Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
File:                     v0nfV38O5EMYjAKTI0V7vFoOrTs.mft (raw, json)
Hash identifier:          DOms6YHxwxfIIxN+JqiHqnEZybAqWK5cURvs+d6n/yA=
Subject key identifier:   73:9E:1D:F3:DC:5D:04:D6:87:F9:49:DA:11:5E:AD:85:19:CC:EC:6B
Authority key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
Certificate issuer:       /CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Certificate serial:       019F8E34E44E3A208CF2E604CC2D04A29A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
Manifest number:          0247
Signing time:             Thu 23 Jul 2026 09:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 09:00:58 +0000
Manifest next update:     Fri 24 Jul 2026 09:00:58 +0000
Files and hashes:         1: bKh-dpkoM8M1Du_IILRYX251fgo.asa (hash: oXXXPHkpG0X/cvCkTg371/ma/E5fJ7wCX5/lM1Q2pQk=)
                          2: v0nfV38O5EMYjAKTI0V7vFoOrTs.crl (hash: Jp8sDPcZVKngZapwYCQksJu1h0X4MPo3qKPbSociPGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:34:e4:4e:3a:20:8c:f2:e6:04:cc:2d:04:a2:9a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf49df577f0ee443188c029323457bbc5a0ead3b
        Validity
            Not Before: Jul 23 09:00:58 2026 GMT
            Not After : Jul 24 09:00:58 2026 GMT
        Subject: CN=739e1df3dc5d04d687f949da115ead8519ccec6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:35:35:b0:d3:ed:e9:82:da:05:a5:26:7e:
                    99:a8:8f:2b:a9:af:17:87:05:a9:0b:bb:2c:d8:3f:
                    b3:ea:7c:b1:4b:b7:44:b7:ae:55:51:4e:02:c5:af:
                    e6:28:6a:5d:65:c5:dd:bd:30:7d:93:69:96:2b:7d:
                    76:df:27:e3:0a:8a:87:cb:93:2c:e0:31:6e:7c:51:
                    50:c6:3d:83:85:ac:0c:6d:9d:9a:a7:f8:e4:af:47:
                    20:d3:4c:be:0d:a4:20:a9:a5:1b:87:4d:e6:0d:a6:
                    27:c4:4e:99:64:3f:e0:29:c4:a6:8a:ce:5d:c1:95:
                    ef:45:6c:e4:49:73:3f:3f:4a:b7:d6:29:65:c3:a1:
                    83:ea:24:f2:3e:2d:e3:dc:39:8d:1c:68:b1:58:a7:
                    c9:68:7a:52:3b:c7:ea:94:78:b2:66:14:dd:b2:d6:
                    12:bc:0b:e0:b1:5f:3d:a2:e6:ac:fe:d3:e9:2e:c8:
                    08:28:db:78:f8:ae:6e:1a:9f:4e:dc:05:45:39:fb:
                    43:c7:ef:76:c2:a0:e0:b3:5b:e5:99:9a:03:63:a5:
                    00:af:d8:9e:c3:c6:6d:48:4b:af:18:5a:8d:8e:4e:
                    db:8b:25:41:9e:55:a8:ad:54:2d:44:5f:d1:f5:de:
                    08:da:59:04:91:3a:7f:98:9d:76:35:56:bf:1e:44:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9E:1D:F3:DC:5D:04:D6:87:F9:49:DA:11:5E:AD:85:19:CC:EC:6B
            X509v3 Authority Key Identifier:
                keyid:BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:db:65:26:33:cd:e4:08:55:8a:7c:73:02:a6:16:68:05:6c:
         6e:79:00:39:1a:ef:c9:bb:42:8a:95:b5:9e:11:9c:04:a1:5f:
         69:e3:39:c7:4b:06:8b:a8:1d:ac:e2:e4:f3:65:48:52:3a:48:
         d4:27:ac:54:ef:6d:d2:7c:de:a6:b4:c8:68:4e:3b:80:18:f9:
         b4:9b:19:03:5e:8a:6d:2c:ac:46:b5:9a:92:1d:53:78:2a:b8:
         41:f3:13:97:1f:cf:49:8d:31:00:ca:4f:11:6b:de:a0:62:a9:
         f9:8c:d0:84:0d:ae:05:04:a7:d3:7e:7d:83:a3:88:b3:f2:e8:
         3f:93:c9:7a:5a:c6:cf:26:0e:9d:d9:13:ad:57:46:32:a0:b9:
         bb:1b:6d:43:cd:de:88:df:57:f0:0c:43:b6:e6:c5:1f:43:52:
         e2:07:27:39:e3:25:40:c3:ef:df:e6:26:f1:74:ab:ea:09:8c:
         fe:fc:c4:8a:09:c6:a4:40:d8:b8:a2:b9:eb:8e:bf:8d:03:25:
         65:82:0a:58:77:30:5e:70:77:9c:cd:10:40:de:03:2c:9d:b6:
         af:fb:4f:d4:5b:b2:3b:64:0e:73:a9:67:1e:f1:41:71:cb:99:
         12:20:17:e1:f0:88:83:81:e4:ad:1b:4a:ce:5a:82:a4:9e:60:
         f2:45:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:11 2026 by rpki-client