Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          P3S34Z6USu5YMfn+7FtrA/qoHN7a/3gmX4HjX6dLJZ8=
Subject key identifier:   F3:C1:6B:E6:A6:57:DE:0F:09:41:04:5B:FC:27:95:74:BF:42:1D:9D
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       019F92ECCBAF059F11A9F34C43D6656ED6DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0F0D
Signing time:             Fri 24 Jul 2026 07:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:19 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: w1TPiMuoxGTJZl8jMrI3ZQjJVV5F3KHtiWrWJ7cO+9c=)
                          2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ec:cb:af:05:9f:11:a9:f3:4c:43:d6:65:6e:d6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Jul 24 07:00:19 2026 GMT
            Not After : Jul 25 07:00:19 2026 GMT
        Subject: CN=f3c16be6a657de0f0941045bfc279574bf421d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:62:72:1e:b6:c6:e8:62:a8:3b:1b:0e:36:
                    23:fc:f2:18:63:91:cc:95:08:97:de:8a:48:52:4e:
                    2c:9a:03:c9:4a:d5:31:24:4e:ac:b0:b5:c4:07:84:
                    a1:83:f2:a4:cd:50:e8:80:21:3e:20:01:2c:eb:84:
                    ed:cd:c2:4e:72:5b:fa:b7:63:ae:98:ee:e6:a0:cd:
                    7a:bf:82:ee:df:ff:56:14:9d:56:84:0a:3d:54:d4:
                    71:b6:d0:9f:db:2b:52:23:97:e0:de:5e:18:93:e3:
                    09:36:d2:10:10:25:04:63:a0:a5:0a:78:58:dc:69:
                    e8:b7:f8:50:2c:31:37:ab:f4:23:12:82:d0:ed:77:
                    fa:56:6c:07:b7:c3:8b:f1:4c:3f:01:7f:b2:dd:d0:
                    96:d1:6c:78:07:1e:f5:18:fd:08:31:01:16:6d:da:
                    3d:d3:63:94:72:b4:e7:a4:30:cf:d4:4b:c8:a5:86:
                    a8:9f:20:01:ad:3b:6f:3e:83:c9:72:3b:91:00:f6:
                    3c:0d:f5:06:7d:e4:60:90:bd:a0:05:35:57:78:1b:
                    8d:b2:33:63:fc:ea:99:16:29:40:05:b0:42:4f:d7:
                    87:1d:4f:cd:17:69:a7:07:72:cb:bf:91:9f:d7:07:
                    0b:6f:01:42:1e:b9:00:79:22:7d:6a:22:c0:03:42:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C1:6B:E6:A6:57:DE:0F:09:41:04:5B:FC:27:95:74:BF:42:1D:9D
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a8:f8:ba:6c:b9:62:93:56:2e:3f:30:8a:99:60:f1:4d:93:
         34:3d:76:a7:03:7c:7a:b5:da:c6:01:1f:83:e9:86:2a:54:23:
         ea:35:6e:32:f0:cd:17:2c:c2:2a:95:b0:4c:a6:09:19:b1:2c:
         d7:1e:eb:23:54:5d:be:4c:d3:69:b9:e3:17:f0:6b:33:f4:2b:
         cf:bf:74:47:06:cc:10:b9:38:2b:7c:39:23:89:50:f2:20:83:
         5a:01:18:0d:99:2d:2a:91:f4:e7:41:13:8d:cf:a3:b8:e3:4a:
         db:64:6b:31:e9:ab:d6:8b:3c:f0:92:19:f2:b9:99:3e:af:54:
         02:42:89:fb:da:12:68:83:6d:05:e4:bf:e4:dc:78:71:0b:f7:
         00:3b:74:81:4f:40:07:7f:5a:94:9b:cc:75:f0:66:8f:bc:d2:
         7e:be:51:87:9b:55:9b:50:0b:f4:43:f9:42:70:59:9d:b5:4d:
         3d:5c:17:a2:8d:71:a9:d5:18:bd:ec:94:34:db:8a:0d:a9:77:
         c4:bc:4a:b3:aa:9f:7b:97:cf:cc:47:4a:c8:30:fd:7e:02:6d:
         16:cd:16:04:fa:74:73:8a:da:b8:b9:64:3a:d6:e2:35:c1:82:
         73:89:a7:31:42:e6:7c:97:f3:5e:a8:6f:be:24:e7:71:12:c1:
         13:e4:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:34:50 2026 by rpki-client