Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File:                     4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier:          0Vf58bUFPKHmEpfGVBM6fWmn6qP08sM/NUtJamIDRFM=
Subject key identifier:   1A:29:DC:78:D6:36:00:1C:46:87:F7:54:26:D7:65:DA:B7:28:1D:38
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer:       /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial:       019FFE6DF1019DC17F74CE7811F724327FF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number:          0E2C
Signing time:             Fri 14 Aug 2026 04:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 04:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 04:00:45 +0000
Files and hashes:         1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: K396DC1uawOifr9YSxQsW4QKZmb5CWfDsIdzmixgqKM=)
                          2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fe:6d:f1:01:9d:c1:7f:74:ce:78:11:f7:24:32:7f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
        Validity
            Not Before: Aug 14 04:00:45 2026 GMT
            Not After : Aug 15 04:00:45 2026 GMT
        Subject: CN=1a29dc78d636001c4687f75426d765dab7281d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:8e:c0:9e:22:5f:80:1a:a5:76:62:f7:f8:
                    29:45:6b:25:49:78:8b:6d:12:f1:32:bc:79:23:a7:
                    81:c2:25:76:72:af:cd:10:2b:8b:f4:95:06:f5:88:
                    0e:d7:4e:34:db:38:c1:6b:e2:ca:9b:58:f8:ec:6b:
                    8a:a6:88:83:16:f2:7a:b3:3d:85:8b:87:08:b8:d7:
                    40:2d:2d:dc:97:81:7f:0b:1c:a4:fb:7a:e7:81:2f:
                    c3:24:d1:2e:4f:36:52:59:9b:2b:2e:91:d7:d0:8c:
                    02:ff:91:f4:1d:9e:b1:ea:9e:86:f8:f0:7f:3e:27:
                    1e:15:7f:6b:48:63:4e:f1:6c:62:12:50:60:f1:fb:
                    18:d3:d4:cd:6d:83:19:7d:4e:76:23:d2:61:7f:ef:
                    80:c1:ff:ec:8a:ef:d3:fb:0a:c8:92:cc:0f:31:47:
                    4b:2f:99:bb:23:b9:74:2a:8b:c9:81:91:29:cc:8c:
                    b4:96:79:68:98:19:bc:df:46:30:66:03:7a:d6:fb:
                    91:6a:f2:16:68:54:0a:da:70:4b:cb:4f:68:79:4a:
                    6e:b4:83:fa:41:4d:64:9c:2f:b2:7f:b8:a0:a7:b8:
                    33:87:08:6e:b9:a4:60:17:df:1b:bd:4d:14:d5:80:
                    2b:a0:82:3f:95:0f:07:8f:de:03:f7:ad:03:70:a5:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:29:DC:78:D6:36:00:1C:46:87:F7:54:26:D7:65:DA:B7:28:1D:38
            X509v3 Authority Key Identifier:
                keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5f:b4:de:ad:8a:de:27:49:4d:1e:e4:c5:bb:79:30:8e:d2:
         f6:78:74:03:64:3e:37:cb:ba:c1:b8:01:9e:f2:ce:a9:b9:6e:
         91:20:96:f3:35:66:ae:09:3d:ea:92:0e:5c:9e:94:7b:8a:26:
         a6:67:7a:f2:74:78:17:6a:62:5d:5c:43:84:1c:a4:4b:5f:a4:
         33:1a:e6:a5:23:2b:4c:82:fc:93:fd:53:b6:54:4f:07:66:35:
         c6:4e:8a:85:4e:e0:d0:02:e0:a2:a6:e0:c6:14:42:c8:68:e5:
         fd:cb:2b:26:8e:ef:07:c5:83:95:19:fc:4b:f5:94:62:41:86:
         d7:48:58:fc:f9:7a:3f:68:05:8b:48:e2:88:75:b9:6c:39:4a:
         da:d3:ad:97:80:c6:75:b1:c0:9c:c6:46:3d:d9:f3:7d:c6:f3:
         20:8d:b5:f5:37:8c:8f:4e:31:e3:8b:5f:8e:fa:64:5d:69:b6:
         d3:58:8b:4a:d9:07:8f:63:bd:db:20:a8:40:9c:7d:50:1f:28:
         3c:69:a7:ad:ea:f3:1b:49:3c:55:94:0e:e8:aa:3f:30:49:b7:
         a6:c6:d0:09:cb:c0:ab:28:42:59:81:e6:5f:2c:0d:9c:c7:62:
         42:9b:bd:f1:96:3c:ec:97:cf:bb:8e:4c:69:1f:92:e4:17:89:
         9b:9d:4d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:09:57 2026 by rpki-client