Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File:                     D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier:          pMjH6Xd3KHyuV46J+o7y6JgwGlC9vEXG0UC9UV3iDKE=
Subject key identifier:   5E:55:10:13:38:57:6A:FA:1E:ED:F7:93:64:BD:09:71:53:42:99:02
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer:       /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial:       019FA93E01C1DCF0A19ECC03EEA1820130BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number:          073A
Signing time:             Tue 28 Jul 2026 15:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:40 +0000
Files and hashes:         1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: rcKj1CVQtZTKROCDJe4olaJ3tx2dFBi5YeMsc9brg4s=)
                          2: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (hash: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:01:c1:dc:f0:a1:9e:cc:03:ee:a1:82:01:30:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
        Validity
            Not Before: Jul 28 15:00:40 2026 GMT
            Not After : Jul 29 15:00:40 2026 GMT
        Subject: CN=5e55101338576afa1eedf79364bd097153429902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a5:bd:e7:f4:ce:4b:34:db:ad:be:fa:54:be:
                    92:9e:c8:c9:a3:d9:01:73:c3:d3:32:c4:a3:65:0c:
                    be:52:be:b9:57:2f:38:0e:cc:57:6a:5c:08:cb:c3:
                    78:33:15:93:a3:94:80:41:00:5f:39:8c:d6:e6:93:
                    cb:23:4c:b7:72:4c:ca:48:9d:d8:8b:15:33:5e:65:
                    a9:33:6c:e9:ca:61:1e:f6:cf:9f:24:09:fe:cb:80:
                    0c:2f:97:0a:df:16:7e:6d:fe:9b:f7:35:7f:80:a1:
                    0f:aa:de:49:07:2e:1b:05:df:cf:d3:03:8e:80:7d:
                    11:f6:07:2e:99:e4:cd:95:76:47:bb:8e:ec:78:f6:
                    f8:50:7e:37:7e:1c:2e:4a:e4:3a:85:a3:72:56:b7:
                    34:8d:1d:cd:96:d9:fa:f8:b6:b2:bc:d9:61:e1:14:
                    e7:04:c1:69:aa:46:3c:4c:1e:9a:42:e8:35:98:27:
                    6b:13:59:f3:cb:85:82:7d:16:94:93:ba:c2:3d:25:
                    33:2c:d4:82:0e:96:85:68:38:d7:99:46:46:fe:99:
                    a9:9d:e5:67:1f:16:01:1c:e5:a7:99:52:63:c3:38:
                    3c:4a:8d:a9:06:07:9a:7a:a9:1f:aa:5f:20:c5:47:
                    eb:f5:b9:17:c3:77:16:bc:4f:9a:1f:79:13:b5:95:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:55:10:13:38:57:6A:FA:1E:ED:F7:93:64:BD:09:71:53:42:99:02
            X509v3 Authority Key Identifier:
                keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:25:8d:12:d4:9a:e1:e9:a5:af:ec:24:93:a0:cb:7e:af:0c:
         8c:2b:39:0c:e9:db:3d:9a:90:d6:d1:7e:31:cc:91:10:8b:43:
         c7:a3:7d:7d:c5:ab:fa:33:e5:53:27:4c:6b:3e:9b:a6:81:75:
         14:f8:51:f8:ee:70:46:9e:0c:36:bc:8d:73:97:93:36:7b:ff:
         6b:02:62:c3:43:bb:e0:74:0d:c6:e3:62:9d:d7:a5:08:98:12:
         18:20:1a:64:b4:1d:ad:d1:42:ec:d0:57:71:a4:44:2f:99:e4:
         56:33:ed:90:03:d0:90:6e:91:55:7e:f0:c4:ae:9a:48:d9:6c:
         bd:dd:41:fa:74:3a:21:a7:05:ee:05:a3:f5:c8:01:fd:10:f0:
         90:89:6f:e7:6f:65:b5:e1:de:37:29:59:6d:22:1c:8e:7a:00:
         d4:0f:33:9c:28:e0:90:8f:94:ec:e0:66:96:ca:46:e5:bc:48:
         12:fb:56:c2:ab:10:3a:35:5c:ea:12:57:1d:4c:3f:be:c0:0b:
         27:b9:6c:fa:08:ce:1b:04:2c:94:16:5a:13:11:ff:16:00:70:
         21:b7:ea:62:8f:31:a0:3b:a9:e1:44:bd:02:8d:ef:d8:fa:50:
         9c:a6:ea:bf:7c:94:d2:7d:ba:d7:b8:cc:a0:d4:69:ee:ce:0f:
         ad:ae:e7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:12:40 2026 by rpki-client