Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
File:                     Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json)
Hash identifier:          tl5yOnBOxRP4fzGAIbpr0NbL2ado9KKgnyw1l3URnEM=
Subject key identifier:   D7:C2:81:4B:88:D5:9B:2B:3A:2A:F2:AE:C0:B3:2F:B9:9A:01:1D:AA
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Certificate issuer:       /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial:       019FAB9A7FA34181CF719A82779DC69C31B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
Manifest number:          120B
Signing time:             Wed 29 Jul 2026 02:00:56 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:56 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:56 +0000
Files and hashes:         1: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: 9tzIWfdvM4F/WHleehPOM4AeUUWiQzf9eWeymH/h+0A=)
                          2: zuvfz_qQwxwSkAdtG0Js-khyYL4.roa (hash: xagvaZCpPwHCxyMBtZK7vMyfxxV2ODbD7qNizvfSRvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:7f:a3:41:81:cf:71:9a:82:77:9d:c6:9c:31:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
        Validity
            Not Before: Jul 29 02:00:56 2026 GMT
            Not After : Jul 30 02:00:56 2026 GMT
        Subject: CN=d7c2814b88d59b2b3a2af2aec0b32fb99a011daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:4f:d0:b8:30:73:8f:39:dd:41:b2:23:cc:
                    a2:61:a5:54:35:9a:a2:38:a7:c9:3d:4e:07:7a:0f:
                    b9:a1:f8:e2:9e:c0:61:17:e3:69:79:dd:2b:f5:90:
                    c3:e6:7b:7d:81:37:0d:77:97:ad:cc:79:44:96:68:
                    f7:24:6a:a8:98:2e:4a:87:46:33:bb:56:c9:0c:a3:
                    68:a8:90:b8:4e:9a:2f:4f:8b:61:a9:a6:c4:5e:35:
                    ae:97:7d:29:32:1e:63:c2:b8:fd:66:ae:de:fa:7e:
                    72:87:b4:94:12:81:ce:fd:07:ce:bb:d8:fd:dd:08:
                    16:48:33:df:11:15:d2:85:09:5e:a9:da:20:a6:06:
                    cb:56:6a:8f:26:79:86:f7:5d:e8:23:28:68:a6:10:
                    fc:26:db:ee:13:0d:18:bb:2b:37:bf:0f:48:b9:4c:
                    6e:36:de:2c:f2:a9:01:2c:a2:a8:cc:5e:db:73:58:
                    e8:53:23:0f:ad:ca:3f:9c:1c:8d:9b:c6:fe:1a:6a:
                    0e:93:49:a8:4f:a7:cd:57:51:ec:c6:51:9a:f9:46:
                    48:65:07:23:18:38:92:5a:fe:21:55:d2:5e:e4:38:
                    8f:7f:56:4a:36:b8:e4:1f:9a:39:cd:64:16:d9:b3:
                    cc:e5:4d:39:d3:4e:94:46:8d:7b:27:dc:ba:2b:58:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C2:81:4B:88:D5:9B:2B:3A:2A:F2:AE:C0:B3:2F:B9:9A:01:1D:AA
            X509v3 Authority Key Identifier:
                keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:73:5c:e6:ec:d4:cf:74:f5:fa:7c:4b:fa:08:57:cb:ed:
         20:86:25:0f:c9:19:29:87:1e:07:28:f0:2e:4f:c3:13:75:f1:
         f2:a8:ae:34:5f:dc:d0:f6:bd:64:0e:6a:48:8a:92:4c:ad:82:
         2d:d0:b6:b2:d9:f5:3f:5b:8f:53:8c:fd:72:02:c9:9e:8b:97:
         5c:35:b7:72:e7:07:ec:91:82:44:8f:32:1e:c3:f9:16:7b:8e:
         b5:17:45:ae:a5:0a:03:13:7b:b5:25:ac:08:22:12:4f:95:ea:
         d4:89:48:02:65:6e:41:0d:b2:7c:24:58:ad:e2:84:94:fb:77:
         bd:04:91:7e:6f:0e:df:df:8e:99:15:a4:77:31:f7:54:65:83:
         bd:8a:01:23:b3:9d:15:5f:7c:2e:77:42:b7:40:a7:87:e2:d4:
         8d:3d:86:16:32:c1:bb:c1:26:ce:98:a8:f0:fd:41:c3:48:fa:
         31:1e:30:a5:fb:23:64:70:9d:d4:de:77:60:ab:c4:16:b0:10:
         f4:a5:23:a0:27:77:61:fc:05:fb:9e:34:bb:91:a1:ea:ec:23:
         bc:35:a5:27:c6:5e:80:7a:74:da:ad:d0:87:6b:c8:4c:9b:f3:
         d3:fb:c6:d2:40:33:31:cb:60:24:28:25:53:39:2b:c5:40:d4:
         bf:da:8c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:16:31 2026 by rpki-client