Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File:                     1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier:          Vd38nNK5D8E0+Cg/bj0KcQ92sO6ZYMU7awmFurnmkB8=
Subject key identifier:   72:12:51:B7:56:C4:5E:21:09:18:2B:05:FD:3C:75:BB:42:3C:E6:82
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer:       /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial:       019F91DA739B99C87930C5324CE9B9EA178D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number:          08A5
Signing time:             Fri 24 Jul 2026 02:00:40 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:40 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:40 +0000
Files and hashes:         1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: NLxXKz0OSxUhYnX4y9Lk3i/fGMfYEhXYSZq1B8rYU8k=)
                          2: JpIB4nkPEhTLh9OLsKFtaIBTfLs.roa (hash: pRfl+oPO95G6GyCTV4Tx86Y6/zpSH8wEr4yMBAKE3Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:73:9b:99:c8:79:30:c5:32:4c:e9:b9:ea:17:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
        Validity
            Not Before: Jul 24 02:00:40 2026 GMT
            Not After : Jul 25 02:00:40 2026 GMT
        Subject: CN=721251b756c45e2109182b05fd3c75bb423ce682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:dc:42:ed:70:76:fc:8a:32:85:90:a0:74:
                    36:39:63:a2:cd:24:56:21:3d:15:bc:25:8c:88:a9:
                    5a:2b:4d:66:d6:70:c3:30:db:6b:98:b9:a1:4a:1d:
                    f9:2b:fb:59:2b:13:c1:bf:dd:7a:de:69:20:db:ab:
                    6f:43:14:2f:c0:af:64:f1:40:ee:e0:d4:9f:cf:2e:
                    5a:9b:4f:ad:42:3f:46:c0:b7:dc:fe:09:84:20:36:
                    d0:d9:44:d4:28:8d:13:50:59:95:b0:e5:11:1f:b5:
                    7a:b2:b6:75:a0:22:a6:39:92:7c:4f:3f:92:09:98:
                    cd:65:54:7d:7a:89:3d:f6:d9:49:07:83:b7:e8:34:
                    a7:78:37:d6:ce:f4:44:27:86:72:c9:df:8a:ff:31:
                    a7:76:7e:f8:16:c5:09:64:ce:14:72:94:22:7b:c5:
                    50:09:6f:51:3e:a3:d0:4d:a7:29:6c:47:85:d9:cd:
                    c7:10:5c:3d:18:37:07:d5:bd:84:5b:f5:f7:6a:d6:
                    20:4c:86:89:54:09:0a:87:f4:24:e1:76:bd:8b:8a:
                    09:ce:2b:24:6a:f0:1d:eb:b5:2f:09:f3:e2:a6:45:
                    c4:75:f5:a8:4f:b1:61:02:ec:f9:be:0a:ea:87:97:
                    32:f4:04:ee:26:97:5f:b0:e0:75:f6:56:a5:1c:6a:
                    93:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:51:B7:56:C4:5E:21:09:18:2B:05:FD:3C:75:BB:42:3C:E6:82
            X509v3 Authority Key Identifier:
                keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a5:6a:77:c2:4d:cb:8f:f7:68:85:46:5c:18:9b:3c:aa:94:
         25:4a:a8:56:73:a8:00:a2:d7:1c:ad:f4:48:40:0b:d6:85:5f:
         ef:60:3d:11:80:e1:ee:24:50:9a:a5:38:48:ea:ad:92:3d:50:
         61:cf:35:c8:de:5f:41:c9:06:59:2d:d6:bf:3b:63:aa:e4:c9:
         d9:df:88:48:0e:3b:33:d0:70:9f:88:39:48:bb:85:bc:d3:57:
         51:7d:3f:d0:ce:5c:7f:00:ce:5e:8f:8d:3c:80:55:a9:c2:74:
         46:4d:b7:6c:3d:78:96:ed:99:47:1f:b2:3d:7d:91:33:ff:8a:
         d6:1d:10:fa:84:02:d1:a2:e0:fb:04:82:6e:dc:6a:13:15:6e:
         c3:d4:53:ec:eb:f4:a2:2d:06:42:af:93:ac:c6:c6:87:a0:2a:
         24:73:84:f4:e7:de:73:c0:71:d7:aa:86:fe:b6:70:36:28:56:
         94:c6:35:01:54:37:8d:ea:22:66:23:c9:7b:09:bd:76:6a:a0:
         d5:b8:10:85:5e:73:97:05:8e:94:d0:d7:b2:ef:6e:18:4e:b8:
         96:d3:c4:24:c3:72:d8:88:c9:7f:19:9c:84:3d:99:0e:f9:81:
         af:34:d3:05:83:b8:f2:47:4b:3a:a5:ad:e9:48:9e:36:2a:89:
         70:10:3c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:53 2026 by rpki-client