Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
File:                     4OU7sw0HUg-FeuZW962BPyLv0VI.mft (raw, json)
Hash identifier:          mOmD6CYm5AQnNDNgLHPooBUfGS0Uh5sX5/ylhrT2Drc=
Subject key identifier:   C8:1D:7B:6F:24:45:62:DB:13:DB:86:33:A6:D1:81:9C:86:C2:76:23
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Certificate issuer:       /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial:       01A06D5E3C62D4040066CC274D95754A7841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
Manifest number:          02CC
Signing time:             Fri 04 Sep 2026 17:01:27 +0000
Manifest this update:     Fri 04 Sep 2026 17:01:27 +0000
Manifest next update:     Sat 05 Sep 2026 17:01:27 +0000
Files and hashes:         1: 4OU7sw0HUg-FeuZW962BPyLv0VI.crl (hash: 22s9mrAH1fzqrC4c9bej7X14BurLwDKkPNNV3zs62E4=)
                          2: VdHoxGlnRqHLH1BFJzKzY5i5REw.roa (hash: dsaCJE0OYhxYSMRnj1r3I0s5ntGNaUFaI5WVluKFvG4=)
                          3: xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa (hash: LniWd40MUm27qbAUJ/AFuq8QyhRMHVdc7tCz6NRyg3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 17:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:5e:3c:62:d4:04:00:66:cc:27:4d:95:75:4a:78:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
        Validity
            Not Before: Sep  4 17:01:27 2026 GMT
            Not After : Sep  5 17:01:27 2026 GMT
        Subject: CN=c81d7b6f244562db13db8633a6d1819c86c27623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:bc:88:bd:9b:e8:88:58:7d:e9:8b:57:10:
                    8c:24:4e:91:6f:55:5f:2f:ff:41:6d:cb:f3:31:f7:
                    cb:ea:70:b6:ec:f6:11:a0:e7:0a:b4:c2:1e:07:e6:
                    cb:f6:d8:07:f8:cc:2d:2d:25:cd:95:c9:9e:6e:db:
                    46:6c:f4:ec:47:8e:0b:1c:89:6b:23:90:a6:1b:c0:
                    0d:96:fd:e5:30:7a:db:b8:7a:4d:51:b8:a6:cc:13:
                    7c:94:c2:5e:bf:d1:d7:32:5a:93:b8:2f:a3:de:59:
                    1a:36:16:3b:24:39:6b:e0:4f:1c:4d:2f:46:3b:7a:
                    88:10:00:22:64:31:41:2b:57:94:89:78:b4:f4:1f:
                    51:15:57:b8:bc:6a:94:9d:45:66:38:f8:6b:e3:33:
                    4a:1a:5f:62:7f:f2:ba:b2:4b:0f:ae:4e:58:74:66:
                    fe:a7:c7:46:09:3a:5d:d4:36:4c:0c:3c:0d:9c:ab:
                    69:2b:0e:00:49:2d:6c:67:9e:a1:d7:d1:6f:a0:7b:
                    81:b8:67:63:1c:fb:1e:f3:a7:5d:8b:00:16:20:f5:
                    cf:71:57:31:42:84:ef:be:da:2b:c2:92:4e:df:1f:
                    36:cf:f7:17:eb:1c:c0:35:02:1d:be:d3:27:84:28:
                    26:4f:a4:52:b3:03:da:b7:b2:6e:a0:ec:bf:27:69:
                    c7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1D:7B:6F:24:45:62:DB:13:DB:86:33:A6:D1:81:9C:86:C2:76:23
            X509v3 Authority Key Identifier:
                keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b9:a2:e8:20:ce:ac:f0:df:8b:bf:5c:88:7f:5e:a7:f5:22:
         cb:6b:84:67:77:3e:55:9f:b7:35:ae:1f:29:3e:76:2c:99:1a:
         de:0d:56:2e:39:06:b2:65:5f:a7:ad:ff:80:c1:95:52:2f:b0:
         cc:8f:6e:3c:89:21:61:7f:f8:46:c6:71:64:10:1d:6f:6b:3e:
         c6:74:dd:e3:cf:f1:80:02:f2:da:a7:f0:9d:75:89:67:20:3a:
         26:e3:fa:38:4a:64:e1:d4:37:87:88:87:be:72:f5:b3:77:19:
         1b:99:a3:09:ed:c0:1b:04:21:af:fd:5c:a2:90:50:9d:fd:bb:
         3e:02:b4:8e:16:0f:0e:30:a8:aa:c3:85:0f:04:ba:55:32:cc:
         e7:3c:4b:0a:12:00:e7:c0:51:58:12:57:02:df:8a:50:5d:46:
         70:73:a4:bc:c8:3a:ae:f7:7e:38:fa:52:5c:8b:a9:76:c1:31:
         2a:0a:81:ac:ec:e1:a8:ee:7c:7b:46:52:b3:2c:e5:4c:1b:cb:
         3f:5c:20:bd:4d:e5:84:4d:f4:d1:10:3e:93:40:4c:25:ea:85:
         7c:9b:8e:28:84:46:9e:b1:46:5d:f8:60:41:6c:27:b2:71:cd:
         cd:4d:66:d1:0c:38:cf:25:4f:88:cb:c5:3f:8d:31:8e:6a:3e:
         88:03:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:05:38 2026 by rpki-client