Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File:                     n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier:          Hxv3RqgzrYeIYyJVFJ6t0uK6F9daskAGtRQYoSNB/GQ=
Subject key identifier:   C5:FA:A8:B4:69:12:45:21:A6:DA:17:98:18:63:34:97:8D:33:42:54
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer:       /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial:       019FAA1A90215095EEA363574A080F05A87D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number:          04FC
Signing time:             Tue 28 Jul 2026 19:01:35 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:35 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:35 +0000
Files and hashes:         1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: Xp8yNpGYAvUxBtq8s4VjjIfftqlHlY9ywgoF23BrkIY=)
                          2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:90:21:50:95:ee:a3:63:57:4a:08:0f:05:a8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
        Validity
            Not Before: Jul 28 19:01:35 2026 GMT
            Not After : Jul 29 19:01:35 2026 GMT
        Subject: CN=c5faa8b469124521a6da1798186334978d334254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:74:f4:58:9c:02:51:7f:54:b9:24:d7:80:
                    27:4c:36:fb:95:1a:b3:ac:b9:dd:9a:9c:53:f6:e4:
                    45:10:2f:9c:14:13:c7:be:b6:31:04:62:d9:db:81:
                    d8:80:0a:40:76:68:54:36:6d:b6:8a:35:cc:20:e7:
                    c1:12:1f:a5:68:75:fc:dd:c2:b9:74:fd:6b:29:32:
                    35:cc:b6:af:a2:5d:db:1a:18:23:f5:df:d2:af:1d:
                    a4:c4:4d:14:2a:20:4c:0a:7f:0a:94:3a:e4:e3:9b:
                    3e:15:d4:a0:96:01:f3:ec:ba:76:b1:20:27:17:ce:
                    27:b4:94:ba:a1:c0:eb:ed:58:3f:3f:2f:26:21:20:
                    12:89:49:d4:ab:16:10:dd:af:df:a2:45:0a:c8:6c:
                    0f:87:16:fe:5c:0e:b5:94:5c:e1:89:35:ad:2a:37:
                    80:38:03:cb:f8:b2:23:e9:6b:44:1c:bb:66:13:21:
                    fb:56:bb:57:63:da:05:44:5e:b4:63:56:26:1e:0f:
                    26:e9:e5:ad:db:0a:d4:94:b7:4c:b4:d4:00:c9:74:
                    d1:ab:bf:33:3e:7c:3e:c8:f0:46:32:0e:84:8a:28:
                    27:21:aa:8e:b9:54:3a:8d:2a:15:17:66:b1:27:9e:
                    43:b8:b9:b1:e7:ba:a8:2d:7a:0e:ff:8d:34:ad:97:
                    9b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FA:A8:B4:69:12:45:21:A6:DA:17:98:18:63:34:97:8D:33:42:54
            X509v3 Authority Key Identifier:
                keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f8:fa:b0:12:ae:74:fb:99:29:94:02:bd:92:3e:52:b8:2d:
         f3:52:9d:7a:4c:51:0d:e9:22:8e:73:d3:3b:31:e6:5b:cc:11:
         14:92:3f:4a:03:8a:6d:de:cc:91:13:7f:61:24:37:bf:70:cf:
         3e:f0:9d:9f:d3:22:f9:eb:ea:5b:99:bd:38:02:51:57:0f:2a:
         4e:7a:69:78:04:95:3a:07:d5:da:24:b8:65:53:d9:70:9f:24:
         0c:02:9c:b9:4a:70:f5:ef:aa:3b:69:5c:24:a7:2b:0f:83:83:
         13:80:07:21:b3:ec:cf:66:55:73:9b:ea:98:d6:8a:74:b1:70:
         8a:91:b1:bd:f1:df:4c:f3:e9:ef:c1:3e:87:93:af:67:b9:de:
         56:51:22:04:35:87:5a:6d:a2:84:d1:57:cd:2f:83:23:62:6f:
         b7:eb:45:b6:83:12:a7:dc:2f:60:2f:c3:8c:b0:12:ca:ce:40:
         94:28:14:4a:24:c8:54:22:2c:fd:8b:b2:bd:45:a2:10:63:96:
         80:e8:9f:56:ae:ab:f7:f2:e1:df:c1:eb:6e:68:c2:f4:ad:0f:
         0f:1d:fa:ad:c6:a1:8c:3d:29:45:07:23:a0:b4:9b:b4:2c:2b:
         32:3f:2e:a6:72:8e:0a:34:f8:29:3f:d1:cf:49:ed:aa:5e:6a:
         e2:7a:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:49:31 2026 by rpki-client