Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
File:                     1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json)
Hash identifier:          Zv3Rp714MPkoRiLfZoTq3zpI34nO778XavZVbP6PD0o=
Subject key identifier:   52:A3:A5:23:90:20:57:8C:7F:BD:85:D6:A1:04:3D:4A:38:D0:CB:2B
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Certificate issuer:       /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial:       019F8F7F59C61AC682C2B1CA691014E242E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 15:01:55 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:55 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:55 +0000
Files and hashes:         1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: sCi7kle1BEHdnDsXEcX2kuTDfOpudGVJRAqDkuTqb/k=)
                          2: L_TvjuvkS8Ae6hr2C351DvSCXtw.roa (hash: iKhq8WVW3Ih/b09mpbpUlZEB5fDDBgm0pJSp3ErD2hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:59:c6:1a:c6:82:c2:b1:ca:69:10:14:e2:42:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
        Validity
            Not Before: Jul 23 15:01:55 2026 GMT
            Not After : Jul 24 15:01:55 2026 GMT
        Subject: CN=52a3a5239020578c7fbd85d6a1043d4a38d0cb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:df:f6:08:40:fa:37:de:5b:01:1b:e7:9c:
                    75:58:8f:c6:62:05:07:0a:b1:6d:92:10:9b:32:ba:
                    cc:75:20:46:59:02:5c:bb:fb:aa:78:bf:2c:a4:0d:
                    7e:c7:fe:81:62:70:68:54:3f:d3:92:91:22:17:54:
                    d3:62:94:6c:93:92:07:f5:90:ea:84:66:ac:46:f7:
                    09:61:e7:78:b0:78:1c:99:4a:4e:a2:66:40:71:d5:
                    d6:ba:bc:8a:38:3c:4e:16:80:77:1a:60:c3:05:f6:
                    70:6d:b1:d3:5e:b3:ea:31:8c:cf:fd:43:15:1a:04:
                    f9:3f:7f:b2:44:74:b5:32:70:7c:fa:db:13:eb:a8:
                    97:a5:89:ff:7d:54:dc:82:7a:cf:15:ba:a4:d9:e8:
                    a8:ab:3d:6d:7a:09:4c:27:e9:9a:35:f0:45:80:7d:
                    af:a3:55:c4:ff:3d:dd:0f:82:b3:46:be:38:13:4b:
                    7a:a6:ff:c3:3c:52:eb:01:c8:03:63:33:74:70:3e:
                    d5:04:67:0d:b8:d4:20:98:21:f2:b3:be:d1:d7:36:
                    01:ce:c7:f5:eb:de:e4:80:d0:16:d8:c8:3a:f4:e0:
                    a9:64:b9:47:24:91:35:e3:18:9b:3f:a0:5f:2e:8c:
                    e3:99:0e:8b:23:ca:04:08:c8:0e:05:05:ec:c9:88:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A3:A5:23:90:20:57:8C:7F:BD:85:D6:A1:04:3D:4A:38:D0:CB:2B
            X509v3 Authority Key Identifier:
                keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:c2:88:c8:12:1e:cf:2f:c2:d1:7a:d4:7f:77:73:fd:e8:
         21:8b:fc:a6:57:7f:e4:4e:c6:de:1b:2c:d7:e4:67:96:f9:8f:
         1d:5b:9f:19:17:54:76:4d:b2:c5:f0:96:a2:b2:75:eb:cf:f3:
         0f:4c:c2:cb:ed:f1:a5:37:9a:f5:79:eb:1b:b6:a5:fd:d9:d1:
         95:c7:80:34:73:65:2e:af:7d:34:a2:56:25:d7:f7:3d:53:91:
         8c:c2:70:8b:51:66:4e:ff:6f:45:98:14:f8:ba:fb:27:06:0d:
         f3:25:ae:ad:e1:aa:3b:b8:48:a6:dd:54:d8:d2:32:8b:5b:31:
         ee:2c:8f:3d:4b:9b:7c:03:49:c7:62:bf:cd:e0:e9:a5:f0:35:
         aa:15:dc:86:f7:b6:91:04:42:13:19:bb:47:72:da:cb:be:41:
         61:7b:f9:1b:7c:f9:c0:ef:ad:19:fe:e2:b9:db:6e:4a:35:e1:
         99:80:02:d0:5b:7f:66:cc:91:7e:07:d9:43:a4:18:46:99:0b:
         7c:01:0f:1f:59:a9:83:6d:db:9f:e3:0a:79:20:6f:98:2c:bd:
         3e:43:a4:57:b4:38:b1:ea:f3:3e:df:4d:5c:81:4b:76:93:21:
         09:ba:92:d0:db:ad:39:69:1b:da:ac:69:c0:f9:18:51:41:f9:
         c3:4f:41:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:51:37 2026 by rpki-client