Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File:                     sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier:          VXCymZKiqsUIf8TrSI+HIf5ES46+Cwf3P/xrD8QUJTw=
Subject key identifier:   D9:DD:59:FA:3E:F7:03:23:60:23:21:61:3B:B9:CC:4F:00:4C:F4:70
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer:       /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial:       019F8FB5A2AD14A35C7D88FC45D7E5DE0178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number:          129D
Signing time:             Thu 23 Jul 2026 16:01:13 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:13 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:13 +0000
Files and hashes:         1: 1pIm4CEu_J6GPn1TUy1UPhKMBUk.roa (hash: kC5aY81+7wV5FaAuCbcDPO88uURjqA0og191H8ou4nk=)
                          2: IArcm7KHrcc-PY-XbMM0EYnJC8o.roa (hash: D8OnazQ4CkBXy0mTUKLIq9zAP3v8FKdV/2bmVQK5YE4=)
                          3: Wsun9qUEkz7Qte-mPAle0T2WkOc.roa (hash: 3L85Zuxdwbe+qNboOx36lUzHEqWROzqfxPyAEkPek0w=)
                          4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: hSQIoSeAXZCS3xmpetUJZ9yDsLg2w9woAzC0fvY3wgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:a2:ad:14:a3:5c:7d:88:fc:45:d7:e5:de:01:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
        Validity
            Not Before: Jul 23 16:01:13 2026 GMT
            Not After : Jul 24 16:01:13 2026 GMT
        Subject: CN=d9dd59fa3ef70323602321613bb9cc4f004cf470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:db:e1:2c:9a:f6:6d:9b:78:76:ab:c2:13:
                    31:7b:ac:7f:90:41:93:64:ac:c6:86:fe:63:49:9e:
                    07:ab:95:7c:a2:71:19:a8:cb:e6:ba:72:7c:d0:b1:
                    f5:f4:6b:64:8c:10:47:db:f4:8c:27:8d:2a:a1:e7:
                    06:a1:0b:c9:af:45:d8:01:f0:dc:b5:f9:fd:e8:62:
                    de:03:39:1c:7f:fd:f3:d4:83:7b:b0:ab:3b:07:e5:
                    a1:b3:7c:36:9a:19:22:69:bb:ae:c3:5d:19:25:af:
                    60:28:7c:60:8c:d2:52:03:16:09:20:89:91:f3:4f:
                    94:7a:9a:dc:61:a1:7d:5b:0f:f7:99:2c:c1:b6:03:
                    e9:0b:a1:5c:af:21:6b:e6:d1:fd:fe:b1:23:3f:61:
                    8e:54:90:6f:df:c0:01:12:5c:1b:6f:1f:6c:cc:9b:
                    e1:87:bb:2c:6c:16:c8:35:16:54:61:40:0b:45:cb:
                    94:92:e0:e5:09:97:90:8b:4b:4d:35:ba:8d:65:e7:
                    a9:91:e2:04:a5:f1:9b:46:b6:9f:42:30:4c:1f:d5:
                    fa:21:19:5f:2d:33:94:a5:e1:b5:fd:6f:28:e5:68:
                    30:31:8a:17:31:9a:d7:96:02:cc:64:fe:77:ca:69:
                    1d:cf:fd:09:9a:af:e4:d9:80:0d:ba:d7:1f:f2:07:
                    0d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DD:59:FA:3E:F7:03:23:60:23:21:61:3B:B9:CC:4F:00:4C:F4:70
            X509v3 Authority Key Identifier:
                keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:84:e9:c4:c9:d2:64:87:c3:01:dd:59:7c:46:ba:13:77:0f:
         31:c6:8e:59:f6:c5:b5:45:7c:ba:b3:8a:de:e6:52:9c:13:7a:
         3b:80:1a:eb:1f:1d:0b:fc:3d:34:60:b7:c8:6f:4e:9b:77:31:
         8b:41:72:ee:f3:56:e7:12:2c:ee:f2:2f:bd:87:6d:6f:9c:8d:
         40:ab:9f:f9:eb:0a:a3:4b:a9:ae:ab:dd:6f:4e:26:02:57:f1:
         5c:50:b0:cc:f4:19:c8:cb:bb:e7:ad:13:7e:c9:4f:26:20:18:
         6d:74:ba:3d:47:c2:b5:65:cc:8b:d9:d6:15:05:20:e1:9c:b1:
         c8:f3:37:e0:32:9b:5d:9c:b7:ef:ae:c6:1f:3f:34:6e:5d:ae:
         53:e8:e6:1c:93:1d:7b:20:81:fc:2d:86:9c:f5:81:1f:22:a3:
         71:da:e2:f2:1a:a6:47:9d:92:31:aa:5a:6f:18:9d:bd:df:9f:
         24:f4:06:8b:18:d8:b6:b4:38:45:17:f3:0a:60:35:bf:a4:4a:
         47:58:e4:79:7c:1b:ac:67:bf:0a:0d:7a:de:22:39:1f:7c:69:
         04:4d:13:4e:30:8d:86:ca:a9:3d:e0:89:b4:93:4e:bf:16:40:
         6c:d5:86:43:79:a4:5a:56:48:82:30:2f:e9:69:55:f0:ba:14:
         40:a2:a7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:49 2026 by rpki-client