Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File:                     X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier:          lI82yMF4h2rjbelFDt5XMcR/eWQfhzCI2Rul+1exMFI=
Subject key identifier:   02:C4:7A:D2:65:18:52:8E:D9:65:F4:8E:19:DA:C0:5E:49:AC:FE:1B
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer:       /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial:       019FABD13F1182E3A81CAC0300DCEEB62203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number:          07FA
Signing time:             Wed 29 Jul 2026 03:00:44 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:44 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:44 +0000
Files and hashes:         1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: pY95slxUC3MN0MWsHsgpeNwKADxO5PU6CEu0YjYzN04=)
                          2: hZfrHQXQ9gJ1CBuZbvb4HTnn7x8.roa (hash: s7Q9n6FVyTwioyvvcuH0Je0WpF9fajbCSSnTwOxPywE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:3f:11:82:e3:a8:1c:ac:03:00:dc:ee:b6:22:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
        Validity
            Not Before: Jul 29 03:00:44 2026 GMT
            Not After : Jul 30 03:00:44 2026 GMT
        Subject: CN=02c47ad26518528ed965f48e19dac05e49acfe1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ed:9a:b5:9c:93:78:69:a9:c9:19:39:17:74:
                    83:76:b7:fb:66:a5:e2:b8:cd:24:98:8f:00:c6:b4:
                    2a:35:6e:8f:d2:b7:94:4e:62:e3:69:b6:2f:65:db:
                    06:e2:3c:1b:4b:59:60:fb:3d:43:63:90:50:78:05:
                    40:47:48:ac:5d:ae:3d:6e:64:b2:ec:74:18:cc:35:
                    c3:0c:f7:3d:2e:a1:31:33:e6:2a:81:7d:ed:e6:c7:
                    d6:f1:b3:a2:37:5b:68:75:90:89:8c:e1:d5:5d:ba:
                    25:a4:6b:83:bf:80:a0:83:63:4f:ac:31:35:73:22:
                    6d:0f:bf:25:91:84:c3:e9:51:00:96:b3:bc:17:2a:
                    22:57:fc:57:b1:03:b7:c5:41:e3:f6:57:24:a9:ac:
                    cf:3a:4a:6e:08:40:4b:5f:95:3e:14:ed:b6:8c:25:
                    77:70:37:f5:ee:1c:a0:87:c4:ca:0d:59:b2:3e:9a:
                    10:7e:31:a9:40:55:9d:af:ab:02:eb:fa:68:84:ce:
                    6a:2c:0c:15:53:91:1f:11:69:e3:29:82:11:f1:e6:
                    57:32:c8:03:d4:63:2d:b5:5b:1f:98:f2:9d:db:b7:
                    e7:c7:dd:0d:1f:a0:69:6b:a1:08:a4:62:5e:a8:ca:
                    f4:59:5c:0c:59:f6:04:05:18:7c:6f:aa:69:d9:b7:
                    4e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C4:7A:D2:65:18:52:8E:D9:65:F4:8E:19:DA:C0:5E:49:AC:FE:1B
            X509v3 Authority Key Identifier:
                keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:76:a8:68:8e:4b:0f:35:d2:1c:86:bf:1c:c1:a0:c6:7c:76:
         22:54:67:61:ec:c1:b0:7a:1c:e9:f6:d4:2e:fc:14:8f:3a:ee:
         ed:46:08:54:80:f5:de:02:14:da:b5:9e:62:20:cf:b3:f1:ea:
         f3:01:7c:92:e5:27:3a:47:60:0a:2e:bb:cc:ca:94:c8:8e:24:
         09:e2:5a:1c:a7:71:01:5b:32:f3:9e:ee:0e:24:b1:e5:23:b8:
         cd:06:17:4d:aa:30:8b:cb:97:11:c1:86:e3:ff:2c:ca:37:64:
         c9:df:a6:df:6d:6e:ca:33:53:11:d4:aa:cf:b4:38:39:5d:2b:
         8f:95:76:fd:7c:27:22:2e:e4:db:34:d7:f9:3a:bc:b5:e9:76:
         7d:85:2b:46:5a:4c:05:99:98:c6:df:b0:00:33:f5:21:e1:46:
         58:76:38:dc:8e:a6:b7:2e:e4:14:80:a2:59:cb:97:79:84:df:
         df:72:6e:51:25:84:06:41:40:91:2e:a5:58:3f:ff:57:99:fb:
         79:43:9a:43:f2:6c:83:69:0b:62:1d:44:71:ad:c4:c7:78:58:
         18:31:70:e7:73:c1:65:7e:77:a7:1a:27:ea:52:56:bf:eb:9a:
         eb:07:35:86:b5:e8:6a:60:b4:d6:c7:f8:eb:7b:e2:93:04:f1:
         1c:76:e9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:34:43 2026 by rpki-client