Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File:                     F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier:          KsGYODsMXDuhSX9H49+ZJ+qduar87dyJtHaN2RjTge0=
Subject key identifier:   06:55:1A:E1:7D:15:CA:CB:6D:14:19:4C:52:3A:A7:D3:96:B3:0C:EA
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer:       /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial:       019F92488A8DA99D8D9972265DFF8F462A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number:          129F
Signing time:             Fri 24 Jul 2026 04:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:55 +0000
Files and hashes:         1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: TSpw3J2454IracKbCgSFGnENtEQ0VREQaYpvmIqCOOM=)
                          2: exOzc_f_1cWjcEVnxwrLp6Pz6ek.roa (hash: cpev4QlZRscUMeINHxmW95Jv6ZdGgZyRlFV1/FIBpVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:8a:8d:a9:9d:8d:99:72:26:5d:ff:8f:46:2a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
        Validity
            Not Before: Jul 24 04:00:55 2026 GMT
            Not After : Jul 25 04:00:55 2026 GMT
        Subject: CN=06551ae17d15cacb6d14194c523aa7d396b30cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5d:9c:5a:67:10:a2:e5:42:e7:ec:60:d0:b4:
                    07:42:f8:bc:b3:a8:23:21:80:cf:48:c7:c9:14:b4:
                    46:61:91:1c:08:21:bf:3c:c8:50:83:25:1b:4e:77:
                    60:11:cb:72:7f:d1:f7:94:54:39:87:94:50:43:9d:
                    84:11:8f:c1:c8:25:9e:21:c2:83:57:98:d1:82:14:
                    fe:cd:71:ed:23:ef:c4:0f:6a:ad:84:68:49:56:ac:
                    c9:e3:24:e1:e6:cf:03:eb:74:69:c7:25:9b:0e:ce:
                    e2:26:c7:36:98:11:07:69:95:a4:e3:10:c0:cd:8c:
                    8d:52:94:b2:77:6b:dc:71:64:bc:d7:6e:c7:09:29:
                    13:ab:9d:ad:12:cd:80:b8:f7:28:18:d0:2c:b7:19:
                    a9:8d:08:52:9b:c2:70:29:b6:9b:65:cf:48:27:6e:
                    40:15:d6:f5:10:f0:ab:17:a3:32:81:98:67:27:9a:
                    2e:fd:7e:1c:44:57:77:1f:35:00:da:a0:a3:08:b8:
                    29:1c:12:a5:a3:f9:80:d5:10:c0:d1:00:ff:ef:bd:
                    05:d0:5b:5e:58:ea:48:a2:00:5e:c1:44:d4:b7:31:
                    e9:2e:e1:d8:46:ad:ca:bb:3b:25:ad:0e:69:02:3a:
                    c8:82:74:85:f4:a6:a3:65:4c:9d:07:85:17:71:ce:
                    d9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:55:1A:E1:7D:15:CA:CB:6D:14:19:4C:52:3A:A7:D3:96:B3:0C:EA
            X509v3 Authority Key Identifier:
                keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:12:1c:4d:1e:32:e6:08:21:ad:74:2e:16:49:a5:61:b7:ad:
         18:94:7d:b9:bc:d8:8e:cb:72:5e:17:3a:00:e5:e9:94:aa:1f:
         82:69:b8:71:b8:dd:f8:a7:79:1d:08:f8:40:2b:a1:9c:64:59:
         26:41:42:ae:c2:ff:07:92:40:7f:17:27:39:45:65:c7:0c:9d:
         61:46:49:18:38:ae:cc:9e:48:d7:d5:6a:b5:1d:90:0b:6b:c5:
         dd:de:fd:57:95:76:b7:cc:7d:d1:dd:9f:04:86:eb:08:3c:9f:
         4c:d6:32:ea:16:de:d3:c1:0a:36:6f:20:9f:31:3f:70:2a:ee:
         a6:ea:27:03:c9:43:f0:69:1b:1c:9b:81:e3:33:34:d2:c3:79:
         03:8d:41:0e:65:33:14:25:d2:3f:bd:65:6f:1f:d6:b9:5e:d3:
         06:88:35:f7:74:42:2d:57:eb:f3:8e:cb:1b:c6:09:af:47:cc:
         1b:5d:11:9e:df:c2:d1:71:3d:a2:7e:a3:64:f4:52:8b:53:e1:
         16:f9:00:13:ab:51:1f:98:6c:3c:5b:61:22:d2:1a:db:78:17:
         a2:17:58:98:7d:75:28:a2:3a:aa:45:af:68:bc:89:7b:d9:55:
         7e:dc:b0:a0:3c:55:7b:15:cb:52:4a:b0:04:ab:0b:73:f9:e9:
         69:21:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:56 2026 by rpki-client