Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
File:                     0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft (raw, json)
Hash identifier:          +ahHH/XV5A0S4+xnPrFXmyFl6y0qT+TR5SRZYa4DIaE=
Subject key identifier:   07:A5:4E:2B:28:C2:F3:C1:7A:5C:23:30:F6:DA:39:F3:04:6C:B7:92
Authority key identifier: D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
Certificate issuer:       /CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Certificate serial:       019F8EA3053857C03BE7E73813A97C649518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
Manifest number:          0143
Signing time:             Thu 23 Jul 2026 11:01:16 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:16 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:16 +0000
Files and hashes:         1: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl (hash: XAwfK1qlg/xECbCRVhMjAJ8CdEBGdBOWTlslHK6M7uA=)
                          2: z5djvf3-CKw5x5kwKKqaRZmCe2I.asa (hash: ZvW8uuufeamy31o99OQxuIpFF7lTKfAP5mzTU9+Pnks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a3:05:38:57:c0:3b:e7:e7:38:13:a9:7c:64:95:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
        Validity
            Not Before: Jul 23 11:01:16 2026 GMT
            Not After : Jul 24 11:01:16 2026 GMT
        Subject: CN=07a54e2b28c2f3c17a5c2330f6da39f3046cb792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:e2:7b:8e:76:f5:0d:d5:83:65:72:22:d0:
                    7f:91:00:26:11:05:3a:db:71:89:7f:f7:17:3d:41:
                    ce:b5:3a:85:22:5e:7c:d7:19:43:2b:b0:0e:a4:d4:
                    7e:2d:61:2b:3d:05:e6:31:27:6d:92:0f:a6:f8:62:
                    1b:06:08:92:d7:38:59:a9:72:69:fd:d2:6b:e2:b7:
                    d6:48:24:af:89:34:ec:a3:fd:08:0d:4a:5b:d5:42:
                    4c:b5:a3:7f:9d:01:48:5b:26:d4:5f:8a:33:d2:4f:
                    f1:40:4b:be:d7:77:ac:d5:8d:e5:54:e2:4d:fe:80:
                    85:45:74:55:99:44:6b:91:f4:1e:d1:a8:96:da:60:
                    d5:80:10:8c:24:fc:f7:cd:9d:7a:47:69:42:3a:db:
                    8a:49:ab:7f:d8:ef:01:4d:c3:3d:8c:4a:a6:51:68:
                    71:1c:14:28:21:d1:d3:10:61:cd:ed:93:78:8c:d5:
                    05:ad:52:8e:3f:c8:6b:77:f8:78:08:01:1f:2a:4a:
                    73:14:5b:d3:5c:77:30:6f:b7:86:c2:00:c0:e3:e2:
                    39:8b:e5:f2:8a:a9:da:f4:5f:9a:45:5c:ad:57:ca:
                    70:9e:a0:16:b7:2d:c1:b6:14:94:17:0b:dc:2f:04:
                    ec:12:9d:3c:ca:a8:15:e5:4b:d2:91:96:6c:63:b6:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A5:4E:2B:28:C2:F3:C1:7A:5C:23:30:F6:DA:39:F3:04:6C:B7:92
            X509v3 Authority Key Identifier:
                keyid:D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d5:d0:f1:f2:4a:2e:d1:df:d0:a3:fc:f3:92:8c:ef:c7:0b:
         8f:9a:7b:a3:31:e1:19:a8:0b:d8:2a:13:2f:84:d0:f0:a6:67:
         4d:5c:c2:06:ca:c6:44:ba:f4:6d:31:28:1c:13:34:1a:6f:42:
         ac:af:e7:df:ba:15:93:6c:72:91:fc:b6:87:e2:da:2d:43:3f:
         e2:a1:6e:c7:15:5c:b5:22:9d:c0:41:82:b9:3c:e3:81:76:c3:
         8d:01:a7:6c:c3:9c:ab:8c:d6:a8:05:0d:66:4d:92:6a:34:ec:
         03:63:7a:41:6c:ab:2f:28:e6:45:11:98:a9:1d:93:23:ec:58:
         17:0b:71:e4:a5:01:ed:4a:22:2e:e3:d4:cf:b4:4e:0e:84:61:
         f5:db:07:8e:e6:e6:46:9d:91:56:52:ba:21:cb:b2:eb:44:a4:
         20:46:cf:29:21:65:77:6e:ed:90:49:7e:3b:b1:8d:4d:aa:43:
         5b:11:31:ad:8f:ae:19:f4:3b:a9:c1:af:32:3d:ba:01:51:3a:
         d8:26:ba:a8:1b:b1:9c:6a:9e:8b:43:22:b2:3e:c7:26:95:76:
         8b:29:c3:46:a5:d1:c8:84:ea:ab:65:74:39:e5:a0:cb:2b:64:
         19:a2:dd:d0:e1:75:4e:b8:25:00:84:28:88:7f:ef:1d:7e:ce:
         40:5b:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:41 2026 by rpki-client