Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File:                     fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier:          hmeuklqzmztP2J5rv2BK2yLZy5bm66DKD81rAC2vHLw=
Subject key identifier:   A5:F9:82:9E:AA:B2:23:DD:79:D3:02:44:E6:4D:A8:95:47:E6:D1:77
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer:       /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial:       019FAED1DA1153BB37649B9A98124AEA5FC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number:          1966
Signing time:             Wed 29 Jul 2026 17:00:16 +0000
Manifest this update:     Wed 29 Jul 2026 17:00:16 +0000
Manifest next update:     Thu 30 Jul 2026 17:00:16 +0000
Files and hashes:         1: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (hash: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM=)
                          2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: Mw+H0MnXnCKoCAIv85J1xq0R6pTMxD67HLjyHWPmz1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ae:d1:da:11:53:bb:37:64:9b:9a:98:12:4a:ea:5f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
        Validity
            Not Before: Jul 29 17:00:16 2026 GMT
            Not After : Jul 30 17:00:16 2026 GMT
        Subject: CN=a5f9829eaab223dd79d30244e64da89547e6d177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:c5:80:c9:5e:a3:e9:34:1d:ec:ef:fc:21:
                    3c:df:c8:21:2b:f7:9d:19:7d:84:fb:3f:51:3b:bf:
                    73:bd:57:68:e6:b7:30:58:3a:f8:67:4a:c4:1a:c4:
                    1d:8c:97:07:0f:82:ca:9f:8e:16:62:12:a6:a1:54:
                    6a:0f:3c:1c:54:d9:63:0e:f5:b5:86:94:61:4d:d7:
                    e1:ba:d6:91:16:e1:29:b1:42:94:a9:a4:e3:23:46:
                    3a:a0:fe:c1:ee:c4:12:4c:b5:b3:29:67:75:5b:68:
                    86:23:a9:b0:8f:82:51:60:e1:de:08:c6:d6:a7:89:
                    8b:15:75:e0:69:6d:26:aa:1e:e1:b9:bf:6a:63:c6:
                    46:e3:a3:e9:bc:f5:9f:20:e1:23:a8:6d:b8:60:0a:
                    c9:0d:95:ab:f0:5b:e2:f1:6f:cc:af:e9:bc:78:18:
                    84:41:6c:e3:58:af:83:3c:10:c4:f4:ee:83:ff:40:
                    94:3c:b6:47:a0:e2:e5:c2:fd:f9:84:a9:23:1b:6f:
                    16:ff:d9:cc:0b:64:a7:3c:92:ca:72:f1:f5:e0:c6:
                    b5:17:b9:76:01:96:8f:e5:ab:43:b0:eb:03:fc:be:
                    55:bc:d2:09:69:1d:70:04:2f:d1:a8:c1:2e:dc:22:
                    8c:5f:ab:cd:03:7e:7f:e3:7a:a7:07:69:9e:ff:06:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F9:82:9E:AA:B2:23:DD:79:D3:02:44:E6:4D:A8:95:47:E6:D1:77
            X509v3 Authority Key Identifier:
                keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7f:54:59:96:1c:a0:75:27:5f:7c:d6:9a:0c:cb:03:02:87:
         7d:f2:f4:1d:72:d0:95:1c:2b:bc:1f:50:45:1d:48:fa:96:02:
         e5:f9:4d:8d:8f:05:6e:b1:1a:61:a0:26:a7:4b:93:1a:3d:65:
         d5:55:d6:dd:e7:4f:2e:d1:d2:50:d6:91:2e:dd:d9:55:4b:b7:
         3c:2a:10:96:c3:9d:88:c8:5a:ac:0b:69:39:b4:98:33:b3:81:
         c3:24:3d:b4:10:77:f2:d8:b8:45:57:f2:77:d5:78:b2:ee:76:
         46:51:db:3a:ea:73:5a:4e:0b:ff:a4:93:00:96:56:31:ce:d9:
         d0:88:c5:08:fd:f8:73:dd:57:5c:f0:92:07:8c:55:c0:1e:b2:
         cc:85:e4:9a:26:4f:be:f0:47:1f:78:f3:6f:0e:b0:4d:d5:46:
         86:23:ad:90:1a:0a:33:82:42:6a:27:ab:9f:db:cf:c9:7e:26:
         09:ba:34:60:66:ae:be:7f:31:27:63:6b:bd:ed:78:bd:e1:fc:
         9e:b2:a5:d7:ad:4d:c1:6a:68:55:e1:e4:ff:f6:15:15:ff:5a:
         6c:6d:3a:b0:41:6d:3c:c4:79:4c:16:ad:6a:9d:87:a2:88:5b:
         dd:29:89:48:c7:43:63:5e:a2:fe:96:5c:ae:47:83:4a:1e:5e:
         cd:ae:5a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:29:48 2026 by rpki-client