Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
File:                     A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft (raw, json)
Hash identifier:          Gob6XsECkadIykzLpMuqFK9ja1vEuEciz+OovnVWrW8=
Subject key identifier:   CD:2B:6F:5D:B3:89:5A:F3:BF:18:C9:08:34:CC:5B:12:E7:5A:A0:D0
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Certificate issuer:       /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial:       019FAC07E53A96CEAAAC4DF21EFD5F06D2DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
Manifest number:          0F49
Signing time:             Wed 29 Jul 2026 04:00:26 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:26 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:26 +0000
Files and hashes:         1: A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl (hash: mtZkXDiL5WHVf8NpJEN4sRELaRFuq8eY9iXPmIfo9P8=)
                          2: C4TjoCiDAIHZJLpHspSmOdt85Xg.roa (hash: A/LLN5HhUXOKlpiuzUmJmRk4WVYFkDvzFOwGpbwT6DU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:e5:3a:96:ce:aa:ac:4d:f2:1e:fd:5f:06:d2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
        Validity
            Not Before: Jul 29 04:00:26 2026 GMT
            Not After : Jul 30 04:00:26 2026 GMT
        Subject: CN=cd2b6f5db3895af3bf18c90834cc5b12e75aa0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:1f:0c:da:e7:c0:38:3d:63:a9:9b:47:3d:
                    2c:22:09:38:1a:ef:1c:47:cc:8c:97:9c:80:a6:d2:
                    43:26:3e:5d:a5:22:64:8e:cd:37:a7:0a:b9:f3:e2:
                    63:4b:5e:5c:87:3a:09:30:20:47:d0:07:24:dd:50:
                    12:79:a4:df:54:7f:0d:81:c9:37:8b:d1:e0:63:17:
                    11:74:ef:f2:31:56:ad:c2:e1:68:b5:26:72:a6:bd:
                    85:fa:3a:69:a3:01:0d:01:5d:2b:bc:da:c2:0a:4f:
                    0b:fb:c7:13:96:a8:95:68:ec:d7:5a:ed:35:16:8b:
                    96:bb:35:35:8a:30:98:3a:42:9a:36:76:18:88:f6:
                    a7:65:cd:22:bd:dc:91:d8:b3:ac:39:37:34:ad:2b:
                    0e:68:3a:09:e4:48:a3:43:7c:fd:64:ea:69:ab:47:
                    4f:6b:61:87:3c:f2:03:91:e2:e2:1a:74:41:88:29:
                    92:69:71:4f:90:6c:86:5f:67:43:b4:47:e2:8f:ef:
                    ac:42:48:8c:51:09:98:a3:c6:5d:dc:73:b6:43:a4:
                    95:b4:8a:ba:43:e7:67:72:98:5a:47:86:cd:80:a8:
                    64:22:fd:30:1a:a4:73:51:c7:cc:42:8c:10:88:99:
                    8a:cd:b5:03:f4:a9:d0:09:3f:cb:0f:7a:74:3c:c3:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2B:6F:5D:B3:89:5A:F3:BF:18:C9:08:34:CC:5B:12:E7:5A:A0:D0
            X509v3 Authority Key Identifier:
                keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:18:c5:1c:56:09:d8:74:e7:2c:dc:90:19:c3:2a:c6:57:47:
         aa:83:92:f6:db:77:b3:6e:50:f2:7e:b6:ca:4a:a0:4b:cc:26:
         b3:cc:26:1b:3f:71:bd:31:82:07:f5:56:8a:4b:3d:d1:11:5d:
         8a:99:af:0f:8a:00:96:6a:b1:3a:a4:e1:12:27:34:30:33:15:
         c2:3a:f8:7d:89:ab:16:92:15:f4:e2:d6:3e:0e:6f:22:6f:ca:
         d2:34:20:df:e3:e5:1d:cf:d8:d4:ac:55:ea:d1:c6:4b:f4:f8:
         a7:ee:1b:ca:15:df:48:9b:67:03:40:c5:8b:94:33:08:03:e0:
         df:b3:8e:5b:66:ab:f4:7f:b8:08:95:3c:00:0f:f2:f2:1e:9f:
         18:88:42:79:c3:cd:a9:b7:86:40:7c:c8:24:4b:43:fb:5e:58:
         fa:d2:a1:f3:81:f8:20:fb:23:a1:77:16:d4:ca:37:41:c2:cb:
         09:59:27:59:0d:f0:f3:b8:3c:41:cd:73:35:ab:c3:c2:d1:10:
         48:a9:61:40:6f:c4:df:64:87:7c:46:9e:10:bd:54:fc:7d:4f:
         3d:d0:e3:16:14:f1:20:b5:19:63:18:8d:d9:47:b3:f9:67:4a:
         68:7b:79:17:c5:b6:ab:14:60:b1:b3:c8:67:33:b5:1b:6a:bd:
         38:49:9f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:11 2026 by rpki-client