Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File:                     uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier:          Fo/s/wFlBpzTarZOfJpV7t/yf8V+pHK7XZrKSwOP6sg=
Subject key identifier:   FB:C1:DF:38:23:A5:88:16:C3:99:DE:07:92:08:70:D6:0C:2F:47:41
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer:       /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial:       019FAC3F03B317DEE7E2461C098E270EAB86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number:          17DF
Signing time:             Wed 29 Jul 2026 05:00:38 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:38 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:38 +0000
Files and hashes:         1: 0sG02fRT--XJolYuZ7_jXyMamw4.roa (hash: YsaXqtsrHkKSzKqIrNyEZ6rkNj200yF1XlYMTQ9by/Q=)
                          2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: 64z7pkBIjkjFY/55wc3v7JmPIvcSbMP7zJsrkdBFQis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:03:b3:17:de:e7:e2:46:1c:09:8e:27:0e:ab:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
        Validity
            Not Before: Jul 29 05:00:38 2026 GMT
            Not After : Jul 30 05:00:38 2026 GMT
        Subject: CN=fbc1df3823a58816c399de07920870d60c2f4741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:e7:ee:e6:29:98:6c:5c:27:7f:20:26:03:
                    e2:ef:22:d4:7b:3a:be:af:f6:00:d8:2c:d0:72:cb:
                    00:f4:65:6c:9f:04:ea:5c:f3:7a:75:0b:95:48:ba:
                    b4:05:22:d6:b0:11:03:69:4d:29:9b:21:1e:64:6d:
                    62:32:5f:62:82:2a:77:92:51:3c:81:3a:aa:7d:d1:
                    ef:5b:a1:59:84:db:e2:5e:16:0b:0d:c0:f4:04:e1:
                    70:36:21:30:25:ba:99:db:87:71:77:9b:c0:6a:e0:
                    1c:6a:4e:f2:5b:c6:7a:40:b1:04:89:4c:37:9d:c9:
                    ca:d9:84:f7:16:ea:3f:5f:a3:92:6c:98:a6:5c:2b:
                    19:18:f6:1f:54:ab:66:68:69:66:91:6d:2b:72:a1:
                    00:91:10:62:cd:fa:6d:60:d6:fd:e7:5f:de:0f:2a:
                    e4:b4:ff:5e:1a:db:69:9d:b4:0e:1d:ef:23:3f:01:
                    05:91:3e:50:cf:9d:de:ad:0a:f7:b2:cd:e8:ba:36:
                    81:14:e6:8e:e5:2f:f8:ac:4a:24:5c:13:55:7d:0f:
                    30:fa:09:45:82:58:cb:34:22:e8:70:6f:0e:d6:4f:
                    f0:9e:ad:0f:04:34:23:1e:9f:36:0d:df:f8:5e:8c:
                    60:46:2f:00:ac:90:fb:68:cf:87:8b:cf:8d:c1:8f:
                    76:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C1:DF:38:23:A5:88:16:C3:99:DE:07:92:08:70:D6:0C:2F:47:41
            X509v3 Authority Key Identifier:
                keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:57:0e:55:f4:81:24:e9:73:52:9a:ec:d4:51:92:ff:6e:
         d9:e3:e2:52:cb:3f:43:29:66:2a:62:ab:ac:8c:31:46:2c:f1:
         14:99:07:f6:22:c0:46:93:ee:4e:c5:98:81:69:a2:fb:d2:a1:
         b5:c5:01:3e:ce:08:71:58:d8:ff:55:c6:ce:f8:4e:e7:5c:07:
         9a:6c:24:84:d1:ed:90:b1:14:ef:06:01:27:fb:e0:50:29:e0:
         82:ef:9d:48:06:4b:b0:a7:e5:ca:d5:8d:e3:d9:c1:1a:dd:2a:
         d1:a6:e4:01:84:c4:2b:3f:eb:b2:8a:e9:4a:0a:1c:11:c8:da:
         c4:0f:3f:f4:ef:b8:80:59:28:13:d1:49:eb:7c:56:8c:65:16:
         7d:ea:fc:6b:04:0d:9f:e1:a2:85:cb:ef:04:81:46:73:c8:34:
         06:8a:ee:97:26:0c:58:1b:00:b2:85:45:ad:8f:0f:9c:58:af:
         d2:e7:41:6f:aa:84:32:6b:e8:62:fa:f1:01:77:36:22:d0:3f:
         45:c8:ce:36:26:9d:8a:3b:df:51:54:e7:c6:66:4e:48:76:cc:
         42:49:59:51:83:5b:3d:75:b5:36:81:2a:63:d1:43:34:55:e7:
         dd:bd:cd:dd:67:15:fc:44:5c:3e:54:a4:83:38:46:b8:95:41:
         ce:41:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:30:02 2026 by rpki-client