Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File:                     fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier:          Pzrp0nOLtbAtHwQxndT5WgyHkBvCqJrVkI13PeovVTA=
Subject key identifier:   5E:00:04:5C:C2:5E:4F:37:A7:E1:FF:3D:04:86:C1:01:8C:1B:8E:61
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer:       /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial:       019F9091419A5B5A4B5AE0316877E2E717ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number:          0557
Signing time:             Thu 23 Jul 2026 20:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:06 +0000
Files and hashes:         1: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (hash: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8=)
                          2: a7dc7sTXBG9g6baqXZ5n-zFcW2U.roa (hash: NAb+NkDlWJd04gSzwtykl0+s9KlRgbw76dF4Fu82HXg=)
                          3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: cateZRhqnYcCV28wx/y9sRXE1G1IQ/LQyQBybYVU+ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:41:9a:5b:5a:4b:5a:e0:31:68:77:e2:e7:17:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
        Validity
            Not Before: Jul 23 20:01:06 2026 GMT
            Not After : Jul 24 20:01:06 2026 GMT
        Subject: CN=5e00045cc25e4f37a7e1ff3d0486c1018c1b8e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:ac:30:03:0b:75:2d:68:f2:13:ea:9f:0f:
                    33:b5:3a:ff:df:c8:46:01:36:7a:57:90:3e:6f:d4:
                    76:f1:79:75:7d:b2:71:1c:56:f7:54:b9:06:3e:b8:
                    d9:a0:6c:1e:f6:45:19:b3:8a:a2:9a:de:50:26:01:
                    e6:cd:68:fe:c6:fb:5f:42:04:5f:5b:55:09:bf:50:
                    ad:c5:3d:16:a2:cf:71:52:62:a8:74:14:87:ac:1c:
                    77:6f:5b:ad:f0:22:eb:fe:78:3c:1e:41:26:7d:b5:
                    48:4d:c4:96:0d:f4:7a:33:96:f1:c2:1c:74:b9:57:
                    f2:7f:00:5c:e2:90:73:88:f4:54:ed:9c:ba:19:fb:
                    b8:ac:4f:4a:eb:c4:5c:00:18:37:2a:56:42:16:9a:
                    84:ff:49:80:9f:d0:e7:fb:95:7f:81:2c:1d:f9:9b:
                    72:13:00:d7:c2:e0:c7:93:50:47:87:da:98:43:28:
                    95:1f:56:4c:89:87:34:9c:ea:51:c3:14:c4:15:91:
                    0f:3b:ac:c1:99:1d:13:a0:b1:64:c5:cd:96:95:93:
                    ba:75:ab:1c:6c:b4:c5:f6:b0:b1:f3:0a:da:c2:b1:
                    ff:5d:d5:24:d7:e1:c6:9d:3c:08:16:6e:db:2a:c3:
                    37:7d:65:37:1c:92:51:e9:d3:13:c3:7b:7c:52:31:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:00:04:5C:C2:5E:4F:37:A7:E1:FF:3D:04:86:C1:01:8C:1B:8E:61
            X509v3 Authority Key Identifier:
                keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:21:ac:a4:44:85:94:0c:8e:bd:e2:55:5b:f1:6c:67:04:
         a5:4b:59:75:b6:40:45:5b:41:64:6e:b9:0d:47:07:c3:68:d0:
         49:61:a1:8d:73:75:ae:09:4b:4b:5a:b9:c3:5c:cc:84:76:58:
         7a:c4:be:72:a5:d1:ab:5d:39:56:e4:2c:0f:7d:96:51:33:81:
         08:71:e4:36:95:8a:04:1b:5b:b6:48:3a:9b:3b:b8:ab:e5:ad:
         4b:07:de:70:f5:b8:0a:10:86:25:4e:a1:2e:df:23:10:d5:bb:
         77:fa:b1:c9:cd:46:00:64:64:40:58:bd:9c:57:59:b2:22:56:
         ff:4c:cc:3c:33:68:49:42:4b:f4:5c:52:d7:f7:cf:aa:1f:93:
         cc:e3:39:19:88:fd:05:a9:3c:cc:6e:df:94:35:7b:ef:e8:cc:
         01:6b:de:df:a9:07:43:fa:c1:59:8c:9d:9f:29:4b:05:b6:09:
         01:2d:b5:02:4a:32:83:7e:38:92:b0:2d:94:7c:c3:7e:a5:de:
         bb:19:c3:31:48:5c:4a:64:8d:3f:8c:5a:bc:69:31:e7:10:39:
         21:cd:dc:b8:1e:ec:e7:74:f4:29:a1:d7:9c:5b:df:9f:81:2f:
         d8:1e:e6:c4:bc:94:8a:c4:dd:41:c4:df:9d:91:c2:30:40:30:
         1a:2c:06:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:22:23 2026 by rpki-client