Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File:                     U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier:          8WvvJEjxkgfAOfgZn+6LpHdlVvMeyTVLlx2RspAYOjM=
Subject key identifier:   FA:13:16:64:63:DE:B2:3F:77:49:1E:23:F3:C5:F0:3A:01:38:31:CA
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer:       /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial:       019F93924245782590292FE1CD5593B4C052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number:          0FBF
Signing time:             Fri 24 Jul 2026 10:01:03 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:03 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:03 +0000
Files and hashes:         1: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: sMyhwtm94OcyJK/72pYwozzFx2xfQ+QvzoajSxrJtvc=)
                          2: VtaKLbc1bmC0OT-Q3JTgdIZyayc.roa (hash: UBrKjUxBC5vtYfpevFvOXwmeammg36EmC9n/o1kbyUg=)
                          3: ZT6FomeiG8V5UVVq_9nhQvhkJ7E.roa (hash: VNWPoTgK+6WszCC/cUNxFvYDKEgpXvtoe5rvFlIxorQ=)
                          4: fgZ2gr9j8nkuTcXKTHLTyjKT7Rs.roa (hash: /jAuQCxC5qXXEGyOBRWBeLTs2UBCn/Kok1gqE38op4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:42:45:78:25:90:29:2f:e1:cd:55:93:b4:c0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
        Validity
            Not Before: Jul 24 10:01:03 2026 GMT
            Not After : Jul 25 10:01:03 2026 GMT
        Subject: CN=fa13166463deb23f77491e23f3c5f03a013831ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:0c:5b:90:5d:9b:c5:66:0c:ed:90:87:b1:
                    b1:e1:04:29:05:62:e7:0e:cc:cb:bb:b1:fb:31:1c:
                    fb:6f:c6:b9:fa:27:b4:02:a6:d1:83:28:8f:2c:0c:
                    62:86:7a:6e:40:26:0e:11:05:ed:0c:90:42:e5:ab:
                    31:5c:24:a3:47:a9:aa:ae:09:02:7b:ed:7c:6e:4c:
                    12:bd:3f:d0:6d:c1:23:d7:1a:1a:27:c5:de:3d:f8:
                    5d:a5:d3:92:cf:d6:42:30:f2:19:97:1b:69:22:b4:
                    9b:ed:a3:9a:b0:e2:6a:a5:70:6d:cc:d8:b3:2f:71:
                    c4:f5:de:74:56:f5:e4:fa:b0:05:46:0f:2e:4a:10:
                    0c:2b:01:90:c9:ad:a8:17:9c:7a:41:58:21:52:d6:
                    cd:ad:0a:e4:f9:02:20:01:f0:0f:52:2d:40:d8:56:
                    0a:33:60:8b:12:ae:4a:4e:15:c7:47:02:c5:ba:67:
                    c1:1b:34:72:db:89:84:cf:8b:66:46:18:f1:bc:86:
                    f2:88:34:65:21:6b:e2:dd:27:5a:c8:61:54:fa:76:
                    7b:0c:d1:a7:04:61:30:78:fd:fe:98:1f:54:44:15:
                    58:0a:17:16:e8:85:4b:9e:74:6e:9d:48:7d:c7:4b:
                    ab:0b:30:11:2b:d8:a6:c3:ae:06:a1:41:a2:e4:c3:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:13:16:64:63:DE:B2:3F:77:49:1E:23:F3:C5:F0:3A:01:38:31:CA
            X509v3 Authority Key Identifier:
                keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a4:56:10:45:c0:55:14:85:49:55:b9:74:0b:8e:5c:13:a0:
         1b:e7:67:c1:91:73:05:7d:48:95:53:80:77:e7:92:b3:a5:37:
         d9:1c:b5:b0:4d:42:08:2f:28:44:93:8b:05:f0:16:0d:5d:9c:
         84:14:11:aa:75:5d:92:8a:bd:fa:a9:49:d7:65:e7:3e:99:f1:
         d8:28:0d:56:c8:fc:34:67:15:14:68:1e:2e:16:dd:7a:df:10:
         28:2e:4e:a8:f9:95:d0:60:57:e4:2d:03:4b:c6:78:29:c0:6d:
         e7:8b:b5:47:b8:63:49:51:3e:bf:08:d6:cb:8b:2d:f0:d3:01:
         f8:f8:b3:02:c5:f9:14:f0:83:1b:87:0e:42:5a:50:ba:45:b5:
         1a:19:8b:46:0b:24:9f:a3:15:67:78:99:44:76:7d:68:79:df:
         fd:5b:14:2c:a5:46:c7:d2:86:f2:4b:10:33:db:c9:a2:b3:d5:
         f5:9a:36:8d:1f:b6:4e:78:8f:9f:a9:15:31:19:7a:71:74:c8:
         f0:1f:a7:19:db:96:a4:ad:d5:d9:5d:fc:09:e1:58:57:f5:1a:
         2f:a7:9b:d0:56:00:21:17:5a:e8:2f:7a:ef:0b:74:9b:0d:c0:
         89:7c:dd:a3:4a:68:45:20:01:77:3a:5b:10:31:7b:ce:22:01:
         b2:18:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:40:30 2026 by rpki-client