Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File:                     A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier:          Xpr1fLTKaZDAYilQn138Dk++vjaVhRzUMXJUX5gmYFk=
Subject key identifier:   B3:10:86:3F:8E:26:0B:0F:E4:74:44:B5:64:FD:73:17:1A:C6:B5:EE
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer:       /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial:       019FA9E341439CEF580E7F96BA564038A5E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number:          0847
Signing time:             Tue 28 Jul 2026 18:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 18:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 18:01:10 +0000
Files and hashes:         1: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: EQjgWnH3aFHeFfB5N0tpPVi5SqP2MtgE4J2Eqh1NWQk=)
                          2: INMcxslKzA9lQLIaiuC7po-TrrY.roa (hash: 9IPb8qBlhTZBbDZdvzgQp75cg/Es1qM9VUEr2AAlDW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e3:41:43:9c:ef:58:0e:7f:96:ba:56:40:38:a5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
        Validity
            Not Before: Jul 28 18:01:10 2026 GMT
            Not After : Jul 29 18:01:10 2026 GMT
        Subject: CN=b310863f8e260b0fe47444b564fd73171ac6b5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:98:1b:ed:c5:7c:0d:fe:66:7d:26:64:f4:
                    7c:9f:c7:30:00:bf:00:54:d8:0f:b6:7a:c6:02:41:
                    57:57:8c:0b:63:b3:59:e6:1a:e0:d0:f2:2a:e6:a2:
                    bf:5e:2e:15:e7:33:a8:8e:20:64:a9:2d:83:0a:f9:
                    50:3d:ca:b3:91:12:e3:7f:50:60:94:cf:1f:95:98:
                    95:86:c0:98:5c:e3:49:98:76:0f:fc:aa:ae:43:46:
                    88:d7:61:02:77:a3:11:d3:73:90:c0:2d:90:1d:97:
                    6b:e7:08:86:4b:b5:72:2c:8b:58:2d:df:d7:8f:8f:
                    e6:6a:13:86:f4:9b:0f:c2:fc:d2:bf:c2:59:bc:d5:
                    6d:7b:dd:72:34:60:a9:0f:98:fb:7f:c5:37:3e:a5:
                    92:a8:28:ac:4c:da:49:e3:39:91:53:eb:5e:8b:93:
                    dd:c3:8a:51:a5:fc:e8:22:e1:32:43:1c:66:66:cf:
                    6a:34:90:22:ba:2b:b5:f8:37:fe:67:8e:bd:f2:75:
                    c1:35:06:a5:31:fa:7a:90:03:e1:3b:02:96:17:f1:
                    5e:ba:00:6f:ed:ba:b1:fc:7c:cb:58:c6:a3:e1:f7:
                    77:84:d9:51:de:4f:81:16:14:a3:78:60:da:39:6e:
                    57:eb:8a:73:48:2d:1d:2c:9f:97:b2:0a:16:1b:e3:
                    93:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:10:86:3F:8E:26:0B:0F:E4:74:44:B5:64:FD:73:17:1A:C6:B5:EE
            X509v3 Authority Key Identifier:
                keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:21:11:20:79:82:ff:da:58:7c:32:50:8c:1f:31:02:a8:94:
         4b:e9:5d:75:9b:ef:ec:b6:46:e0:2e:6e:d1:27:33:93:01:50:
         93:ee:ca:33:37:5f:e0:04:cf:da:01:55:76:4e:4b:60:75:9d:
         49:d8:cd:5b:b7:0e:ac:45:be:cd:db:3c:07:d4:5f:30:d1:46:
         2e:65:d2:98:63:08:5a:4e:26:40:5e:3b:59:eb:eb:d5:b3:17:
         15:eb:23:65:e5:fe:01:2d:da:61:ce:9c:58:2f:82:64:08:3a:
         ee:f2:bb:f2:38:6c:88:fa:90:a0:19:5e:cb:de:1e:8e:29:08:
         12:ef:80:d5:e4:59:b0:3f:75:fc:fd:75:1d:7c:72:0f:5c:c7:
         4a:98:4c:79:b3:cf:9a:b7:dc:3e:25:7d:cc:d7:62:a5:0b:f1:
         79:0d:0e:38:49:ab:3b:ae:cf:72:4c:cf:85:0a:e2:7a:54:00:
         6e:0a:82:b3:b8:d2:81:6f:ba:44:a1:c6:16:3e:31:05:a7:50:
         a0:fd:d8:53:7a:57:56:2a:80:84:00:c4:fd:bb:aa:81:1d:ef:
         2d:b5:82:e4:73:ad:a5:5a:7c:c0:d4:0f:da:72:3e:58:59:ce:
         a9:aa:78:f3:eb:d9:61:3e:0f:a4:7b:a7:ec:1f:7e:f3:ac:c8:
         46:41:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:37 2026 by rpki-client