Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
File:                     fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json)
Hash identifier:          5osKwFHL4XQw0sz0uhSFUEN34d38CzB5brqee3d5ph0=
Subject key identifier:   C5:E7:13:75:9E:CD:BC:39:DC:BF:20:E7:96:F8:A7:44:E5:DB:6E:4B
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Certificate issuer:       /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial:       019F8FEC0DD2B69326C5E61C73C28F536848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
Manifest number:          12F1
Signing time:             Thu 23 Jul 2026 17:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:39 +0000
Files and hashes:         1: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: zx/6h03XMK1FUwk51mvFlfPyFNswmJB+DDDPqmVB6lM=)
                          2: qoI8F0lbOVIzl_Chk1fw1atLi5k.asa (hash: N3/9TZTJb11e6EEEvsOn0LqdBXjtO+tXCNFld50vBf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:0d:d2:b6:93:26:c5:e6:1c:73:c2:8f:53:68:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
        Validity
            Not Before: Jul 23 17:00:39 2026 GMT
            Not After : Jul 24 17:00:39 2026 GMT
        Subject: CN=c5e713759ecdbc39dcbf20e796f8a744e5db6e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:f4:6d:b9:c0:46:43:e8:50:1b:99:0d:40:
                    47:c8:57:86:67:f3:5b:c7:d4:d9:07:9c:f9:9d:b8:
                    ae:36:a9:65:84:83:e4:31:65:ca:e4:0b:f9:97:ef:
                    cd:e5:72:83:30:fc:5a:f7:91:29:77:61:d5:8e:e9:
                    69:25:60:25:45:75:35:8f:c3:d3:42:d2:ac:11:34:
                    b5:3e:d5:8d:ff:a3:c2:f6:9b:79:3d:f8:01:be:66:
                    2d:b9:41:1d:61:c9:cf:ef:61:69:1e:15:4a:03:9a:
                    6a:fa:fe:26:14:2e:b4:02:27:3b:c3:93:4a:67:27:
                    40:95:f1:74:77:75:85:35:27:16:77:d2:4a:72:64:
                    70:16:da:41:bf:2d:ba:2c:e5:92:27:c9:61:3c:31:
                    95:22:d3:74:1b:ab:2d:59:b7:f1:68:75:36:9d:59:
                    b8:b8:5e:6b:15:44:6e:04:41:7d:9d:9e:bc:c0:10:
                    4f:4b:e6:63:48:a9:8f:ed:33:8f:82:de:67:97:f3:
                    9e:b7:9a:6e:81:0d:cc:74:4b:62:75:93:1b:5c:2a:
                    ce:e7:74:a0:de:c1:8f:fc:f5:6f:8b:3f:37:ff:08:
                    bc:8c:35:d6:41:0e:24:94:7e:8d:bf:ab:9c:a1:af:
                    a7:4e:e9:6d:92:81:63:c9:ea:48:7c:54:fb:b6:f3:
                    8d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E7:13:75:9E:CD:BC:39:DC:BF:20:E7:96:F8:A7:44:E5:DB:6E:4B
            X509v3 Authority Key Identifier:
                keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:63:0b:56:32:c7:08:0e:84:45:85:92:12:7f:e1:0d:d6:89:
         ee:ac:3f:33:76:b7:6c:f2:25:9c:5a:29:f2:e7:fb:5e:05:73:
         59:2d:1e:e9:16:d2:42:6a:a2:5c:60:d0:92:f5:8a:39:fc:fa:
         a3:c2:5c:46:1a:c5:2d:91:61:e4:a2:8b:9e:65:bc:5c:73:66:
         12:1f:bd:15:3d:ef:b0:78:21:3b:b8:68:bc:8a:77:69:f0:48:
         a0:f4:2d:13:b1:24:bf:4e:cd:69:51:91:9f:1e:4e:7f:22:92:
         26:67:c2:42:a0:e4:50:8b:1e:5a:d8:79:21:06:08:ea:75:11:
         d1:7c:dc:e0:54:11:ba:ad:88:59:72:a4:ef:a1:61:c5:ee:e5:
         94:2d:69:df:2e:1a:fa:0f:80:69:eb:e4:73:44:f0:3b:e3:a3:
         90:24:69:1a:a8:87:a5:eb:6a:ff:97:24:c0:cb:2e:c1:98:59:
         ed:3a:15:e4:4d:d6:ff:16:25:85:cb:b6:a7:c9:b1:b6:5f:bc:
         dd:83:c5:de:4e:a7:cd:bb:f1:e4:0d:a4:da:19:33:a7:37:62:
         60:a6:ec:f2:c6:eb:a2:9a:94:99:76:c0:e0:62:da:9a:35:66:
         98:c7:31:1d:21:ca:25:25:a1:2b:81:43:ad:fb:7b:67:a9:2b:
         18:be:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:32 2026 by rpki-client