Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
File:                     1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json)
Hash identifier:          xLR5snFEzAuy8Z+m0I0cmo84Ij84/onb47326REN53c=
Subject key identifier:   6A:2D:EE:35:7D:9A:7E:C6:DC:71:CB:94:9B:40:CF:48:FF:61:5C:04
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Certificate issuer:       /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial:       019FA8627819AEC39928B5527FB6C2D485B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
Manifest number:          0EDC
Signing time:             Tue 28 Jul 2026 11:00:53 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:53 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:53 +0000
Files and hashes:         1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: 7F4pihcQvI2B20ueL25ui1mIumc4vfthJtMWogbr30w=)
                          2: 5lUQZsEUGyOae8g7ck1qxAKPHD8.roa (hash: n4Xk9RLkEFoassK3zDhzjezu9B6KPSvljIoQuRXwbfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:78:19:ae:c3:99:28:b5:52:7f:b6:c2:d4:85:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
        Validity
            Not Before: Jul 28 11:00:53 2026 GMT
            Not After : Jul 29 11:00:53 2026 GMT
        Subject: CN=6a2dee357d9a7ec6dc71cb949b40cf48ff615c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9d:13:5f:77:71:44:99:e1:84:61:3f:21:eb:
                    75:f0:e8:15:d9:72:77:aa:e3:b8:1e:dd:83:cf:81:
                    a2:0f:ba:29:56:89:c0:f3:92:a3:7c:1c:02:03:79:
                    e1:f2:94:44:3e:f9:4f:01:56:0d:2d:e2:91:3f:08:
                    97:1f:cd:db:9e:06:db:8f:9c:c2:28:e4:36:ba:4a:
                    f3:52:5f:9b:e5:fe:69:c6:9b:b1:cd:35:3e:2e:56:
                    8d:3e:0d:3c:e7:69:16:25:07:61:dd:eb:5e:a7:d6:
                    62:ed:50:2e:68:ea:d4:e6:08:fc:a1:6a:1e:62:66:
                    e6:d1:22:0a:99:b1:c7:08:24:18:c3:f1:f3:67:23:
                    e8:a6:66:ed:0a:5e:6f:72:45:72:e4:88:1b:f6:32:
                    2c:dc:e4:16:2d:a2:63:a5:0d:e8:d5:6a:8d:1e:54:
                    1f:03:a3:f2:79:da:e1:38:0f:90:0c:43:43:f4:4c:
                    86:58:f4:b3:98:55:1c:ef:ce:d9:9e:60:3c:98:61:
                    a6:6b:a8:ea:36:80:54:0c:e8:aa:cf:ad:cb:a4:e1:
                    49:2f:55:09:ad:e4:0c:4b:5f:4d:74:a7:ed:3f:5c:
                    a0:be:bc:03:2f:1f:23:23:3e:b2:5b:3c:37:69:16:
                    de:d1:fd:8e:23:6b:b0:06:1e:53:0f:c2:72:27:c8:
                    10:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2D:EE:35:7D:9A:7E:C6:DC:71:CB:94:9B:40:CF:48:FF:61:5C:04
            X509v3 Authority Key Identifier:
                keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:d8:3d:68:4b:f2:b1:f4:de:e6:dc:a0:fb:17:54:fd:d0:b0:
         31:53:66:bf:1f:2f:4c:ab:06:2e:6d:04:01:54:2f:c8:4a:0a:
         c7:0d:09:64:e0:b0:f8:cd:98:b4:a0:7b:2b:8b:f6:f6:e5:bb:
         5f:5b:3b:a7:68:45:b4:19:bc:0c:0f:3e:1a:6d:f3:a1:50:d3:
         f5:a0:26:a3:53:ae:93:2c:5c:92:11:ec:ba:2e:d5:3b:68:b3:
         08:fd:fc:58:7e:3c:e2:03:35:eb:01:b2:39:33:ca:cc:4a:b8:
         41:6c:13:00:17:e0:dc:fc:da:75:87:a0:6a:7d:b0:bc:9a:cf:
         81:0e:80:ac:c9:97:89:05:74:eb:b7:29:23:50:21:4a:c8:85:
         4b:b8:06:31:c9:17:99:e9:e5:d4:a6:e6:67:b8:95:9c:fa:d5:
         ee:bf:69:42:5b:86:a9:4e:89:eb:fa:e5:d5:10:dc:44:11:f5:
         dd:af:a8:6c:28:5a:43:2d:be:d6:ec:29:d8:fc:ee:83:ab:fc:
         8c:c2:9c:e7:5e:19:23:bb:78:11:53:c1:2e:ed:8e:2d:9f:f4:
         dd:e9:94:5f:6f:fa:4d:62:10:5e:ef:5b:49:63:be:4d:e0:e8:
         af:0d:27:49:4e:18:76:fa:af:db:05:67:a7:29:49:08:cd:a0:
         b9:69:d8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:39:07 2026 by rpki-client