Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
File:                     V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json)
Hash identifier:          RThua5K3TgG5VtZZGuxMQ8FzmmU5I1H4r1U6Ql7y4yI=
Subject key identifier:   CA:EC:C1:60:B4:61:8C:A8:51:03:7F:A9:00:AD:0F:7A:4B:6E:C4:3A
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Certificate issuer:       /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial:       019F9436F463C2B87E4BDD6F5D89FA986694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
Manifest number:          13BD
Signing time:             Fri 24 Jul 2026 13:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:57 +0000
Files and hashes:         1: 0i0XuDvoPgs1nd1NeD83B2IScVA.roa (hash: YNJF/olVt/Dil/zKrwDDUgcE/N5peyDf18kFIpNKPX8=)
                          2: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: tTm8QNLxtMQ6Q4O6RcnssJc0Fe4XoxqRC/0yF5nJ85o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:f4:63:c2:b8:7e:4b:dd:6f:5d:89:fa:98:66:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
        Validity
            Not Before: Jul 24 13:00:57 2026 GMT
            Not After : Jul 25 13:00:57 2026 GMT
        Subject: CN=caecc160b4618ca851037fa900ad0f7a4b6ec43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:77:65:79:c4:a1:06:5f:0a:01:ac:db:b6:
                    7a:92:bc:f5:ee:2b:a2:4d:7a:a6:b8:e2:de:cb:cf:
                    9a:a5:42:e8:d2:11:45:08:e4:b5:82:2d:0b:06:9a:
                    cb:7a:2d:1e:53:3a:a7:39:5e:11:15:5b:0b:e4:0a:
                    3d:58:47:c8:5e:87:92:71:b6:a4:61:3b:fa:15:40:
                    e1:38:a6:44:74:72:63:ca:3b:1f:57:8c:7e:8a:a0:
                    6c:95:3e:1b:a2:28:b5:ee:1d:66:65:83:05:00:89:
                    a0:c8:d5:fa:66:62:de:5e:4f:fc:eb:4c:d5:31:3f:
                    10:a4:75:2d:fe:e0:92:d2:c7:53:d8:af:bc:01:5e:
                    6f:a3:e6:91:63:41:d8:89:d3:8f:cb:20:ce:c8:ad:
                    8b:bd:fd:82:44:68:66:f6:98:e3:c0:71:83:4b:1f:
                    3a:1d:ed:87:7b:98:91:29:1b:48:67:a2:1b:44:db:
                    1a:bd:ba:bb:53:10:e6:90:f5:c7:c6:ef:f5:09:00:
                    4e:da:49:cb:a6:35:1d:16:cb:fb:16:31:5e:03:54:
                    1e:31:4b:8b:b6:de:f3:dc:16:6f:f2:cf:49:80:69:
                    f3:46:07:0b:2b:12:47:f1:6f:ce:b2:1d:2d:b8:87:
                    95:55:a9:2d:8a:0e:65:c8:86:2e:e7:7e:53:79:95:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EC:C1:60:B4:61:8C:A8:51:03:7F:A9:00:AD:0F:7A:4B:6E:C4:3A
            X509v3 Authority Key Identifier:
                keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c1:7e:b7:fd:86:4d:54:76:21:ea:08:49:10:14:be:1f:81:
         07:91:77:4c:27:2b:bc:d0:6c:f4:9a:fa:3e:f2:d2:cf:ae:8f:
         24:fc:3d:f9:e6:8d:36:55:3a:6c:fa:5b:93:12:80:d8:b2:e9:
         d2:51:08:2b:47:7d:b3:eb:85:7c:50:2e:59:be:04:f2:ae:dd:
         87:f8:7b:44:75:75:ab:8b:43:1d:b8:d5:59:31:33:4f:b1:ea:
         6c:7a:f1:fe:85:3b:c0:89:98:af:9f:92:0e:72:1f:47:cf:0e:
         6e:7c:63:de:99:46:1e:6d:a7:4d:e3:6c:48:47:eb:ae:a7:d4:
         f2:52:78:f9:e2:8b:c8:25:a8:ab:eb:51:6e:59:8f:8e:62:6c:
         fd:df:48:bd:2b:94:f0:32:12:b8:6d:b5:d5:7f:81:8c:c1:73:
         e6:f1:f8:20:e6:48:48:7c:7f:3e:49:5e:97:6c:6e:d1:21:23:
         0a:94:73:0c:9b:42:52:06:c1:55:45:58:f5:81:90:bf:b7:30:
         07:65:9f:bf:4c:02:0b:b0:f6:2f:49:13:6e:5d:9a:cc:4a:72:
         84:e0:e5:32:a2:20:e8:ff:42:19:cc:e2:67:e0:fa:ac:92:9c:
         7b:22:a0:a0:5b:45:4b:bf:29:3c:36:58:3a:b9:e4:34:b1:9c:
         3f:dd:d0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:46:39 2026 by rpki-client