Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
File:                     4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft (raw, json)
Hash identifier:          fTwo026pxztb0ROK41ZwoxybXy3JYJvN/dBTdWVxkrY=
Subject key identifier:   3D:51:9E:50:22:3B:23:30:2E:D5:58:CA:55:3F:64:EF:52:B1:3D:B4
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Certificate issuer:       /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial:       019FA071C83BA1E3B28A3167B45BBDC775A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
Manifest number:          0FF4
Signing time:             Sun 26 Jul 2026 22:00:39 +0000
Manifest this update:     Sun 26 Jul 2026 22:00:39 +0000
Manifest next update:     Mon 27 Jul 2026 22:00:39 +0000
Files and hashes:         1: 4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl (hash: 88a6X5ccPskJkTNY/9mDi5Hd7DGLPTn7LhQYe1+ZeJs=)
                          2: GG5Z9bcgRhj5bvdTmqMJRrOoL1M.roa (hash: YTbCU6GzTrIzftbZbD0fHbZANynvTnyxCIyn5sAM1mc=)
                          3: GgOfbd9F5KPJoYLhExG-OXyRwK4.roa (hash: Av0WKgdWyMP5jVBTfHweW1CBduaCDbaswF0VMggKgCk=)
                          4: hYLRUg0SQqMstMmusnhckxfWhuY.roa (hash: 1x1ITik47KH9EPZ8bGLZz5XWRPVBO6Cz1LvH0CdcCtM=)
                          5: vtwUYAYY8HgSzf0nS8zvrbl0txg.roa (hash: J5aRxIaRZQn03q+9SRxqwbVkAXCYWQNCOSEx8+r+upI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:71:c8:3b:a1:e3:b2:8a:31:67:b4:5b:bd:c7:75:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
        Validity
            Not Before: Jul 26 22:00:39 2026 GMT
            Not After : Jul 27 22:00:39 2026 GMT
        Subject: CN=3d519e50223b23302ed558ca553f64ef52b13db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:e1:04:37:e3:cc:b6:57:a0:c6:68:e1:a4:
                    f3:22:e8:d8:60:f7:fe:d3:63:d0:a1:74:10:35:e3:
                    7c:3d:80:49:d1:60:46:7d:69:5f:2f:fd:d1:fc:c9:
                    8a:35:6e:4d:9a:ec:5b:53:f7:b9:91:10:51:0e:d4:
                    67:7e:4d:37:f5:7d:52:0e:5a:d4:30:c2:51:64:5c:
                    99:cc:24:42:51:0a:cc:d1:9e:1b:ee:47:2d:a9:c8:
                    25:57:e6:d5:6a:a4:31:8f:ba:57:b4:ff:90:d6:1d:
                    61:9d:ff:00:de:73:32:32:05:42:84:d7:b6:6b:a3:
                    f8:72:a7:0f:ec:9b:bb:df:07:ab:70:82:24:19:bf:
                    3f:6e:53:f5:08:cd:01:41:db:6e:d1:7e:2c:3c:d4:
                    de:f8:ab:e6:e5:f5:eb:ae:53:e1:1a:9e:47:b6:a2:
                    8a:88:dd:56:b9:4c:0a:a5:6b:20:f3:fa:d5:70:64:
                    9e:59:86:d0:ae:0e:b4:73:1b:10:d0:fb:bd:61:71:
                    af:d8:33:d6:37:9c:d6:3f:a3:c9:b5:6e:7b:d5:10:
                    30:9b:45:71:d3:6e:57:67:23:e2:2b:19:34:0e:04:
                    6a:0b:95:58:3d:9b:65:a2:d8:54:8d:e7:80:78:e3:
                    eb:ad:b6:4a:a1:dc:31:c0:7d:fa:4c:28:2b:c8:8d:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:51:9E:50:22:3B:23:30:2E:D5:58:CA:55:3F:64:EF:52:B1:3D:B4
            X509v3 Authority Key Identifier:
                keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6a:4b:83:b4:60:1a:1b:d8:86:e2:2e:d5:7e:ee:96:e8:df:
         c6:ff:46:0b:b0:c3:f2:b1:e9:67:9c:34:ed:7e:03:9e:88:7b:
         b5:47:24:2a:13:12:e2:b4:11:fb:89:2d:c3:8b:d5:af:39:41:
         d1:23:65:ea:45:20:b3:01:fb:f9:7f:3d:2b:9d:e9:35:5b:d2:
         93:c5:be:0e:8e:9d:68:6b:35:8a:5b:52:79:72:25:bf:e2:24:
         3a:08:31:a2:f2:30:e7:47:9f:41:df:ed:5a:b6:7e:a7:2d:bf:
         33:69:e3:e3:73:84:94:5c:97:13:54:fc:02:e8:c9:d4:a8:85:
         bb:e7:d9:fd:ba:cf:9e:eb:2d:dc:c1:1c:42:f8:19:02:69:fa:
         53:3e:e4:ae:08:8f:85:3f:d9:ec:e6:6b:42:ed:a7:1d:71:68:
         1a:ab:4d:ce:ad:ed:5c:37:1d:47:04:7d:f1:b1:8c:3b:84:a7:
         72:8f:b9:5e:50:13:19:ed:8b:c4:f8:58:e0:7a:00:d0:70:a1:
         c0:17:b2:e9:23:d4:32:be:95:29:c9:f3:c5:af:c2:7f:ac:16:
         7b:ef:dd:b7:73:2d:9d:2e:76:47:19:a8:d2:39:bf:6f:fa:5c:
         c7:b8:42:5e:aa:16:49:25:49:95:c8:1b:a3:71:97:52:0b:6e:
         3e:c8:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:58:29 2026 by rpki-client