Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File:                     A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier:          JZFHZZTFJEbDibVcMDDbW3VLRiLr77SgeL92J9CqSmk=
Subject key identifier:   4F:5F:9F:47:84:88:79:F4:89:81:FD:51:E9:E5:A9:13:38:A5:05:CE
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer:       /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial:       019FAA509FB5BB85445953496D8D12748050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number:          15E0
Signing time:             Tue 28 Jul 2026 20:00:38 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:38 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:38 +0000
Files and hashes:         1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: h++gaA+Hrv458SkWNF1uZMRNUoQWcBKfogT5VeLjrgo=)
                          2: shN0invCztwI3KX6a_QGu2kjtpU.roa (hash: C5xwtk8B6GrmB6Pb2tWwcTB63K3NyU431bpj6dpQii4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:9f:b5:bb:85:44:59:53:49:6d:8d:12:74:80:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
        Validity
            Not Before: Jul 28 20:00:38 2026 GMT
            Not After : Jul 29 20:00:38 2026 GMT
        Subject: CN=4f5f9f47848879f48981fd51e9e5a91338a505ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:c5:13:56:78:2b:a2:e5:5d:89:1b:0a:70:
                    8e:9b:4b:6a:5a:3a:03:f4:a4:35:cb:bd:46:1a:0a:
                    b4:8e:9c:ee:12:93:9f:d2:1d:86:6b:05:05:0d:d8:
                    7e:e2:16:80:92:86:25:66:6f:f6:64:d8:89:bb:ea:
                    07:32:88:da:22:8c:f7:f0:da:30:aa:39:4a:29:6d:
                    49:c9:2d:56:0b:85:c9:bd:38:cf:a8:b7:93:0e:24:
                    a3:6f:48:8a:30:df:15:d9:1b:1b:9a:48:5f:ab:c7:
                    0c:bd:5c:98:bc:65:c5:b8:28:8d:81:ce:7e:d7:91:
                    df:28:70:b6:2a:36:39:00:e3:41:c6:7b:a6:dd:20:
                    0f:b7:78:11:dd:2d:03:b5:9c:50:fc:83:ac:5e:a1:
                    e0:4e:0c:b0:ec:98:66:e7:69:17:37:d9:86:07:aa:
                    a8:61:13:4f:b5:b9:d5:39:b7:ad:6b:ec:ca:d4:bb:
                    a8:70:db:c3:b1:74:0e:85:e2:ba:c7:d7:1a:ce:1c:
                    2f:e8:14:6c:45:13:37:a0:ab:ad:14:d0:0a:b6:ca:
                    47:ce:d8:a8:64:9e:f1:66:37:0e:c6:9b:8c:7e:2c:
                    e2:08:f9:1a:92:51:93:51:e4:15:88:89:de:27:6d:
                    c5:2c:93:d2:b6:a2:18:77:62:d1:19:66:5f:5e:bf:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5F:9F:47:84:88:79:F4:89:81:FD:51:E9:E5:A9:13:38:A5:05:CE
            X509v3 Authority Key Identifier:
                keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:48:f9:69:09:16:a4:52:58:d1:ed:1c:fd:8b:2f:c2:d9:
         43:5c:c6:96:7d:26:c2:42:bb:fe:e3:41:fc:1b:be:7f:e6:43:
         4d:bc:79:ac:e4:00:1e:f6:de:29:c9:cd:1a:db:d1:58:39:2c:
         41:98:19:45:a3:02:ca:6a:c8:9d:61:d6:ba:c0:22:f0:bf:aa:
         66:cc:2b:ac:f4:0d:69:46:3a:4b:b6:2b:bb:94:34:3a:d2:a2:
         61:dc:40:47:d5:2e:1f:cd:b8:50:58:21:73:4e:d0:51:b3:cf:
         99:d8:b9:a1:77:dc:9e:b9:29:a7:41:ac:d6:fc:65:ae:95:20:
         c6:0d:15:47:87:33:68:2d:cb:2e:f2:42:2e:23:8b:00:8b:7d:
         64:e3:1f:a6:26:4b:2e:bc:a2:69:14:ed:5d:64:ba:7c:00:7a:
         bb:76:a4:11:47:52:d2:8b:bf:94:71:23:e8:72:71:8f:b3:1f:
         2e:88:f0:ee:24:d9:75:b0:54:4d:65:cb:f6:5d:15:04:e8:c6:
         51:70:b2:8b:84:bc:74:47:fb:07:27:ac:47:2a:70:a4:3d:09:
         e0:a8:29:c7:be:75:d8:a4:bb:88:6c:0b:e9:2c:a1:7d:d5:2d:
         8d:85:83:62:ba:34:ad:c0:5c:96:3a:2a:ee:62:df:38:a4:1b:
         fa:90:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:19 2026 by rpki-client