82:c6:ec:7a:91:b2:42:e4:94:50:f9:bb:90:05:a7:5b:
         74:4c:19:19:3d:94:41:7e:a6:a2:d2:35:4f:61:6e:b4:d0:dd:
         c9:bc:6c:2c:c1:88:51:07:6f:b4:56:fe:c8:78:83:5c:ac:d4:
         8d:95:6d:cb:57:8a:00:9c:24:28:48:7b:74:29:bf:9a:4e:48:
         aa:3f:65:e2:33:2f:fe:c7:7d:58:18:bf:24:e3:65:06:1f:c0:
         79:31:eb:9c:82:d9:0a:d8:a0:19:8f:e7:41:65:44:f2:b7:c4:
         d6:77:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:21 2026 by rpki-client