Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
File:                     1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json)
Hash identifier:          OTUrdizrzsNFCDnJF4ldBXF9JIzDCfCDFj1FgOtGQ+o=
Subject key identifier:   43:82:C1:03:11:41:1E:5C:A1:FF:44:F3:36:FC:9D:09:3B:B4:E3:9E
Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Certificate issuer:       /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Certificate serial:       019FA9ABF682CC0C71959BDA145CC91F52C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
Manifest number:          19D7
Signing time:             Tue 28 Jul 2026 17:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:46 +0000
Files and hashes:         1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: /FiekZ4+n1zfzJrRDCQlQt6PkRYAXgGBM41upXuE7WY=)
                          2: BoWpyd3JOZi5Y_vkexanhVBW_Ag.roa (hash: TuPfakwU0uajSPw+NwpFbys7R8R7VeHveufD46rtpys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:f6:82:cc:0c:71:95:9b:da:14:5c:c9:1f:52:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
        Validity
            Not Before: Jul 28 17:00:46 2026 GMT
            Not After : Jul 29 17:00:46 2026 GMT
        Subject: CN=4382c10311411e5ca1ff44f336fc9d093bb4e39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9a:6c:63:7d:fc:cd:37:a0:7d:98:83:d1:d3:
                    58:44:06:2a:96:67:b0:eb:b5:b1:33:6b:71:b6:1a:
                    08:a1:fb:5f:ed:f9:36:bc:d8:88:be:99:18:1a:41:
                    c8:e4:b8:57:68:ca:f3:eb:13:f2:f9:77:db:c5:13:
                    8c:38:a5:c2:75:ea:3c:31:d6:50:b5:8a:34:a0:d5:
                    4d:6a:ab:2e:5c:d6:fd:19:15:23:c9:68:51:79:05:
                    72:2e:bb:8b:c5:98:6d:f0:ba:1e:f6:ac:b9:e0:42:
                    e7:e4:c0:54:d7:d7:85:f3:62:83:61:69:1c:68:d1:
                    c1:7e:3a:e4:48:47:43:a3:65:32:53:6b:ef:66:95:
                    a8:0d:ad:f3:e6:bd:88:8c:4d:b2:c9:a8:f1:4e:8f:
                    45:80:b9:df:61:08:c4:15:d8:2c:14:f3:e0:bc:70:
                    9d:2a:80:c6:79:6e:08:02:2c:e3:39:3c:61:03:4c:
                    82:84:bf:7b:9d:1f:37:8e:57:57:0d:e5:01:5a:b4:
                    64:ab:db:8b:a3:4c:05:6f:b8:d2:15:ec:4b:24:07:
                    dd:21:05:1a:97:0f:ed:48:e7:ec:3e:1a:7d:ee:96:
                    d8:64:17:de:d1:20:35:82:64:66:3d:30:df:7e:00:
                    e9:ef:9e:eb:e3:26:03:5c:f8:ab:df:13:db:9d:2b:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:82:C1:03:11:41:1E:5C:A1:FF:44:F3:36:FC:9D:09:3B:B4:E3:9E
            X509v3 Authority Key Identifier:
                keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d2:83:e8:d6:92:17:99:76:a6:74:be:09:9b:48:2c:51:40:
         8f:a8:ad:6e:a5:65:74:66:db:ba:56:4c:dc:3e:ba:1c:5b:1d:
         ca:73:04:c7:df:0d:b0:82:3e:4b:9b:c5:7a:2a:3d:8b:ad:f6:
         cf:42:a1:cc:37:05:6f:2e:5a:43:42:6a:ae:56:f2:04:73:ae:
         d4:c2:f7:ac:71:96:b4:75:68:10:37:2c:1e:f6:d0:b6:33:bb:
         5d:db:02:6e:76:74:9f:7b:16:fd:c1:d6:ed:8c:07:65:76:55:
         fe:d8:c9:8f:06:19:38:eb:5a:22:62:08:e8:3a:c5:dd:09:17:
         c2:f8:78:0f:8b:87:1d:d7:5c:16:08:1c:2a:7f:40:8b:75:1c:
         90:43:71:08:0b:f6:19:50:9c:87:f6:be:30:57:5f:3e:1d:af:
         06:3d:6d:4b:0c:75:71:3d:2a:8b:13:b2:54:e7:e6:de:1d:6a:
         87:06:05:64:31:b4:71:9c:9d:de:20:28:1b:09:56:07:fb:f6:
         1e:42:ab:65:01:00:8b:e4:fc:ab:89:0f:ca:01:db:0e:d1:f0:
         ce:fc:5a:d3:24:4e:85:1e:e9:0c:dd:bd:f4:10:70:1a:07:cf:
         d7:40:41:25:7e:e6:2a:b7:48:d7:a5:d9:e2:f8:ce:b0:c4:eb:
         55:b3:c6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:20 2026 by rpki-client