Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File:                     CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier:          7Sa6xSlAZ3WOmrOgZCf1346tLjsVThhFqaz2AnnmRKQ=
Subject key identifier:   B6:B7:98:CB:D2:3F:58:CE:4C:82:81:46:F1:64:ED:23:DC:BC:2F:20
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer:       /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial:       019FA906E5E333614B260FF9E8978929422D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number:          042E
Signing time:             Tue 28 Jul 2026 14:00:29 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:29 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:29 +0000
Files and hashes:         1: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: S/zAUvtKmaqKgOBmhQNY6OZWemLhmKn2KjW4kZGVawg=)
                          2: W-m52T0Z08ZrHduyI7qeLJtkavg.roa (hash: 2uTxxd+gJUWVWBJ1knmrNyKxA15WrS87ku3rDDp8keE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:e5:e3:33:61:4b:26:0f:f9:e8:97:89:29:42:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
        Validity
            Not Before: Jul 28 14:00:29 2026 GMT
            Not After : Jul 29 14:00:29 2026 GMT
        Subject: CN=b6b798cbd23f58ce4c828146f164ed23dcbc2f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:f0:38:0b:40:ff:de:ac:dc:36:79:ad:8d:
                    6d:9d:59:fc:54:04:ba:da:bd:66:1c:79:12:6d:f9:
                    46:8a:67:30:52:77:0d:91:56:6d:51:22:f4:b0:f9:
                    68:cc:01:7d:40:26:6d:69:c8:d5:2e:78:f4:5d:1c:
                    0d:0c:8e:ce:bd:b7:de:b7:73:6f:c4:51:5b:85:a4:
                    d0:80:c0:f8:4e:b8:05:78:62:8c:ee:fa:e6:71:56:
                    e2:c5:50:41:ee:b0:01:50:2f:bc:de:28:40:7c:7b:
                    ce:5d:3c:c4:91:ff:36:e5:ca:8f:6e:d4:c9:4d:a1:
                    8f:08:3f:6e:0d:5e:af:dc:90:e4:21:b8:c9:0b:fe:
                    1b:14:36:aa:c5:b2:96:d9:27:d1:12:9f:ef:52:6b:
                    91:cb:9a:87:32:8b:da:cb:71:3a:7d:5c:b9:47:98:
                    05:e4:f6:aa:05:c5:02:23:2a:e9:19:08:eb:cb:36:
                    21:d9:ae:a3:6a:12:6c:2d:13:13:96:ff:44:0d:c7:
                    bf:cc:8e:7f:47:f1:59:96:70:fc:b0:95:d9:1c:ad:
                    8e:a3:cb:97:8c:7d:1d:cc:d1:bb:27:39:19:6a:06:
                    59:9e:c0:4f:9d:6b:79:ca:cf:b8:c6:7c:fe:2a:09:
                    0f:4d:bd:4a:f4:e8:40:10:e5:0f:ea:7f:a2:56:52:
                    ad:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:98:CB:D2:3F:58:CE:4C:82:81:46:F1:64:ED:23:DC:BC:2F:20
            X509v3 Authority Key Identifier:
                keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e7:6f:79:1e:0b:13:66:47:b3:d7:1c:ca:7c:fe:48:f2:4c:
         cf:c0:57:cb:75:db:6e:6b:e6:6c:cd:70:4b:8c:3f:ff:f9:7d:
         18:81:5c:30:2f:f1:16:58:39:12:10:f2:53:1c:a6:8a:2c:e1:
         96:1a:75:43:6e:8d:5f:13:e9:c2:65:70:b3:51:58:1c:90:73:
         48:c1:3b:9f:e8:1d:fc:00:ac:07:f5:bc:01:29:37:5d:fc:bb:
         5c:c6:6b:e0:78:9f:52:eb:d3:8f:8e:1b:14:f3:00:d9:6a:25:
         36:44:4a:29:0a:17:0f:ee:2c:cd:b9:5d:3e:4d:a7:04:4a:54:
         78:e8:21:d2:b1:45:2f:6b:89:a2:95:16:c8:3a:37:6d:ab:48:
         13:57:3f:b5:29:5d:3d:16:08:1f:24:11:7a:0a:78:00:09:4d:
         95:2e:0c:5a:c8:0f:9e:11:eb:8b:45:a7:1e:bc:af:48:d1:b5:
         b4:e4:0f:cc:d5:92:73:03:70:e6:be:cd:4f:cf:c3:da:a4:9e:
         02:dd:ce:05:46:76:1c:94:32:d2:9e:12:97:e9:79:24:84:9d:
         32:46:a4:1b:87:dd:90:9e:e3:63:0c:02:ce:9a:fd:8b:70:80:
         77:b3:d3:c2:9b:8b:6d:db:43:15:64:8f:6d:af:17:21:3b:f2:
         33:86:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:31 2026 by rpki-client