Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File:                     ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier:          Z0rlUjjur7WiyDb1SMgZNWTwlc4nbrAf1fjJS8O+0sA=
Subject key identifier:   FC:75:99:93:2F:08:C8:A7:C9:33:37:35:7E:6A:C1:B8:D3:B5:4C:F5
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer:       /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial:       019FA9749BBBCB9270CB96357EC50F24AE69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number:          1047
Signing time:             Tue 28 Jul 2026 16:00:18 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:18 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:18 +0000
Files and hashes:         1: 9pE-MzpxUWjMwN57topeGGEUf_Y.roa (hash: +r9c8Shr2KLHGQZe5b0OVCErW9cr3Dze6HgtdQg6FcU=)
                          2: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: 0n/hoDNZqvkKlFGn73IhEIFgkonHZgfzj8ozt06QQmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:9b:bb:cb:92:70:cb:96:35:7e:c5:0f:24:ae:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
        Validity
            Not Before: Jul 28 16:00:18 2026 GMT
            Not After : Jul 29 16:00:18 2026 GMT
        Subject: CN=fc7599932f08c8a7c93337357e6ac1b8d3b54cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:d8:00:58:77:d3:4a:79:24:a6:71:ba:10:
                    f1:14:26:e3:ae:12:f3:6e:18:8a:4e:db:31:67:81:
                    ae:7d:1d:9b:24:2e:74:29:84:1f:bb:4c:08:58:e8:
                    b2:3e:74:f6:2a:fc:cb:11:19:87:92:61:09:0f:30:
                    1a:ce:f0:09:ea:a8:b6:91:12:8a:b2:73:3a:ba:05:
                    21:8c:c1:67:1e:50:e6:6b:1b:ce:8a:2a:f7:b0:d7:
                    21:0f:9f:72:21:e6:ce:ef:55:01:34:02:9c:59:60:
                    ff:d4:b6:3b:b1:f2:4c:6b:5a:b9:d8:ea:ee:86:a0:
                    09:f5:d2:43:7f:81:a0:b1:02:26:aa:49:9a:7b:85:
                    eb:72:eb:5e:43:a9:f1:8a:41:a7:95:49:20:40:0a:
                    84:0e:c5:46:cb:e3:22:60:d4:70:56:1d:1d:73:32:
                    98:40:0f:3e:9d:76:b8:ba:60:39:1d:4f:bc:91:10:
                    76:3e:c2:15:8e:e3:68:c6:9c:aa:2d:c9:63:da:32:
                    26:3d:66:af:9d:f6:2e:f6:45:09:ef:88:1b:5e:6f:
                    1e:e3:41:78:53:c0:b0:de:9c:33:ff:3f:a2:39:cb:
                    6e:ac:b2:00:95:aa:f6:5c:a5:be:f3:e8:16:75:7c:
                    21:b9:14:28:ba:ed:3d:18:b0:69:74:41:5c:fc:94:
                    f9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:75:99:93:2F:08:C8:A7:C9:33:37:35:7E:6A:C1:B8:D3:B5:4C:F5
            X509v3 Authority Key Identifier:
                keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5b:3a:b5:5f:b5:e1:3a:9a:fe:e7:94:2f:44:5b:44:64:57:
         cd:79:97:f6:12:4d:89:c5:bc:67:6e:f4:e0:07:fb:93:9a:66:
         a6:15:20:3a:5a:1b:0b:db:b9:71:be:78:48:18:b3:d9:74:a0:
         30:51:08:ea:17:88:2c:d7:1d:d6:b7:cf:33:5e:c4:d4:e2:b0:
         07:9f:f6:a5:6e:df:a6:cf:3a:e2:b5:67:e0:11:47:04:37:8c:
         4f:be:5c:ed:97:5e:c8:64:65:ff:11:cd:1a:d7:ca:3a:5d:f3:
         88:09:ad:70:75:50:47:6c:47:51:1c:1a:b6:d8:16:df:db:6f:
         56:ca:c4:01:50:c9:3f:00:8b:b3:a3:f3:51:8f:49:ba:ab:c1:
         99:91:c5:18:e3:57:c4:3c:3c:6b:a0:7c:7c:06:50:90:af:42:
         6e:8b:22:82:93:67:3e:d6:92:6a:f1:34:26:da:67:3d:1e:23:
         df:b8:9e:f9:92:59:1f:d5:a9:e5:05:12:6b:ed:43:ce:a7:5d:
         9c:51:09:67:05:36:6e:ea:3d:0a:ec:3a:29:9d:a5:a6:b0:d1:
         91:01:6d:78:b7:6a:b8:32:8f:05:ff:6a:d5:67:2b:a8:16:af:
         b9:08:e5:84:5c:a5:9e:07:78:ec:de:21:a1:c3:d5:12:33:b4:
         66:b6:8a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:31 2026 by rpki-client