Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File:                     4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier:          vwnb0led55CvLUBWYmAvIS5IC0eK/msVTaqdshJu/B0=
Subject key identifier:   C1:98:20:5C:2E:2F:60:3D:D4:00:FD:20:87:E0:03:E9:4F:82:05:82
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer:       /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial:       019F17F9BBE164602D7483938ADB0D5C73B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number:          0C0D
Signing time:             Tue 30 Jun 2026 10:01:10 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:10 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:10 +0000
Files and hashes:         1: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: KVe3p/hOnm/SXo6fTtqSAeXtXYlLkxK+eSQjfcacS/A=)
                          2: 5F_Lv04RXNd_Y46Aej2XB7OXRCs.roa (hash: OFOrOgL1BwCDJs6vNTJlxJXJgyRTHA3y/UE7TO8d/LM=)
                          3: jn-Hv0IYlCEKrmAbyK_6k7lqISQ.roa (hash: J+qsyRuhmSWKW099fqXxFsiGbbSUDzkgcakOMIwreHQ=)
                          4: oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa (hash: sJuR4lvRXMBU3fcQ7PumT3oOEz1g58/Vsv/QWac8Orc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:bb:e1:64:60:2d:74:83:93:8a:db:0d:5c:73:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
        Validity
            Not Before: Jun 30 10:01:10 2026 GMT
            Not After : Jul  1 10:01:10 2026 GMT
        Subject: CN=c198205c2e2f603dd400fd2087e003e94f820582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8c:d3:0b:ba:09:51:26:d8:74:37:54:67:88:
                    cf:3a:81:dc:9f:c4:52:2f:3f:65:90:66:7e:4d:d7:
                    e5:cf:dc:59:39:14:7a:ee:1a:eb:f7:1a:a4:0c:05:
                    da:ab:68:4e:fd:43:ae:80:01:2a:52:1d:a2:96:6a:
                    cc:b2:31:59:63:4f:ad:db:42:da:f3:70:45:52:ab:
                    66:6f:07:4c:ea:50:6b:b1:1b:53:27:f6:cd:f8:c3:
                    bb:cf:c9:d7:8a:10:c5:32:20:89:62:60:f0:3d:14:
                    52:5b:5f:9b:ce:35:5b:cf:c5:d6:bd:79:b6:01:0a:
                    b1:a1:6e:ed:72:94:5f:6e:1b:78:6e:61:5f:59:aa:
                    17:f5:08:83:74:53:3d:89:f7:00:c7:2b:44:a6:cb:
                    4a:e8:5b:44:b8:dd:97:38:33:75:45:12:cd:97:2c:
                    a1:dc:6c:b8:26:51:4b:55:90:0d:7a:62:d3:79:a4:
                    bd:00:97:30:2a:42:4f:43:33:ba:52:81:c2:39:4f:
                    a5:74:30:84:06:4e:ae:86:06:70:9e:cf:a1:e3:dc:
                    0a:46:e4:7c:4b:13:91:f0:ed:a3:c8:20:43:93:ae:
                    39:c4:a6:2e:98:27:e9:71:e5:94:d8:55:9b:6b:90:
                    85:90:08:75:c9:ef:0a:1c:eb:74:95:27:83:12:df:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:98:20:5C:2E:2F:60:3D:D4:00:FD:20:87:E0:03:E9:4F:82:05:82
            X509v3 Authority Key Identifier:
                keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d3:8a:a8:53:81:f7:55:0e:f0:4e:7e:9d:9c:68:ad:cb:79:
         81:b8:6c:aa:01:7d:b6:92:ed:ab:89:b9:0b:32:8b:f7:57:f1:
         c3:47:86:d2:69:ca:0b:11:c6:10:2d:26:c4:d5:d9:65:c5:d9:
         1c:c1:a0:61:c7:27:26:0a:9c:80:37:92:dc:1a:f4:3b:d9:ae:
         b7:75:ba:d9:67:9d:ec:d0:61:ce:78:8e:2a:c1:c8:16:64:cf:
         70:e3:a1:2a:5e:f1:de:6c:24:eb:d2:2e:80:0a:b3:72:8b:82:
         c2:40:bd:97:0a:84:0c:fd:c8:3b:91:c9:a8:bd:90:0e:2e:6f:
         40:ef:62:31:5e:2d:35:a6:b1:63:a0:ac:98:62:83:f5:31:b9:
         a4:49:df:49:31:3c:2a:e7:c7:39:00:9b:a6:21:f9:ef:b0:f1:
         f2:66:4c:33:04:eb:c2:10:2b:e2:08:af:1a:87:68:ff:2b:bf:
         8a:03:43:4b:9d:e3:7f:23:9b:52:d8:51:77:84:62:73:0f:89:
         4a:3d:d8:fd:2d:8a:02:94:e6:a1:de:6c:c2:78:2c:d7:9d:f0:
         4e:c4:09:51:a8:06:82:e0:b9:c1:76:b7:db:ea:6e:af:28:63:
         b5:57:2e:2e:f8:36:7c:1a:ed:e3:7b:39:85:96:34:db:be:05:
         46:a2:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:08 2026 by rpki-client