Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File:                     1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier:          zM26osDksMd5x3ZR8bMKMhLiLfqpwA97MI4kfAnYUN0=
Subject key identifier:   15:46:3E:FC:9D:3C:A4:09:BC:2D:0A:81:0A:20:F8:8D:C4:2D:B0:0F
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer:       /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial:       019FA8D072C28D51D62ECB54FAF75A9302DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number:          0782
Signing time:             Tue 28 Jul 2026 13:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:00 +0000
Files and hashes:         1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: Ej27a+Ebyo3U1hWJzjekS0oghRG9iM6iKK+/xGKSrfw=)
                          2: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (hash: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk=)
                          3: kMBoN8BIPVWo7lqtxGHBrurWvHw.roa (hash: i1cQsNkY+Ek8/EIGbv2ilZlKDr5/h3NWpJx8CDdeQnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:72:c2:8d:51:d6:2e:cb:54:fa:f7:5a:93:02:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
        Validity
            Not Before: Jul 28 13:01:00 2026 GMT
            Not After : Jul 29 13:01:00 2026 GMT
        Subject: CN=15463efc9d3ca409bc2d0a810a20f88dc42db00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5c:70:49:b1:7a:53:81:d1:01:86:af:ed:ea:
                    b8:ba:da:ad:a3:9b:7f:a8:6c:e2:7e:fd:17:fe:b6:
                    dc:56:f3:28:43:4e:57:2f:9a:53:de:71:3f:1c:3c:
                    37:c1:30:d8:86:49:f8:22:33:db:5f:af:cb:fa:62:
                    49:cb:7f:67:1a:ae:7e:a9:86:3d:74:3a:e1:53:87:
                    8c:a9:cf:b8:3e:a3:22:de:a4:ee:8e:3f:94:56:b6:
                    8b:3b:83:92:10:f3:33:e6:c1:9f:9b:40:e0:72:1e:
                    93:93:09:a2:6a:60:4a:65:33:66:2f:85:86:b4:59:
                    f7:4c:d8:4f:87:93:89:2d:4e:6b:8d:39:b6:2b:4d:
                    b2:4b:72:e1:9a:31:ae:b9:cd:33:c4:04:2f:80:81:
                    b6:af:e8:e7:16:54:87:a2:2d:97:8d:4c:76:67:cf:
                    c8:79:f3:74:61:64:1c:87:98:e7:5d:26:a2:56:44:
                    a1:1d:f3:0d:f3:e7:d2:ae:b1:bf:62:4c:9e:0f:a9:
                    1f:a8:c6:08:3d:25:0a:17:e7:f1:fa:83:91:ad:22:
                    af:7c:dc:35:4d:a3:d3:18:82:d6:6e:20:c7:0a:cb:
                    8f:12:2b:a9:68:74:b4:76:b6:f1:64:ad:9a:b3:3b:
                    0a:18:a7:4d:89:cb:f6:28:7a:e5:14:28:60:3c:03:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:46:3E:FC:9D:3C:A4:09:BC:2D:0A:81:0A:20:F8:8D:C4:2D:B0:0F
            X509v3 Authority Key Identifier:
                keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:e5:43:8c:54:ce:33:78:ab:ad:42:f8:ab:e2:01:63:d8:
         31:5e:c6:21:94:b7:3e:73:a5:be:aa:a7:14:e0:db:1b:ca:93:
         7a:08:09:00:23:a6:95:03:69:6c:4e:36:56:13:56:f1:34:92:
         d6:07:ea:95:a1:8b:11:80:c3:5e:07:b0:d5:87:7c:47:c4:a3:
         fb:be:87:1b:2f:ad:1e:77:5c:e9:5c:15:e0:f8:3f:74:75:01:
         49:1d:a3:b7:2c:07:cb:2d:b8:c1:bf:9d:8a:e8:9c:cb:d5:a1:
         eb:24:c4:a7:9e:37:e3:76:39:f5:73:c4:7e:78:ae:5b:2a:7c:
         83:d1:5a:6a:5a:83:59:d7:00:4e:60:95:b7:d8:0e:78:7d:be:
         96:58:a5:2e:1e:91:cb:cd:cf:ce:b3:96:9a:6f:65:ee:49:df:
         83:e5:47:1b:dc:40:32:23:54:0a:c8:bc:51:15:cf:e1:38:df:
         05:00:59:46:43:b2:52:65:37:26:7a:26:35:03:89:dd:00:01:
         5c:ea:e3:a8:1a:e7:f8:a0:ca:15:37:84:15:b5:8d:fc:4e:43:
         52:c5:f5:7f:d8:3c:1c:f7:55:01:a9:31:53:ad:54:c4:d6:78:
         19:57:1b:5b:01:e9:92:1d:3d:60:62:2c:a1:f9:ab:9a:19:76:
         90:c7:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:08:08 2026 by rpki-client