Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
File:                     _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json)
Hash identifier:          CzNQb3w0CNs8coWfVVbQgAzW7MoHh11tqC0l5ptws9s=
Subject key identifier:   FF:46:7F:56:66:B6:4A:36:AD:9A:5B:9F:9F:4D:16:57:E2:5C:25:CB
Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
Certificate issuer:       /CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Certificate serial:       019FA974D99B7AF4C790D2714FE96C94A3A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
Manifest number:          0335
Signing time:             Tue 28 Jul 2026 16:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:35 +0000
Files and hashes:         1: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: U+Zmhai2XFCgnJ8CAmiOLh11RSHv2q79eGVXILmidRY=)
                          2: yncM80S6bhOyfcIc9bG9ql3nGdU.roa (hash: CZfd/HDwLXxhrOBjFBJhlZr9g1pP76QO2+w7mQygA1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:d9:9b:7a:f4:c7:90:d2:71:4f:e9:6c:94:a3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779
        Validity
            Not Before: Jul 28 16:00:35 2026 GMT
            Not After : Jul 29 16:00:35 2026 GMT
        Subject: CN=ff467f5666b64a36ad9a5b9f9f4d1657e25c25cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:6f:44:51:ef:65:52:8d:85:19:7e:a0:1b:
                    15:a9:1b:6b:b9:cb:9d:f1:65:96:20:b0:ed:1d:fd:
                    47:5b:42:69:99:75:9e:3c:cb:ed:c9:65:46:f5:66:
                    a0:95:f3:8a:ec:f9:cd:d8:30:61:90:e1:c9:61:96:
                    56:5b:75:db:0b:00:2d:e2:55:06:b7:a2:f7:5e:82:
                    ea:ff:e7:d7:3c:40:e0:38:c3:fe:f0:25:2d:48:da:
                    6a:0e:27:44:c4:02:3d:1b:a9:e3:eb:d7:6f:98:51:
                    9e:f6:9b:92:6a:1e:1e:fe:a4:57:03:2d:d8:13:f6:
                    4b:d9:71:e9:e4:0f:f1:60:ce:59:4c:40:f4:e8:af:
                    eb:83:27:c3:6e:10:04:cf:a6:4c:59:18:ef:5b:2d:
                    0e:4d:2a:07:ed:94:1c:06:fb:f2:fb:b2:70:2a:5b:
                    f9:39:d4:73:8e:fd:85:5e:18:e3:86:7d:57:b0:06:
                    38:d9:47:d0:4f:85:da:1f:ea:6c:95:99:d0:5f:10:
                    e3:65:8c:8f:33:32:81:eb:01:2b:6f:89:cd:a3:ee:
                    67:82:88:64:c0:99:9d:2d:dd:54:40:77:12:65:ba:
                    29:71:dc:34:36:2d:a5:25:e8:21:5d:9e:c8:c9:e8:
                    7e:fb:b2:f5:67:fb:8b:b3:0e:cb:11:e8:ac:3b:e6:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:46:7F:56:66:B6:4A:36:AD:9A:5B:9F:9F:4D:16:57:E2:5C:25:CB
            X509v3 Authority Key Identifier:
                keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0e:aa:12:9d:e9:e0:8f:db:b0:fe:f3:bf:a4:f4:02:f8:8b:
         0f:4d:5f:2a:93:da:d2:b5:b4:7e:5c:90:12:86:03:6d:b4:e2:
         52:0a:74:28:e5:68:8d:90:d0:24:5d:57:dc:71:d6:b5:6d:c5:
         81:f4:55:52:fa:77:53:34:21:6e:82:32:3a:aa:ac:3d:53:47:
         d5:81:ba:63:e5:61:3e:4d:af:5c:82:6c:d4:e2:ed:30:2a:60:
         e5:78:5c:3b:7e:2d:ea:e7:df:d7:ed:e2:3a:57:11:bf:d5:02:
         71:88:d4:1b:ac:9f:fc:ec:08:c8:ec:c7:d3:62:ae:55:39:6b:
         4a:f8:8b:e1:fd:14:ab:f8:ea:36:ef:18:2b:99:78:60:cc:40:
         63:1d:81:38:98:2e:c9:00:35:2c:df:9b:bc:e7:19:c3:4b:33:
         9e:7b:2d:c3:38:fa:07:c0:1e:24:6e:96:b2:43:b6:e0:1e:f1:
         b6:f8:28:d5:bd:74:d1:0a:7d:28:de:53:b6:34:1e:67:fe:88:
         f5:0d:55:f2:ce:58:8c:a2:30:dd:5c:04:1c:d7:3e:ab:36:16:
         34:79:97:4c:dd:e7:6a:cb:5d:cb:66:48:68:91:e3:19:49:be:
         96:0d:21:aa:03:28:7a:e6:97:43:9f:f7:00:86:84:d0:6b:45:
         7c:45:85:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:40 2026 by rpki-client