Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File:                     CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier:          M2LoBEg/gKcnEA+M20i3OPLWLYqXFalCU/59UZuDeVI=
Subject key identifier:   83:9D:18:C5:7E:0C:19:F5:D5:45:A6:02:11:F9:C1:51:9A:F6:51:D6
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer:       /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial:       019F90C7A95DC6B780591390278A97B319C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number:          0775
Signing time:             Thu 23 Jul 2026 21:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:31 +0000
Files and hashes:         1: 4PSqkbn4bMtBeCnSBAdphuD0N68.roa (hash: 7WdKS6f+17GrfB54aQeANA2RWiVlXakknw1q0Gpsn4w=)
                          2: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: b7VTO0yt7sEpRRsMNcGWHfq+c9DMKL4CI0xe7ARjxbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:a9:5d:c6:b7:80:59:13:90:27:8a:97:b3:19:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
        Validity
            Not Before: Jul 23 21:00:31 2026 GMT
            Not After : Jul 24 21:00:31 2026 GMT
        Subject: CN=839d18c57e0c19f5d545a60211f9c1519af651d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:f1:b6:49:cf:a7:da:62:8d:e1:34:b9:33:
                    d4:f7:cb:56:73:c4:79:f3:e1:a1:fc:48:9a:90:82:
                    08:cd:30:23:82:54:11:22:cf:73:ff:62:72:fd:83:
                    83:50:4c:c7:4d:0a:57:be:37:b9:2f:a9:b0:df:cd:
                    6a:90:6f:42:3a:68:69:99:f0:a9:e2:4a:21:d0:a6:
                    2d:53:f9:5c:8b:bd:21:c5:c8:35:3b:d4:a6:27:f4:
                    10:13:92:06:c8:8e:3b:f3:aa:1a:72:3c:fe:8a:d1:
                    8b:55:4d:0e:bf:4b:e9:6b:86:a7:ae:5e:83:2d:f9:
                    1f:9f:58:0c:ea:7b:ff:55:d9:a7:d5:db:06:8e:54:
                    9c:65:23:48:39:e4:42:8a:b0:98:ee:25:71:75:e0:
                    59:8e:21:18:2d:54:5a:20:92:6d:19:b5:c2:04:8b:
                    1a:59:38:bd:5c:25:85:7b:35:8c:e6:5f:f6:e7:f0:
                    e9:6e:b8:8e:f7:35:04:0e:2c:2b:80:7d:73:66:0c:
                    04:c3:bf:0a:64:c1:34:1b:28:72:c4:2b:e4:ea:5a:
                    d1:c9:a1:f8:dd:ca:a4:8c:2a:ad:f6:ee:aa:a5:68:
                    ad:98:fb:ba:e4:61:a5:4c:e6:c8:d0:0d:5b:bb:3a:
                    e6:45:7b:57:fd:38:25:df:e2:5d:3f:0f:21:96:6c:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9D:18:C5:7E:0C:19:F5:D5:45:A6:02:11:F9:C1:51:9A:F6:51:D6
            X509v3 Authority Key Identifier:
                keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:32:ae:89:04:77:e4:a2:0b:bf:a1:08:e5:be:13:f2:02:
         68:cc:76:8e:65:b2:b8:1c:4c:d3:ef:06:8e:16:ce:08:3c:83:
         c0:bf:ca:a3:5c:5b:dd:f0:15:a4:91:72:64:88:eb:04:db:9b:
         c1:a8:76:8a:23:e0:b0:d1:85:95:bb:fe:c6:47:19:62:60:34:
         33:51:7a:da:17:b1:7a:c5:90:85:fe:7a:94:f1:a5:57:0a:87:
         50:34:ec:59:24:eb:59:1f:42:c6:81:3b:69:b5:15:aa:d7:21:
         89:86:8f:16:a3:de:e5:79:9a:ee:5c:8d:9d:86:35:e7:a5:b2:
         ef:34:4c:46:87:2d:74:5c:f1:09:cb:b1:4d:6f:df:45:5a:cd:
         4a:5d:8b:84:17:f4:9a:0c:d2:16:89:9c:b4:31:8c:f4:9a:f2:
         33:13:b4:99:3f:27:fd:28:f4:05:d8:4f:66:7d:13:6d:dc:a2:
         32:4c:ae:37:58:c8:f5:49:d4:b6:2c:04:33:e2:19:02:c3:12:
         de:2b:33:43:6c:78:ed:aa:a0:d0:ab:38:19:6e:4a:2e:5b:27:
         5e:5d:3f:12:d4:1a:94:38:a5:88:4e:13:a5:b4:ed:ab:01:4a:
         ed:dd:93:95:84:67:29:24:8e:6e:e3:3c:6d:77:0d:00:39:db:
         c2:1d:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:46 2026 by rpki-client