Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File:                     f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier:          BeTXYv9FH6U6OWSOj5p+bEGY0IZPBJxwBNWMCqUVSS4=
Subject key identifier:   36:63:82:BB:AA:39:C7:97:19:8D:B2:A1:22:28:78:7F:A7:E4:C6:79
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer:       /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial:       019FAC3EDE7CA15FF691A1B59D3EB14B11BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number:          0715
Signing time:             Wed 29 Jul 2026 05:00:28 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:28 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:28 +0000
Files and hashes:         1: 2BwDzZ1-4qodQHGn7IRXAaLWAn8.roa (hash: KLT4hK24Sh8oeO2o5C+Q82TS186W3R8CPounbGac6TY=)
                          2: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: rPcoOjDZNHUxT1409U0mR6i0v0IsRod9lyYwzjs/fok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:de:7c:a1:5f:f6:91:a1:b5:9d:3e:b1:4b:11:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
        Validity
            Not Before: Jul 29 05:00:28 2026 GMT
            Not After : Jul 30 05:00:28 2026 GMT
        Subject: CN=366382bbaa39c797198db2a12228787fa7e4c679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:2c:7e:ed:3c:18:28:e5:44:2d:0b:d0:d8:
                    2f:3f:68:a7:76:31:e5:39:c9:fa:20:8c:09:09:31:
                    28:b2:33:5f:71:8a:da:17:cb:28:fa:6a:d2:c8:c2:
                    e6:99:ab:39:c2:b9:97:99:9e:43:74:bb:9e:4d:63:
                    28:ff:8c:5c:8f:66:6a:0c:3d:2d:08:2a:1e:18:da:
                    a4:c1:f4:24:8c:e3:e1:81:50:f5:9b:2c:36:8b:31:
                    3c:79:f6:43:e5:07:1a:1a:43:0d:98:6c:37:b2:e8:
                    e0:a4:17:cc:30:50:e8:ff:98:b1:18:d8:42:da:d8:
                    f1:d4:11:a5:6d:a9:f8:60:c5:e2:54:c6:ad:4f:52:
                    38:f3:16:63:21:f2:12:3f:1f:7c:a9:6e:d4:da:b8:
                    6c:fd:67:e8:89:b0:13:bb:34:f8:cf:99:ea:b6:99:
                    d7:36:06:3a:9e:55:0d:6f:9b:cb:21:47:37:e5:a2:
                    f9:9b:a5:50:36:82:ff:07:3e:3f:36:64:9b:bb:21:
                    fd:93:ea:de:a0:a3:c3:59:a7:ef:81:ca:e1:b6:56:
                    6f:60:11:77:81:d5:bc:57:f2:59:a0:a3:07:f3:70:
                    1f:84:c0:4a:a7:b1:41:81:47:03:45:97:c6:6c:94:
                    11:58:c1:b7:64:72:59:91:09:10:3f:f6:81:42:03:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:63:82:BB:AA:39:C7:97:19:8D:B2:A1:22:28:78:7F:A7:E4:C6:79
            X509v3 Authority Key Identifier:
                keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f8:c2:ec:bc:19:d7:0b:a4:0a:0e:37:d3:f8:1a:38:c1:24:
         69:43:56:63:0c:7a:a1:11:37:71:7b:7b:e3:22:10:7f:9a:1d:
         51:63:88:b3:ab:39:b9:f4:12:ae:b2:88:20:f9:f9:c0:06:cf:
         4a:62:f8:96:81:bc:cd:56:1b:15:5b:f0:f4:2a:b7:83:d1:5d:
         8e:51:a5:d3:39:96:ef:14:83:84:e4:78:ed:52:26:57:f0:7c:
         5e:c9:ce:e1:00:b3:db:21:86:40:7c:84:4b:a7:fd:93:d5:59:
         43:3f:70:e5:dd:fa:89:d0:31:c3:21:00:ad:d2:4d:da:21:b9:
         7f:89:4c:81:0d:8c:12:8e:2e:2d:45:25:c5:1c:aa:1e:97:d7:
         97:4c:e4:43:bc:72:b0:83:9a:3c:7f:dc:a5:b4:3e:58:a8:4c:
         a9:79:e1:c4:a0:b9:d1:09:58:f4:80:f1:e9:cc:b0:d1:8c:73:
         83:2e:b1:53:43:eb:17:29:2d:f7:6a:53:32:e7:d1:47:7b:85:
         b4:ec:f0:47:04:92:a5:56:17:d1:f7:5c:f2:94:8b:6e:3e:5f:
         bc:d7:65:bb:86:a3:12:08:93:d7:26:06:83:42:61:ff:12:e5:
         62:e1:4c:0f:29:1f:40:c3:46:44:e5:41:1a:d5:50:9f:76:38:
         95:4d:1e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:44:45 2026 by rpki-client