Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File:                     r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier:          rUY24RsfMbPPDjkeqVPxkIYfBHfKfJdXHbXfQ5pJIvk=
Subject key identifier:   EB:82:35:72:EF:1F:60:54:B3:44:7C:2E:AC:AB:52:C5:0E:11:82:8D
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer:       /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial:       019F19B20A42C556E9B82AEB413899081262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number:          0E00
Signing time:             Tue 30 Jun 2026 18:02:05 +0000
Manifest this update:     Tue 30 Jun 2026 18:02:05 +0000
Manifest next update:     Wed 01 Jul 2026 18:02:05 +0000
Files and hashes:         1: GsRkXOSW1fdFu3DPwvlbZ7bJfrs.roa (hash: LrZFy74UOAGrG2L260gD+OSmEU83mjEYLFF/UUa8s7U=)
                          2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: tISPdBE8tm/6JoySeciqESNC+Ag1roxLInPquWUofAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 18:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b2:0a:42:c5:56:e9:b8:2a:eb:41:38:99:08:12:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
        Validity
            Not Before: Jun 30 18:02:05 2026 GMT
            Not After : Jul  1 18:02:05 2026 GMT
        Subject: CN=eb823572ef1f6054b3447c2eacab52c50e11828d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:05:1e:40:4e:65:01:6f:8b:a7:61:df:8b:
                    a6:16:b7:9b:8b:42:8b:9b:a1:e1:0b:a1:d6:35:71:
                    32:9f:ba:35:99:70:1e:4b:84:82:1d:ce:75:e2:ba:
                    6e:bb:97:de:fc:0e:47:0f:6c:83:d3:2e:b7:a3:b9:
                    c6:a1:d6:bd:41:14:b7:8a:52:37:dc:b9:32:44:0d:
                    7d:45:e5:ec:97:1e:7c:ac:f9:a0:20:79:f4:b6:28:
                    52:22:d5:cd:26:de:52:66:c0:f4:34:8e:c9:b8:05:
                    d1:67:a0:e4:bb:5c:c1:04:04:df:27:37:f7:b5:cb:
                    59:ce:73:f9:94:e6:71:01:c2:0c:5a:1e:e5:75:59:
                    3e:1d:95:46:1a:45:76:99:85:77:8b:ce:b9:33:0c:
                    e5:84:4a:06:0c:49:37:fd:22:11:97:08:e2:75:22:
                    d3:a3:b4:70:75:07:05:82:10:24:19:48:08:df:27:
                    aa:26:68:fc:30:a5:c7:09:30:7b:80:cd:86:b9:c9:
                    fb:2c:bd:01:d4:7d:74:4e:34:05:57:0b:5b:ec:e5:
                    22:17:be:66:d7:1b:c6:eb:f5:93:04:ab:a8:5d:4e:
                    de:b3:5e:1c:13:ee:3d:1b:f1:9a:3a:7d:63:0c:c8:
                    df:a4:c1:47:af:65:c8:51:cd:6f:8f:d1:9b:e9:85:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:82:35:72:EF:1F:60:54:B3:44:7C:2E:AC:AB:52:C5:0E:11:82:8D
            X509v3 Authority Key Identifier:
                keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:83:fd:ef:a0:40:1b:89:45:ce:b0:39:9e:ba:bb:c5:4e:23:
         7c:fe:14:c9:8a:b4:6a:47:03:70:97:f1:ae:52:ce:a7:1e:38:
         af:3e:ad:d2:d3:da:8c:e5:4e:8f:b8:bd:25:b4:80:c2:61:70:
         64:cd:ba:13:0e:85:33:eb:e1:87:16:03:eb:92:a7:a4:c8:e3:
         fa:8a:c2:00:22:c4:b0:54:b4:e8:ee:fd:60:f5:c5:ac:b8:74:
         22:25:d8:d0:02:f4:37:10:93:fa:4e:2d:f1:9f:f5:83:0d:3b:
         b7:0f:e3:c7:f0:cd:66:2c:7c:e5:b1:6e:bf:53:ad:11:13:31:
         fa:f5:5d:82:98:73:a9:ae:eb:45:89:e9:6d:75:9b:8b:eb:bf:
         c3:6d:9b:6a:4a:09:05:f9:d1:51:be:fa:43:67:bd:ff:5a:f4:
         51:cb:39:0c:d2:5a:af:09:25:64:26:fe:8d:5c:b2:20:d4:ed:
         27:03:7d:bb:e8:64:b0:52:cd:7a:9b:a9:2d:80:8f:4d:99:0e:
         18:9a:11:bb:a2:d0:93:00:9f:4e:0c:34:4e:61:cf:2f:14:54:
         d5:75:70:87:1b:2f:54:c4:6d:e4:31:e4:23:4f:12:48:ca:62:
         e1:08:2e:ba:43:e5:6c:1c:48:13:cb:13:14:e4:c9:05:a5:d8:
         35:e1:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:18:22 2026 by rpki-client