Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File:                     1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier:          MhKlwirWnJge63201tcVHIXEKJRJJEwez8MXVP6l4H8=
Subject key identifier:   24:30:73:9A:C6:2F:26:98:8E:E8:61:0C:CE:3D:39:25:D6:D3:B2:7B
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer:       /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial:       019F8F7EC858818B6B6BC9E3A32A03762071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number:          14F3
Signing time:             Thu 23 Jul 2026 15:01:18 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:18 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:18 +0000
Files and hashes:         1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: ZV3fsUD7oKPzD+dBwLMfvg6yr3qasP3yf21/A6B7TyM=)
                          2: FMKR3CaUlRK9liJAv-tSvgFdbCg.roa (hash: khLsIGfKCgMHIIEDU5+wjoIrC4R3I6oBgk6LSwjYqtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:c8:58:81:8b:6b:6b:c9:e3:a3:2a:03:76:20:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
        Validity
            Not Before: Jul 23 15:01:18 2026 GMT
            Not After : Jul 24 15:01:18 2026 GMT
        Subject: CN=2430739ac62f26988ee8610cce3d3925d6d3b27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:48:69:35:39:12:5a:dd:74:7b:31:b8:02:
                    15:e7:4a:f4:20:ff:51:df:c0:26:87:d3:72:93:1c:
                    83:11:56:fc:51:e7:4d:f3:43:71:68:72:03:c2:63:
                    32:88:16:59:e9:bf:b5:c0:49:7d:56:41:b4:3e:0a:
                    48:af:d6:a9:60:57:f6:5e:89:6d:63:ae:ef:5e:1b:
                    72:d6:c6:da:42:ad:ae:51:7e:ea:ea:d0:a1:87:0a:
                    e1:c6:99:02:f1:d2:a2:77:23:ee:61:65:be:8e:b3:
                    a4:0f:5b:38:09:65:89:3d:8f:99:f4:30:ff:5e:23:
                    9f:94:6f:59:a1:b4:f5:e2:94:a7:3f:bc:fa:1b:cb:
                    1d:ca:ae:bb:74:35:68:ee:b8:aa:03:cd:3a:d9:c3:
                    d1:34:f0:81:6d:cf:3c:02:69:e4:ef:7a:92:9b:f7:
                    0b:ce:40:1f:41:50:89:ff:97:31:b1:5c:33:ed:69:
                    6a:3f:4b:e8:8b:ac:da:09:92:0d:91:15:d4:d0:41:
                    21:99:80:27:93:fc:af:b5:e6:77:52:47:61:9d:99:
                    97:e8:a2:e0:96:6b:4a:ec:95:2c:d8:35:e1:97:95:
                    66:1b:5f:61:16:25:9b:a8:44:4e:62:1d:d9:88:21:
                    e2:45:e3:2f:78:24:2d:0b:3d:65:8a:6b:60:8e:6a:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:30:73:9A:C6:2F:26:98:8E:E8:61:0C:CE:3D:39:25:D6:D3:B2:7B
            X509v3 Authority Key Identifier:
                keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d3:2e:42:79:7b:76:62:23:65:39:ca:25:7a:b6:d2:65:4c:
         9e:62:5a:19:da:f3:46:48:b6:c4:1d:71:60:89:e0:f3:90:b1:
         96:70:47:99:27:8d:c8:f9:10:ad:a1:38:68:bc:cc:48:6a:28:
         6a:e7:6d:7d:60:23:d9:d8:4c:13:06:55:39:cb:07:c0:02:a7:
         27:8d:4c:e9:1a:f6:44:7e:11:06:ba:d7:5c:72:fa:ad:42:4f:
         e6:64:78:df:2e:0a:36:f7:32:51:ad:f7:0a:53:66:b9:a9:73:
         f8:0f:34:e7:ad:b3:b3:08:40:87:47:2f:3a:77:6d:5b:c4:af:
         5f:03:cc:a7:03:22:cb:d8:c1:1e:e1:13:95:e6:0c:7c:6a:ad:
         24:d6:d6:94:bc:ac:73:2e:8b:ed:a9:40:37:ec:60:26:4f:cb:
         ef:d8:79:95:0b:11:6d:a9:64:ed:d8:25:d0:e7:1d:e6:1e:0d:
         7e:0b:a6:20:b9:f4:55:fb:2b:41:ef:0c:57:59:92:5d:ec:7a:
         61:be:db:2f:50:04:3d:e3:eb:7b:bd:03:11:25:47:3f:d8:aa:
         81:64:61:85:28:65:a8:29:25:82:56:72:51:9f:0d:bf:51:77:
         ac:31:86:ff:be:3f:58:32:57:43:83:ac:c1:00:45:9c:f1:13:
         70:1f:05:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:44 2026 by rpki-client