Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
File:                     b1GlChfEHhkEHD-xCwqDkielyQU.mft (raw, json)
Hash identifier:          jJxb8S1LtQ1O+SbYY0J/3Su3aOCyEEuzZXOqTMGiyA4=
Subject key identifier:   45:52:1C:F4:F7:B2:6E:CB:2B:3B:49:3C:C5:05:70:51:EC:31:92:F1
Authority key identifier: 6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05
Certificate issuer:       /CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
Certificate serial:       019FACAD1772F80B38C6D3B025784E8BFD1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
Manifest number:          0154
Signing time:             Wed 29 Jul 2026 07:00:52 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:52 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:52 +0000
Files and hashes:         1: PZMuJ8QpgBXhv1xbGqZzJ29BgDQ.roa (hash: jrIRAMtDwbYUDnGzpj0BHU287oxSgfwbWoyH7EMZ7jI=)
                          2: b1GlChfEHhkEHD-xCwqDkielyQU.crl (hash: Ewd++UHOp2sJyJlTUQndsz9LfaSVgXptdUbqkus3fq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:17:72:f8:0b:38:c6:d3:b0:25:78:4e:8b:fd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
        Validity
            Not Before: Jul 29 07:00:52 2026 GMT
            Not After : Jul 30 07:00:52 2026 GMT
        Subject: CN=45521cf4f7b26ecb2b3b493cc5057051ec3192f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:1b:ea:12:44:cc:a1:bb:48:42:4c:ed:6e:
                    8f:91:8c:a0:01:57:6c:51:af:16:23:f9:d1:df:ae:
                    95:e4:c4:4a:a8:69:91:4d:3b:80:1e:4f:a9:df:30:
                    e1:0e:38:bc:30:c7:22:07:af:0f:73:de:cc:94:28:
                    31:5a:35:c7:8e:f2:d0:8c:21:15:5d:af:a3:ac:78:
                    79:5b:88:0a:7f:91:b5:72:aa:d0:d2:5f:39:9a:c0:
                    99:a8:5c:bf:b3:60:ba:5c:0a:69:9f:9a:b1:8e:36:
                    c2:1c:3b:22:24:67:52:f9:28:34:ae:68:ad:c1:15:
                    cd:35:e0:98:cc:02:ad:11:ee:a1:c1:67:ad:a0:38:
                    c7:51:e7:0c:a0:17:71:37:48:3c:4a:d0:94:3e:c0:
                    90:a0:5b:0c:23:de:d7:b8:8a:7e:24:42:4b:3b:3c:
                    09:84:62:53:43:90:e0:70:26:3c:a0:e1:a3:30:a0:
                    34:95:dc:ff:b3:ea:cc:09:bb:7b:fb:20:00:f5:bc:
                    ea:29:93:51:49:f4:fb:a3:fd:b2:02:23:5c:4c:50:
                    ec:a3:9f:fb:91:8c:2f:7c:d5:01:5d:92:cb:5b:1a:
                    95:f7:25:4e:b5:40:bf:f4:ac:4a:8c:8e:81:4f:72:
                    59:aa:02:97:26:47:75:53:8e:8f:15:ce:19:b4:77:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:52:1C:F4:F7:B2:6E:CB:2B:3B:49:3C:C5:05:70:51:EC:31:92:F1
            X509v3 Authority Key Identifier:
                keyid:6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:25:3f:95:09:81:78:ed:33:08:d9:24:4c:a2:73:4d:62:a1:
         ad:b7:57:71:6e:ea:c4:90:eb:fd:ea:a1:5e:23:0b:86:09:1b:
         57:37:a8:2d:c3:db:89:11:7f:2b:82:3c:36:d4:23:1f:4b:2f:
         46:6a:1a:70:b3:aa:87:61:b8:93:71:42:ff:35:71:bf:d2:82:
         8f:7c:a2:98:67:13:c3:0c:e7:41:39:5a:10:8e:ef:2c:73:43:
         02:3f:bc:c9:6f:45:71:ff:88:7f:8b:be:8b:d4:ea:ad:24:ec:
         e1:2a:55:00:12:42:0c:ba:20:ba:71:bd:87:e1:68:61:50:07:
         7f:c2:9d:4f:1e:bd:a3:c1:70:a4:ba:3a:23:36:29:61:65:9a:
         e2:2e:d5:3b:4a:30:6e:07:f3:fc:03:0a:15:37:92:68:0d:17:
         8d:0c:b2:07:8b:ce:f9:9d:fe:ef:f7:fd:d9:2b:3d:ab:63:83:
         e1:ee:5d:00:3f:5b:0b:3f:03:85:d4:11:c1:74:44:33:fb:ea:
         0a:23:7f:5b:df:ef:5d:39:e7:7b:30:fb:d7:21:e6:31:fd:6a:
         d2:41:09:49:ad:cc:28:be:55:d0:ab:cd:e1:9a:83:a6:d3:fd:
         3e:08:b2:de:50:cc:5c:9d:1b:96:42:c7:3d:15:72:e2:9a:94:
         02:27:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:36:53 2026 by rpki-client