Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File:                     4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier:          awVlNB9SWFqZ4kHBfTvHJHk5NhX53H1bKsuE+cbYoVE=
Subject key identifier:   C9:2E:43:B6:71:51:6E:5B:26:E7:FD:DA:8B:CA:9A:0C:71:8C:F0:9D
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer:       /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial:       019F1867EA2C78D5FD5904A60BF897908ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number:          0D2D
Signing time:             Tue 30 Jun 2026 12:01:31 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:31 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:31 +0000
Files and hashes:         1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: qqV0F9CNm8jpbCCjoK6k6sb+ClJ4ZvT0sHmMXUhjacs=)
                          2: UWX8SxCjwL_qmxdOe6nySrZQC84.roa (hash: D5R5Nyowo4jjOW+4uW1uT9NqCdmsnMIgdkwB6H1oOfI=)
                          3: vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa (hash: 8oO/bPo+96+JLDumliudhdJVxtG8gpJVeHN/Dwo+7JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:ea:2c:78:d5:fd:59:04:a6:0b:f8:97:90:8e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
        Validity
            Not Before: Jun 30 12:01:31 2026 GMT
            Not After : Jul  1 12:01:31 2026 GMT
        Subject: CN=c92e43b671516e5b26e7fdda8bca9a0c718cf09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:4f:cd:25:51:ea:fb:d4:df:cd:c0:9b:53:
                    1b:b9:76:ea:12:63:f6:a2:76:8f:99:1e:dd:41:b7:
                    46:aa:8d:bb:1d:1f:58:ba:da:bd:40:67:a5:eb:96:
                    5a:e7:9c:df:b5:43:93:ac:e6:b4:14:65:aa:54:c4:
                    e1:65:89:bd:99:35:c1:4e:63:3c:fb:ce:39:d2:fe:
                    1d:3d:44:f6:37:ac:e2:68:46:ac:1f:83:ec:4c:23:
                    8e:0d:5d:cd:09:0c:95:57:e0:bb:fb:b3:6c:39:c9:
                    07:7d:d2:0d:42:2f:8f:78:82:f5:c2:96:b2:ee:52:
                    1d:8a:50:d6:71:d5:74:d7:7a:03:b8:9e:b1:76:39:
                    f1:d8:92:90:8c:a3:df:ee:57:f2:01:7d:12:6b:d3:
                    80:7c:0d:fe:6a:a0:0d:5b:18:98:5e:90:08:53:00:
                    8c:b1:78:50:40:b7:cc:64:62:23:63:a9:d8:fb:f6:
                    fa:2f:0c:9b:06:2b:99:ab:92:e1:4d:45:01:fc:04:
                    28:03:a9:f0:4b:33:8b:4c:55:50:fd:1a:e0:4b:7b:
                    d7:6a:51:3f:1f:db:85:3a:d1:60:50:c6:28:cd:a5:
                    85:80:15:d3:8e:79:68:24:05:e5:27:5d:a9:5f:e9:
                    29:38:d9:ba:0c:bf:94:aa:d9:0f:40:4a:c1:30:0d:
                    22:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2E:43:B6:71:51:6E:5B:26:E7:FD:DA:8B:CA:9A:0C:71:8C:F0:9D
            X509v3 Authority Key Identifier:
                keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:df:a8:e0:26:da:c5:cc:24:c3:42:0c:b5:77:23:c8:56:ce:
         f8:5a:d8:1b:b9:4c:11:16:b4:61:51:f7:ee:89:dd:97:94:94:
         11:13:d4:04:56:0e:83:d1:ce:19:b2:58:4f:81:58:d6:7b:67:
         fc:54:6c:90:8d:cb:ee:dd:05:70:13:8b:2b:31:76:33:5f:22:
         11:e2:ba:96:33:2f:aa:fd:dd:c6:1c:8d:3d:ae:95:5f:e0:69:
         21:f4:8b:b6:75:f2:bf:9f:7c:21:8c:79:a0:28:26:d6:a0:79:
         ff:2c:cd:0a:93:b7:c9:d2:be:93:29:bf:f4:6e:cb:97:12:a2:
         d3:e7:69:73:8f:1c:3d:5d:a1:d3:ab:0e:58:02:ac:94:f9:a4:
         e1:7d:0a:f0:47:3c:dc:61:af:01:1a:2b:fe:ee:26:52:ac:7c:
         3d:5c:53:a3:31:91:49:44:27:52:b5:2d:8e:45:f6:71:cf:9d:
         e4:c9:b6:73:16:c1:b5:49:c4:23:89:3d:11:9e:41:06:65:c6:
         b4:b3:8e:8d:1b:e4:ac:ff:d0:3f:e8:b8:fb:de:84:94:95:2a:
         24:f3:ea:f3:ef:73:5d:0c:e9:3d:12:a1:dc:1b:86:ab:54:cd:
         14:b5:cb:31:44:01:8e:23:fa:3c:a6:bc:b5:c8:b5:88:03:99:
         26:28:03:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:15:58 2026 by rpki-client