Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File:                     FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier:          6sHU8AxxpE2HMD0LhBFzSaBUYi2yCeIF+zdxmNxr3bE=
Subject key identifier:   8E:1A:E9:FA:85:BD:6B:1D:9E:AF:CB:D8:06:BF:40:09:F7:44:27:20
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer:       /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial:       019F916CF0D1845C3041F4159EB2DA31AF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number:          128C
Signing time:             Fri 24 Jul 2026 00:01:03 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:03 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:03 +0000
Files and hashes:         1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: bh2XPr1r4rWl0zEFJ/l3XNL9ifp2rIH7iubufuv2KWY=)
                          2: jDnrlpzju9hJvaoQu4OXwOXPSyA.roa (hash: 5ssODwVsvynqY+E+xEJbdKWKWIk6XsrizpcJBHs3DN8=)
                          3: uxvdRH3Lx7ZudvJAlNDH4WnIMb8.roa (hash: 7H1SzU9/jyjG63PZcxwjrSZgzIIH3ECkB+OiPPAHQwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:f0:d1:84:5c:30:41:f4:15:9e:b2:da:31:af:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
        Validity
            Not Before: Jul 24 00:01:03 2026 GMT
            Not After : Jul 25 00:01:03 2026 GMT
        Subject: CN=8e1ae9fa85bd6b1d9eafcbd806bf4009f7442720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1a:d9:ff:cc:93:87:0d:7c:37:07:19:ec:93:
                    53:74:40:89:ea:b9:03:45:59:df:4a:0b:11:a0:96:
                    5a:7a:40:ce:07:22:66:22:92:14:c9:b6:6a:57:bb:
                    f9:eb:23:10:2c:d4:d6:4e:32:9b:23:1d:77:2c:b7:
                    77:c3:6d:49:68:36:8e:f6:21:ef:d1:2d:0a:e6:fb:
                    30:01:23:71:f7:6d:39:e7:03:51:07:0d:f2:56:89:
                    b8:c9:2a:83:8e:ee:78:5b:47:10:51:23:57:0f:c9:
                    65:7c:02:89:54:9b:6c:9d:6b:37:42:56:8f:6d:72:
                    24:ec:e8:99:a7:f2:52:4c:3e:c7:d4:8e:71:8e:3f:
                    e2:5b:1c:6d:b3:4c:d2:8e:fd:09:bd:db:92:b7:40:
                    93:9e:ab:ef:a0:43:de:00:4c:bf:a0:87:ad:30:f4:
                    22:60:d5:df:48:a4:7b:44:45:8e:f3:72:50:78:05:
                    0b:8e:50:38:3b:d5:b5:d7:2c:da:21:9e:a2:eb:b8:
                    c6:9c:30:79:69:10:e8:0e:33:a9:ff:23:65:fa:8f:
                    c6:43:58:0f:48:ad:2f:4f:2b:68:08:4a:e7:f6:e9:
                    af:e7:24:ba:14:d6:5e:3d:48:f6:56:c9:fb:e8:ac:
                    1a:0a:b5:49:be:1c:8f:11:18:40:66:e8:41:8b:a5:
                    d3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1A:E9:FA:85:BD:6B:1D:9E:AF:CB:D8:06:BF:40:09:F7:44:27:20
            X509v3 Authority Key Identifier:
                keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:7b:d5:e3:47:a6:81:d1:8a:16:48:78:f1:0c:cc:74:8e:be:
         1a:22:be:6b:de:20:af:de:e0:e2:3d:f9:c4:c7:00:f6:06:44:
         d4:10:47:fe:fe:62:f2:01:78:ef:ea:67:28:d6:b7:bd:45:b5:
         95:3b:8a:81:e4:7e:bc:cf:76:1d:e6:b6:ab:fe:b2:5d:b8:b4:
         48:4e:96:1c:d9:b5:4f:6a:a2:ee:fb:d6:2d:47:1f:91:6a:30:
         ea:a2:f9:10:cd:f9:03:40:42:a0:f5:8d:13:9c:a7:ce:f0:28:
         50:28:57:1e:78:bc:26:24:ce:0d:18:56:c7:79:52:ea:38:bd:
         3e:4b:84:22:f6:d9:9c:c3:0a:4e:6a:6e:2c:50:f8:46:3c:c3:
         81:82:d7:79:4a:2f:46:f8:38:a5:7d:00:37:73:a0:e2:b0:e1:
         fa:e5:72:84:a4:cd:1e:84:18:8b:a4:af:17:23:e1:8e:40:4b:
         0a:f5:8a:99:fd:36:69:2c:c4:b5:f8:3d:f6:90:f4:00:cd:bb:
         bc:04:ac:2f:56:43:3f:f7:be:4f:e6:8c:d2:86:f4:48:4e:d8:
         03:6b:17:53:5f:12:88:48:b1:0f:0e:dd:40:29:3e:d6:a4:97:
         d3:43:6c:8c:aa:72:c6:62:ba:d3:6d:de:e1:e4:46:36:4e:cb:
         cb:fb:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:41 2026 by rpki-client