Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
File:                     80YWUeW-JFCXcpdbqYxw7G7jzXs.mft (raw, json)
Hash identifier:          D2riMSE9lnSWlF9AaF63YSyXIn9YvvHDNe4JLoPgXmc=
Subject key identifier:   1A:08:39:81:29:FF:EA:C6:9A:24:B1:80:B0:70:F1:C4:53:55:DC:C0
Authority key identifier: F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
Certificate issuer:       /CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Certificate serial:       019FA90711A0677E84C518AD1860F3D09438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
Manifest number:          0438
Signing time:             Tue 28 Jul 2026 14:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:40 +0000
Files and hashes:         1: 80YWUeW-JFCXcpdbqYxw7G7jzXs.crl (hash: KaDy4/TujbhPsHvmNSaJOw1ip0Oxq68suGbNitnfnW4=)
                          2: Qtc_zuFzRUz7J07L37X5qvUUnhs.roa (hash: D6SdWG5JeosyZFAglIkmKFjIaBi039zmz2skeCVDiYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:11:a0:67:7e:84:c5:18:ad:18:60:f3:d0:94:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
        Validity
            Not Before: Jul 28 14:00:40 2026 GMT
            Not After : Jul 29 14:00:40 2026 GMT
        Subject: CN=1a08398129ffeac69a24b180b070f1c45355dcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:45:a9:3c:78:0e:93:1e:9c:f7:39:df:f5:
                    3f:da:5a:64:a2:77:aa:43:24:76:bd:af:0b:21:11:
                    d3:49:82:31:7f:f5:14:d8:88:18:80:5c:b5:b2:d4:
                    44:ba:7b:fe:e6:a2:3e:40:e5:3e:42:56:89:8e:ca:
                    47:1b:0a:38:de:ae:62:d0:39:99:c4:5a:ba:04:eb:
                    1c:a2:21:59:09:2a:b7:f0:c8:93:30:50:f0:87:9f:
                    66:45:a5:d7:b2:a9:d1:49:cd:ba:80:b2:1b:64:f7:
                    e7:85:e2:73:9e:10:78:eb:d8:12:da:ac:b5:93:f2:
                    5a:8d:48:69:5d:8a:78:23:29:76:9a:cc:71:70:5a:
                    4b:03:06:c9:7e:bb:e9:cb:b3:3a:cb:00:1f:f5:03:
                    cd:08:f1:6f:8f:26:4e:7e:61:99:95:6d:ed:42:28:
                    20:06:f5:c7:c0:49:1d:d2:35:a5:a8:b0:28:69:09:
                    f1:9d:88:02:9a:3b:43:ee:4a:f1:e0:b9:14:b7:3b:
                    40:6d:5d:00:ed:8b:71:10:0c:14:59:8d:0a:3c:73:
                    e7:43:08:8c:3a:2d:30:18:8d:47:f5:83:6c:7b:ab:
                    e8:26:bd:02:ca:6c:94:4b:b3:05:69:1d:6f:65:31:
                    ee:0e:a6:e3:f8:ef:f5:c5:41:da:1a:8d:d8:84:5a:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:08:39:81:29:FF:EA:C6:9A:24:B1:80:B0:70:F1:C4:53:55:DC:C0
            X509v3 Authority Key Identifier:
                keyid:F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:5d:c4:ba:b4:a3:6f:b7:2f:02:29:57:c5:35:f0:46:cd:
         a0:54:17:65:0c:d4:1a:23:6e:a5:d3:62:6f:83:48:f3:9e:18:
         e0:fd:40:04:98:6d:a1:47:e3:85:c5:37:69:25:59:f1:7f:69:
         fe:32:a8:9e:77:c5:9f:d3:c7:a2:df:e7:42:04:c6:ae:14:05:
         b3:4b:a1:9b:df:d3:19:53:e6:25:65:75:7d:10:6e:3c:14:5e:
         7b:cc:1a:37:3b:e8:59:d8:e0:83:4b:bf:84:09:01:b4:45:c9:
         87:2b:c5:cc:92:4a:7f:ec:0c:79:1b:c0:94:04:7f:52:06:be:
         48:9a:34:75:04:89:64:84:d7:6b:80:79:9d:f2:c9:e8:56:a8:
         ea:88:16:3c:b5:db:6f:23:f2:24:29:2c:af:04:78:1e:b8:52:
         22:98:bb:8e:67:bd:d0:de:69:46:d9:27:a0:39:24:c5:7f:14:
         f9:e4:ac:82:17:b9:67:6f:26:4e:8c:11:f8:f6:ad:5b:a4:66:
         73:de:1d:8e:99:71:79:4b:7f:d6:1c:16:62:6a:2e:2f:9f:38:
         ce:f4:bd:7a:1c:ab:b3:96:7c:be:da:90:9f:fe:ce:49:5e:49:
         aa:85:df:88:cb:41:34:a2:71:cd:a9:f1:9b:a7:c6:14:78:f3:
         23:2c:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:22 2026 by rpki-client