Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
File:                     v1axbhD6Re7KFoexaJ_CHxgR53U.mft (raw, json)
Hash identifier:          cU5O6doBX20+oYUSIkjmYV0TGFLtG95j2LxPg8MVETo=
Subject key identifier:   90:44:EF:36:A9:F6:0A:E0:54:D7:DF:4C:0E:BB:CF:1F:38:CA:CA:9E
Authority key identifier: BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
Certificate issuer:       /CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
Certificate serial:       019F91A39149BEE611614F93E91AF4249C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
Manifest number:          01F7
Signing time:             Fri 24 Jul 2026 01:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:43 +0000
Files and hashes:         1: pdd46O_7-gqSCVYzyxen2RSC1dU.roa (hash: GncF/pont0DY3uOfDhLzl1X5Kar3INu8dZi3iu5gRVM=)
                          2: v1axbhD6Re7KFoexaJ_CHxgR53U.crl (hash: hXILCAqmASFYxt4IaBWxUa4PIJVbX7VT0h+TrZSPqnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:91:49:be:e6:11:61:4f:93:e9:1a:f4:24:9c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
        Validity
            Not Before: Jul 24 01:00:43 2026 GMT
            Not After : Jul 25 01:00:43 2026 GMT
        Subject: CN=9044ef36a9f60ae054d7df4c0ebbcf1f38caca9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:00:96:26:27:ed:87:31:24:60:04:04:49:
                    b4:49:af:97:1c:aa:5e:00:f3:75:3e:19:62:7a:9d:
                    3b:f8:6a:7b:03:f2:07:a9:d3:d0:33:7a:e3:67:7b:
                    88:05:8f:17:6d:33:1a:7c:b1:cd:80:30:ed:79:0e:
                    c4:c6:f5:e9:b6:81:87:5e:c4:ef:ee:69:7a:e4:7a:
                    2e:b8:17:ba:56:23:dd:41:3c:86:fc:62:6b:32:1d:
                    54:f1:73:1c:1b:4e:81:d6:a5:24:9e:be:72:6c:8c:
                    f8:55:4d:fd:cd:45:75:44:2b:bf:18:be:2d:90:c2:
                    34:d3:45:6b:31:f4:bb:1d:0b:c5:d8:08:38:1b:fa:
                    1b:29:b3:7b:b6:19:7d:bf:4b:33:37:cb:3f:ef:da:
                    be:4b:0b:da:78:76:8a:27:b6:b1:06:97:a5:91:98:
                    a6:68:24:06:98:71:d0:a3:e2:22:05:3e:50:6f:39:
                    e0:d1:d1:fd:71:36:7f:56:2a:e4:70:1d:74:97:bd:
                    63:4e:a0:0b:9d:d6:b1:5b:48:32:61:ee:57:cd:fd:
                    71:4d:9e:fa:34:d3:68:9e:ed:bd:9c:ab:4b:94:cb:
                    29:24:cb:ea:3a:31:95:6f:2c:bc:df:a0:a5:5e:b4:
                    4d:7f:08:37:d5:08:b7:61:99:58:fc:67:62:36:07:
                    f3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:44:EF:36:A9:F6:0A:E0:54:D7:DF:4C:0E:BB:CF:1F:38:CA:CA:9E
            X509v3 Authority Key Identifier:
                keyid:BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:18:b2:a5:6d:7b:db:6b:29:a1:cf:dd:e9:fa:bc:f5:bc:ce:
         54:88:cd:eb:c2:03:10:22:c8:7a:94:cc:7d:54:95:b7:19:6f:
         31:96:18:73:40:9c:26:ac:55:31:7f:4f:8d:5c:d5:ff:1e:41:
         27:01:52:8e:1f:65:7b:1b:e4:71:37:3a:05:84:d2:f8:1a:3f:
         2b:cf:8f:9c:e7:d6:14:2d:4b:94:fd:e7:de:cc:2f:69:bb:37:
         f3:29:b3:22:c2:10:54:fd:ce:33:64:d5:c2:6a:8a:c1:9e:fc:
         dc:00:06:ef:13:1a:9e:19:16:4e:61:c4:1b:a9:08:b8:24:64:
         04:f0:25:fe:de:d8:6f:f0:fb:ee:97:65:5e:05:87:92:9f:1b:
         21:ef:4d:4c:0a:cf:4d:16:e1:09:90:d2:a5:4c:34:9e:3c:e5:
         49:1a:d9:35:c0:49:1d:fb:28:27:e0:14:1b:9e:b1:01:54:e1:
         0a:1b:04:8f:ff:ab:42:d4:ed:bd:1b:f6:bb:16:6e:98:86:bf:
         f6:5c:9c:3b:d4:a2:b6:7f:31:bd:76:30:7c:1e:98:f7:4a:36:
         ee:b1:22:0f:20:ec:67:23:a1:4e:2e:63:dc:15:7c:3f:04:42:
         33:ef:d5:7e:e9:2f:3b:89:51:d7:24:ee:c7:58:76:fb:3a:20:
         b1:43:b6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:59 2026 by rpki-client