Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File:                     RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier:          PjSHDqHjl8PQ4dEdW3RDz+omuxa7LwXfXHk0tqTfiLw=
Subject key identifier:   BC:A8:AF:35:45:19:E0:79:B0:F2:4C:B2:32:F1:35:26:39:52:62:D3
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer:       /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial:       019FAAF51CA787FE0A2DE2E8D85CF5CB8CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number:          0FBE
Signing time:             Tue 28 Jul 2026 23:00:17 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:17 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:17 +0000
Files and hashes:         1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: dje/UiijYN7JNgLtfYzPB/dxkSAHqV05CITbXVjtSFE=)
                          2: nileVr-DQfSJAZFmbcbQEtK8Yk0.roa (hash: 9mZq8h73P9FU0Z0VCgdb2KmGquLGZE66QT5Z6ZqwuxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:1c:a7:87:fe:0a:2d:e2:e8:d8:5c:f5:cb:8c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
        Validity
            Not Before: Jul 28 23:00:17 2026 GMT
            Not After : Jul 29 23:00:17 2026 GMT
        Subject: CN=bca8af354519e079b0f24cb232f13526395262d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:80:f3:41:42:7c:67:11:07:2d:11:c7:71:b4:
                    33:d4:b3:46:69:7d:a3:82:a6:3a:dc:0f:3f:fa:c7:
                    22:e6:97:f5:07:e7:6e:a0:32:b2:93:e2:ce:4e:35:
                    c2:6c:74:d0:97:2e:c3:52:f3:5e:d7:77:b4:37:af:
                    b3:a1:ca:90:19:67:c9:aa:23:83:8e:ba:6d:8f:79:
                    56:25:6a:c6:a8:d5:4f:9f:82:e5:bb:1d:fe:bc:9c:
                    b5:9e:79:8f:7e:66:40:13:ec:c2:fb:0e:02:96:cf:
                    a7:63:92:8a:eb:36:18:9b:50:40:76:4c:6e:51:bf:
                    c1:c3:26:85:86:90:df:56:ad:b5:ac:2f:c1:f3:ae:
                    65:fa:53:62:15:69:b1:bc:b6:95:87:c1:f1:67:cd:
                    7c:80:a4:28:99:e3:f5:a4:82:3c:ee:35:88:99:fe:
                    99:d6:bf:d9:79:c8:64:ee:8d:32:23:ad:7c:2b:b2:
                    26:ae:39:cf:34:14:b3:b2:b5:26:db:91:85:66:7c:
                    3d:c7:96:c4:ee:a9:9b:59:a2:41:31:a7:86:09:0e:
                    78:2c:ee:36:5b:e3:3d:e8:82:35:5d:4d:47:85:ff:
                    ae:13:41:a6:d3:e6:0a:b4:9a:c8:cf:38:d6:4c:b1:
                    3d:8f:25:46:ed:44:10:76:14:3f:b8:e6:35:a2:75:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A8:AF:35:45:19:E0:79:B0:F2:4C:B2:32:F1:35:26:39:52:62:D3
            X509v3 Authority Key Identifier:
                keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:21:53:67:6c:bc:ee:56:0b:33:d5:d3:86:73:9f:de:23:2b:
         54:e6:d9:30:92:f8:5c:fc:c5:08:5a:04:1e:49:09:50:90:fd:
         ef:09:87:24:4a:d9:4a:dc:df:de:a9:a2:32:9c:9c:fd:f3:1b:
         c8:32:14:3f:45:d2:4d:33:87:36:e7:ca:e8:c3:97:f6:0f:15:
         4a:fc:29:47:5a:47:bf:40:f7:80:4f:b9:20:b8:88:3f:f7:0a:
         00:c3:57:eb:58:d9:f2:d8:0b:ea:c0:19:5a:b7:5e:a0:f6:0e:
         2e:54:33:64:8d:d6:18:cd:71:ea:7b:c5:4d:06:ec:23:75:6a:
         35:26:0d:ab:9c:92:33:bb:77:a3:c2:83:23:04:ea:aa:84:aa:
         fc:04:5e:9a:6e:68:28:b0:ee:c5:61:9a:93:8a:89:19:b8:e7:
         cf:cb:c3:27:fb:26:bd:1a:23:93:da:e3:42:e0:fd:15:a9:05:
         03:cd:27:c4:a6:ab:bf:ca:90:13:fb:94:92:94:d1:dc:63:fc:
         34:bf:17:9d:1e:45:97:63:a9:66:70:87:ce:07:72:71:fe:8b:
         de:f0:df:0a:3b:f1:b5:5c:3f:52:96:3a:93:2d:3c:a8:43:4d:
         f6:e4:b3:93:57:70:0e:86:1c:dc:1b:5c:5e:e6:c7:7c:d0:32:
         0d:c1:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:23:45 2026 by rpki-client