Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File:                     v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier:          zaxuj9kz3vElfCwsk1iMGYkfCaCX9yir5qnHaWooBNI=
Subject key identifier:   D2:89:5D:A9:65:34:B8:D4:9C:01:73:10:34:F4:58:31:84:79:92:D8
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer:       /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial:       019FAB63F22F308EEEE797CDBC031DBB586E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number:          06CD
Signing time:             Wed 29 Jul 2026 01:01:21 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:21 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:21 +0000
Files and hashes:         1: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: HDRc2R0QsaFicotDjw++zWClpASpFQ9WlDhPRXymxmQ=)
                          2: vAouvOE7JSaMC475TpDqm8JvBho.roa (hash: hrbVWv0InqnmWPgkOG3ics28eJAV30J6nL+Bc/a8QUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:f2:2f:30:8e:ee:e7:97:cd:bc:03:1d:bb:58:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
        Validity
            Not Before: Jul 29 01:01:21 2026 GMT
            Not After : Jul 30 01:01:21 2026 GMT
        Subject: CN=d2895da96534b8d49c01731034f45831847992d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:bf:b9:09:9b:33:8b:36:ac:15:5c:67:ec:
                    13:00:03:85:e5:38:b5:ea:a9:50:0b:37:19:fa:57:
                    f1:f6:83:f2:76:d3:43:a3:28:89:43:ff:16:72:27:
                    3b:ff:de:0e:8c:1e:ff:05:4b:8e:86:f9:b3:c1:64:
                    51:18:c8:8f:cb:69:eb:38:ac:89:a8:39:91:e4:51:
                    9e:d5:1b:b4:cf:1b:50:8d:38:33:c8:25:92:a3:bf:
                    02:b4:7f:b2:62:2c:c5:dd:1f:7a:79:f4:0b:77:4c:
                    51:58:38:5b:ff:4f:3a:67:a6:80:fe:2a:fe:34:19:
                    46:04:2b:eb:ac:9f:36:a8:c0:5f:5c:ce:13:ec:f4:
                    71:b7:47:94:a1:57:fa:31:32:7c:1f:07:cb:93:9d:
                    2c:2f:88:7e:fa:73:04:95:cf:ad:ae:bc:2a:b8:12:
                    82:3c:13:e7:09:a9:1d:48:52:de:ed:19:07:df:2c:
                    46:cb:77:d1:e6:22:7f:e1:c0:a2:15:31:c6:87:82:
                    6d:c5:7c:43:08:09:2a:51:d4:c0:84:fe:e7:18:13:
                    86:43:ea:27:1b:65:c8:e4:40:a7:60:e1:67:b5:34:
                    21:9b:d5:b8:19:fe:ec:73:15:cc:56:5a:16:96:d5:
                    0d:9a:0e:55:ba:03:01:26:07:d4:b6:dd:d1:22:ed:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:89:5D:A9:65:34:B8:D4:9C:01:73:10:34:F4:58:31:84:79:92:D8
            X509v3 Authority Key Identifier:
                keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:da:3a:d3:49:97:24:8e:07:29:ee:ee:ea:b6:72:2f:8c:0a:
         30:14:19:5c:6d:03:43:28:1e:1b:52:d9:98:df:e9:45:4f:4e:
         da:ec:42:0b:3c:48:b5:03:8b:cc:d5:1d:4a:4e:b9:9c:5b:86:
         6c:01:db:c6:73:ab:65:79:af:16:62:28:90:c0:af:50:74:82:
         22:48:5a:54:d9:6d:ab:89:21:dd:17:be:72:a5:c1:47:2c:31:
         20:92:65:25:36:17:a4:7a:fd:f0:c2:1e:cd:b8:4b:74:55:15:
         df:c1:e1:00:c1:ca:d1:97:ed:88:35:bf:c4:69:f1:48:d0:4c:
         d8:24:70:07:ac:a4:c9:d2:4b:db:20:81:8b:85:86:44:53:7b:
         14:05:18:60:9d:b5:00:b8:3e:6f:76:f7:6e:03:79:d4:3a:64:
         0d:e3:02:79:ee:fe:07:ef:61:62:da:2e:58:82:3c:7b:d7:d5:
         b7:ef:21:fc:e0:1a:b3:d5:1b:18:03:aa:fb:75:85:05:8a:c5:
         b0:93:10:71:a3:56:48:fd:d6:93:68:7c:a0:89:64:53:84:19:
         0e:b0:8a:34:59:bc:f3:ad:ff:e7:b6:3f:fe:e1:77:e2:9f:16:
         85:64:ee:30:a0:5e:cc:17:96:c8:30:9f:c8:f0:cb:bc:90:f7:
         2f:5d:3d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:44 2026 by rpki-client