Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File:                     B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier:          TN9XY5YggiZTOYykkStQCEUg2rB4eZjzI/D15AUiPcs=
Subject key identifier:   C3:30:01:6C:54:85:97:ED:C0:BB:2D:1D:C3:62:DA:61:57:4B:3C:F4
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer:       /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial:       019FA8CFDF012AE3055E8FBA1C412D308DE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number:          1643
Signing time:             Tue 28 Jul 2026 13:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:23 +0000
Files and hashes:         1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: ghoxm2nojLaJ8CkZoH7HJAyn3vhuXrOMUbomJvdMZ8k=)
                          2: UCT9k6BaPPeSMXxJ43Eo6nZzYW0.roa (hash: H/J8BuCj54OjW0xk7YjG+ivFyPL962N+uW8FPOndTZI=)
                          3: _TmmkOapg5NWp5skKiNnYl4USlg.roa (hash: Ulpzhuvm7D4wY1P9Md05o4W8SIvbcVV+X0rM6EDxDjc=)
                          4: ryiFWbpMuqXbHhTaiUR9Bmksn3I.roa (hash: 4enRDEIE99ZnVUOrH1uVQZLMyVdi+VhTW5RGUgkPXEs=)
                          5: szJDTDjk11lPCTowxUuTkr1LOjA.roa (hash: tZ3E5yp9ifwL77hdiUkOobqFo6CYXkARUapRpbadEZc=)
                          6: tVIvfnxeNd5Q4fCCoef2VPaercM.roa (hash: UsZ5qTmb76xuEbD3sjS7Uzqq6fgKmtSM905Jk8/9DNA=)
                          7: wRtbNPKwzn29lLHL-XgfTc7v1-E.roa (hash: HKr7T3FnocuYvThL/hQV2CDARcO253MaFTxSFktB4b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:df:01:2a:e3:05:5e:8f:ba:1c:41:2d:30:8d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
        Validity
            Not Before: Jul 28 13:00:23 2026 GMT
            Not After : Jul 29 13:00:23 2026 GMT
        Subject: CN=c330016c548597edc0bb2d1dc362da61574b3cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:73:c1:47:3e:a5:8d:3c:85:f4:17:60:50:
                    3c:88:af:f2:35:a5:69:da:16:85:72:e0:b2:54:eb:
                    fb:2c:c2:a3:54:9d:a1:ce:08:29:14:6b:41:75:9f:
                    69:5b:c7:cd:28:eb:e8:ae:05:f1:80:45:5c:b8:9f:
                    1d:c9:c4:f3:f0:ff:fc:96:ef:8f:07:3e:93:e2:72:
                    cb:53:a5:64:45:ed:2f:fa:dc:23:7c:47:a1:c7:45:
                    c8:da:1d:42:98:4f:9f:f6:2a:5a:20:a5:fb:c7:cb:
                    29:c3:6a:73:db:08:a7:ed:6c:c6:2e:83:bb:f8:0c:
                    86:a5:56:03:51:5a:9b:cc:53:f4:f8:b8:d8:39:16:
                    23:a6:26:51:5c:5b:f2:61:43:8b:73:18:15:c8:b4:
                    fc:a2:24:dc:db:57:f6:cc:de:e3:fa:69:11:18:ec:
                    13:d0:62:3b:5f:a5:5d:7c:b1:f5:fb:8d:f9:59:a2:
                    4a:1e:ff:8e:dd:47:c1:fa:b2:80:8d:c7:4c:59:ba:
                    90:4b:e6:ae:25:ad:8a:38:14:c4:98:58:e1:fe:f0:
                    7a:81:7d:18:2b:78:b7:57:97:79:9d:39:9e:0d:36:
                    dc:ec:c6:56:49:db:54:ca:b7:4e:71:b4:93:ad:7d:
                    f2:d0:02:c7:a8:e5:7c:1c:89:04:2f:55:01:06:c3:
                    b0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:01:6C:54:85:97:ED:C0:BB:2D:1D:C3:62:DA:61:57:4B:3C:F4
            X509v3 Authority Key Identifier:
                keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ff:08:8d:85:1d:ef:26:02:4b:c9:1a:31:87:48:c2:e3:53:
         ea:19:cb:68:c2:95:a0:7b:53:18:e4:fd:71:b2:8e:5e:6d:64:
         09:ce:ba:08:7b:0d:c6:94:d2:2a:8c:56:a8:b0:42:37:be:c0:
         d2:08:a1:89:83:f8:10:59:56:72:34:e8:ff:dc:0b:91:1b:49:
         bd:9d:c3:7a:38:f9:35:62:79:de:58:4c:19:02:2c:56:ac:ed:
         99:29:b4:7e:03:35:f0:a5:82:3a:ac:13:6f:b4:dc:86:70:c2:
         3e:d9:b6:5e:0d:28:f3:45:fd:f5:62:2b:f7:c1:34:89:0d:7e:
         a1:69:bf:36:4e:4a:b4:27:67:81:af:fb:48:15:f0:0c:56:42:
         1e:9d:ac:9d:33:41:90:60:90:4c:89:57:28:c1:fe:cb:fa:8d:
         b4:69:b4:ba:91:b1:e1:e1:05:df:9f:59:90:c5:99:a5:7d:f5:
         7a:7f:87:c3:04:05:a0:9b:e1:cb:60:b4:31:ae:ec:f6:35:af:
         77:63:70:d4:5c:22:2d:4c:99:80:b5:31:68:52:6d:35:56:b9:
         3c:17:01:a2:fd:d2:94:f9:ed:b1:0c:72:9d:89:0e:ce:86:15:
         5e:47:38:e0:a1:f2:fc:ed:99:9e:09:50:4f:de:33:42:ef:9c:
         7a:66:63:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:35 2026 by rpki-client