Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
File:                     P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft (raw, json)
Hash identifier:          CAft3l5N1Flzh+E/5n9t+G8u1UpfmE9dQOyCUn0Fdpo=
Subject key identifier:   F4:5B:21:57:A2:04:44:67:FE:40:E3:83:63:EC:36:D6:91:78:77:89
Authority key identifier: 3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
Certificate issuer:       /CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Certificate serial:       019F130AA9A4D18CA8DF802E104A18AAA713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
Manifest number:          1986
Signing time:             Mon 29 Jun 2026 11:01:33 +0000
Manifest this update:     Mon 29 Jun 2026 11:01:33 +0000
Manifest next update:     Tue 30 Jun 2026 11:01:33 +0000
Files and hashes:         1: P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl (hash: Tobz68oFgN6iKQvt6Pad6sfwxDLLKoBa5YLA2JxFGXU=)
                          2: ncPNkpuerXDPVvhOagmz6DGK4F4.roa (hash: EzW2eYsud+NOEa0rR95TqZjMJsbs++g10GjrVu+pH+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:0a:a9:a4:d1:8c:a8:df:80:2e:10:4a:18:aa:a7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
        Validity
            Not Before: Jun 29 11:01:33 2026 GMT
            Not After : Jun 30 11:01:33 2026 GMT
        Subject: CN=f45b2157a2044467fe40e38363ec36d691787789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:42:46:53:ce:8f:2b:c3:91:d4:d4:85:9e:
                    61:ea:f4:63:e9:7b:f4:dd:aa:bc:da:23:28:21:59:
                    6b:8a:57:80:e8:8a:e1:75:44:6c:b0:f5:e8:cf:29:
                    50:e0:24:6d:be:46:3e:37:04:63:95:57:51:32:12:
                    a3:c9:48:88:52:81:9d:5e:dd:00:2f:ca:22:c9:83:
                    0c:a7:35:f6:6c:fa:00:97:2c:cd:7d:0a:2b:4c:e5:
                    12:25:63:55:48:88:0b:ee:be:6e:aa:e5:16:fc:1f:
                    8e:72:29:4b:f0:33:f5:46:c0:b6:b4:1f:59:32:6c:
                    28:76:07:3f:8e:5d:23:94:4d:33:09:54:2a:27:a7:
                    9b:2c:a4:fb:0e:81:12:cd:69:28:a6:e5:7a:2d:cc:
                    47:18:cf:2e:33:69:2e:f9:d3:8e:0c:6e:c3:7f:41:
                    4b:3b:1f:12:27:98:0c:70:83:62:8c:b8:5c:f8:74:
                    10:5f:ec:a3:39:63:8c:f4:dd:ba:55:00:a1:ef:29:
                    b8:54:0e:89:18:3b:3b:ef:92:12:f8:48:9d:c9:e2:
                    30:b4:dd:44:7f:d7:ac:da:9b:a5:90:9c:1a:38:66:
                    87:66:bb:b3:75:75:d8:3d:cb:54:1f:86:fe:bb:9b:
                    fa:27:c6:fe:85:7b:36:22:a2:bb:a8:06:3d:a0:90:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5B:21:57:A2:04:44:67:FE:40:E3:83:63:EC:36:D6:91:78:77:89
            X509v3 Authority Key Identifier:
                keyid:3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:5b:11:e9:4a:f0:6a:78:66:ff:e1:37:04:55:2b:01:14:c3:
         d3:2f:cc:04:5f:48:66:43:65:21:d3:dd:56:97:52:4e:c4:a9:
         1a:c0:51:fd:87:52:a1:ec:3b:20:65:c5:8e:04:cf:a6:7f:9b:
         dd:2c:53:2f:c8:46:a8:1b:06:92:5b:c0:fa:49:6a:43:04:80:
         f2:08:8e:1b:29:b6:29:ba:8d:70:25:91:29:d5:16:dc:64:68:
         a1:a5:7d:fa:1c:b6:f0:e5:9b:84:a7:97:f5:41:29:02:66:39:
         79:ef:9b:2b:55:27:b5:71:26:e9:f8:90:53:58:23:12:54:ae:
         02:a7:ba:db:fc:76:fe:85:c5:f0:c0:b2:75:f4:27:a4:73:da:
         95:49:86:0d:37:28:c3:1a:59:cc:c1:17:24:ab:8b:3c:fd:d8:
         41:6a:18:c6:f4:a4:1b:d8:c6:b7:b6:8b:73:79:c7:9e:12:27:
         33:ec:5d:08:56:5c:c0:da:1d:84:9b:2e:89:ad:73:59:1b:f9:
         0d:cd:f0:32:41:fa:9d:0c:eb:51:78:a7:3c:c4:80:d8:0e:52:
         c4:6e:23:f5:c6:69:97:9a:8f:a7:17:00:aa:a9:6a:2e:ae:7d:
         af:d9:75:e5:52:c0:18:9c:85:f5:7a:e2:0f:63:0b:1c:f8:30:
         72:28:c0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:38:18 2026 by rpki-client