Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File:                     1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier:          5xisNR3wLQbpPbw6d+4yHgRsRxGfJB7XptlYYj9jtZc=
Subject key identifier:   95:06:36:71:72:ED:13:C5:6B:14:07:0C:D5:7C:5B:2E:9D:56:CE:75
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer:       /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial:       019FA93E2C11C735ECC5422B993A3E0AACCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number:          0B44
Signing time:             Tue 28 Jul 2026 15:00:51 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:51 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:51 +0000
Files and hashes:         1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: vIuoKP2mYP23jOavcYqeA8y06js6qTrtZr/ftbUV1tU=)
                          2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:2c:11:c7:35:ec:c5:42:2b:99:3a:3e:0a:ac:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
        Validity
            Not Before: Jul 28 15:00:51 2026 GMT
            Not After : Jul 29 15:00:51 2026 GMT
        Subject: CN=9506367172ed13c56b14070cd57c5b2e9d56ce75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:a1:4e:0c:20:8a:3e:c3:eb:38:ef:f4:85:
                    74:20:57:8b:49:36:c4:c8:7d:40:11:72:e9:13:97:
                    2f:a9:50:b5:dc:c9:48:aa:8e:10:de:17:61:7f:69:
                    c5:c3:ac:84:07:ae:77:83:6d:4e:64:e9:aa:b6:2d:
                    ea:a5:5e:90:84:75:eb:c1:ec:3a:88:42:fe:1d:72:
                    e4:22:26:a6:c3:88:a1:ca:a1:10:ac:1d:ee:46:7c:
                    d1:4e:11:06:5d:a8:50:aa:06:69:01:f3:0e:bc:42:
                    4b:65:29:91:47:d7:5d:c6:b8:4c:f0:e5:ec:15:c1:
                    bf:c2:df:4e:f4:39:bc:c3:07:14:78:be:1c:1f:a2:
                    2d:1b:43:9f:9e:0f:2b:47:c8:a2:65:1f:69:03:e3:
                    bc:b3:c8:7c:d2:80:e5:44:5c:d9:4a:6e:07:8e:91:
                    ba:5c:2c:13:5a:46:0a:48:83:9e:c4:6b:85:1c:a7:
                    a6:83:3b:82:8a:2d:cc:0e:ac:bd:d0:9f:86:7b:9c:
                    23:a6:ed:7c:71:c1:a6:01:53:4c:f4:03:17:e4:97:
                    60:bb:b4:0f:82:b8:ac:0f:4f:4f:06:28:23:ac:5d:
                    02:fe:7a:3f:b7:40:22:6d:b2:60:1b:4b:64:97:3f:
                    ec:72:9b:6e:98:ce:77:2d:be:bc:43:a8:62:70:da:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:06:36:71:72:ED:13:C5:6B:14:07:0C:D5:7C:5B:2E:9D:56:CE:75
            X509v3 Authority Key Identifier:
                keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2c:9b:0a:68:68:8d:61:35:08:d1:65:e5:39:c8:ec:a8:87:
         92:2f:c6:37:f8:7b:f6:a0:50:ad:49:01:6a:86:e1:55:d0:d1:
         84:11:25:f6:12:67:a2:cb:fb:87:42:aa:25:3b:2e:69:f5:4b:
         4b:29:ac:35:49:77:04:e7:fb:98:72:ec:c8:e5:2c:ed:32:88:
         53:74:20:03:04:6b:04:28:c8:73:7b:46:ca:e6:b3:58:61:ad:
         21:06:b1:aa:5a:b7:fc:27:41:2e:7c:59:f8:95:ee:9d:69:28:
         1e:03:c5:73:8e:f8:ad:c5:7c:70:2d:25:73:d7:ac:54:a5:10:
         28:a5:28:92:b5:1a:ed:3a:96:02:3f:2f:f9:34:58:1b:e1:2a:
         e3:70:fd:42:ec:6a:18:dc:5f:8f:d3:6b:d1:19:14:63:4d:44:
         e6:5b:ab:72:b1:79:16:dc:a6:16:ad:41:71:76:bd:b5:3f:ae:
         ea:c0:a6:aa:27:bb:ba:99:b3:9e:18:fe:87:95:47:61:61:2b:
         13:b4:c5:2c:fb:7f:f5:7b:8f:a7:28:1b:0b:56:a7:01:64:d2:
         1d:8b:34:58:08:80:2a:5a:78:b9:48:8d:8a:0f:23:31:61:02:
         5f:ef:59:78:d2:e9:c9:0c:bd:31:54:84:c3:2d:1f:95:db:35:
         f9:15:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:42 2026 by rpki-client