Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File:                     jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier:          vuRJfL3lTYVqTN0SsmCYOKBKav9PQ//BH0OlH1dyW1Q=
Subject key identifier:   3A:B0:BA:0B:42:94:6C:64:D0:5E:72:9D:0A:95:D0:A3:FD:CC:BE:BB
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer:       /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial:       019FACE3F6437AC82AF02469B63E4C96F9C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number:          0F05
Signing time:             Wed 29 Jul 2026 08:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:48 +0000
Files and hashes:         1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
                          2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: LoxvufFCKRXWaaZE973C/BgSoblR/TZl9jSbcERbYds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:f6:43:7a:c8:2a:f0:24:69:b6:3e:4c:96:f9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
        Validity
            Not Before: Jul 29 08:00:48 2026 GMT
            Not After : Jul 30 08:00:48 2026 GMT
        Subject: CN=3ab0ba0b42946c64d05e729d0a95d0a3fdccbebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:cc:a5:eb:74:c3:a2:79:54:7d:9e:15:ac:
                    d8:fa:bf:ed:e3:4e:eb:9c:2c:2b:3b:35:ee:5e:ac:
                    15:e2:10:c7:c0:19:be:24:06:30:71:d1:8a:64:07:
                    2d:b9:72:4b:04:fc:f1:d4:39:d8:c2:1c:b5:93:dd:
                    9d:75:5e:6e:37:85:53:a5:05:59:d1:8d:1b:6a:f0:
                    36:b0:d8:54:db:3c:ac:e0:d3:51:98:74:df:e2:66:
                    08:6c:e1:de:84:bc:13:cf:4f:ec:ad:a5:db:c9:21:
                    6e:f0:7e:de:81:9e:95:54:9e:bc:e4:d4:0a:73:76:
                    69:5a:ac:04:85:44:39:59:00:38:a9:b4:24:47:46:
                    68:26:38:ed:8a:9a:17:c5:06:51:be:b0:c0:43:29:
                    01:93:28:ef:3f:f3:34:d6:8d:fe:4f:61:07:dc:f0:
                    df:b3:70:18:19:92:12:83:a9:f0:0d:b2:d4:34:ab:
                    5f:41:d7:33:3e:37:43:8f:63:94:85:4b:66:a1:ed:
                    9f:b1:9a:93:9b:be:30:ca:c4:91:e5:cf:e2:0d:e5:
                    a7:f0:f2:a9:90:f3:09:0d:fb:00:49:2e:2a:c0:87:
                    cf:22:69:61:d4:a0:74:78:f1:f8:d5:0f:5c:48:3e:
                    6f:34:09:03:ea:97:f5:d3:b7:9a:a4:98:33:29:3b:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B0:BA:0B:42:94:6C:64:D0:5E:72:9D:0A:95:D0:A3:FD:CC:BE:BB
            X509v3 Authority Key Identifier:
                keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a5:8a:cf:62:5b:16:2e:98:88:11:55:e9:aa:9d:79:3a:37:
         fb:12:f9:3a:d0:39:54:a7:0a:06:e4:d1:4d:92:e8:a9:dd:f0:
         40:2a:69:c9:28:fd:18:68:e3:b5:07:54:1b:66:b8:f1:aa:e9:
         26:ba:3c:47:a8:8e:28:33:92:38:0d:a2:b1:8c:db:88:ef:68:
         77:06:99:f2:21:fa:a1:f9:f0:73:02:20:e3:5f:d6:53:7f:e5:
         c3:b2:df:85:b3:b4:21:15:e3:5c:ea:5e:32:17:79:f8:b0:64:
         3c:82:ee:0b:b4:ed:05:09:00:fb:cc:c5:c1:a6:ed:a8:43:69:
         f3:dc:53:51:cc:a9:a4:07:d1:da:23:dd:f0:ad:41:46:b8:dd:
         b9:26:9c:20:60:e7:5d:9d:7e:94:35:f8:0b:1a:77:3c:e4:84:
         cf:52:a7:e5:33:da:fc:4e:2a:7a:3a:e6:c5:96:fb:22:d6:5c:
         c5:f3:51:e9:e1:59:6e:de:6b:2d:bc:07:20:1d:86:e8:c7:b0:
         5e:43:bc:cd:05:fe:35:b9:68:ac:07:9b:4f:fd:80:de:9d:cb:
         4f:c1:bd:15:7f:2a:e1:23:a7:20:27:31:5e:ea:14:79:0b:af:
         fd:95:8f:27:56:57:d8:6c:27:ce:a1:23:4a:92:1d:56:ac:dc:
         00:e3:24:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:56:29 2026 by rpki-client