Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File:                     RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier:          dGGzhYcB7Wa9jtmdk8J+YPZZ9iZHgqQgD8LZNHL2Irk=
Subject key identifier:   FA:7A:40:B3:1A:C2:96:B6:F1:99:39:88:AB:35:BD:0D:9C:3D:7B:43
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer:       /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial:       019F927FAE29C497047F3907450959D5B9FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number:          0AAE
Signing time:             Fri 24 Jul 2026 05:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:08 +0000
Files and hashes:         1: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: pj7Vuh/aMEVRnGn72+WuHoEvpDPKh3roSt8u0ia7sCU=)
                          2: avSOkO1vns5GxCktjUNPLihkmzc.roa (hash: K/+JeDys4FSY3Upe8AiLhWL3ov51q9PhObuk4WjvD24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:ae:29:c4:97:04:7f:39:07:45:09:59:d5:b9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
        Validity
            Not Before: Jul 24 05:01:08 2026 GMT
            Not After : Jul 25 05:01:08 2026 GMT
        Subject: CN=fa7a40b31ac296b6f1993988ab35bd0d9c3d7b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c4:33:04:69:b2:dc:4d:63:e8:47:f7:a9:9c:
                    5f:ac:ef:b6:64:23:5b:dd:7f:e7:16:0f:05:3f:f1:
                    8c:f2:c4:4e:d5:db:ff:5c:ba:11:8e:e2:3e:fa:f6:
                    98:c7:0d:a0:15:77:50:7b:30:2a:35:4c:12:13:0a:
                    bd:06:b3:36:22:a3:60:81:c1:44:32:b4:dd:59:b4:
                    a5:38:72:b4:4e:79:58:98:d7:93:4a:99:8f:d1:5b:
                    9b:19:00:17:2c:21:4c:2f:1e:87:ee:c2:d9:89:24:
                    d2:65:ae:8d:1c:8e:b6:f1:cf:ed:86:38:25:1a:32:
                    d8:2d:b1:82:fe:98:71:39:5a:ed:dd:54:3d:e7:56:
                    7c:3e:45:c7:c2:aa:7a:12:15:84:6a:5d:3b:ac:f2:
                    b7:69:f5:b3:89:b2:71:ad:1d:14:f1:55:df:01:4c:
                    3d:f8:3d:19:29:79:a5:24:bc:68:0d:5e:d7:4d:b2:
                    b9:c2:30:95:c6:25:6d:cc:38:a8:bb:1f:4f:89:b6:
                    c3:ff:91:9b:93:69:f4:d1:2f:14:a5:af:3a:19:2a:
                    d3:fb:d4:e5:35:66:7a:31:59:25:22:2a:8e:e6:a8:
                    00:4e:e4:6f:b2:5b:93:f5:0f:12:ba:f3:30:2b:a3:
                    2b:e9:1d:4c:ac:0f:5d:6d:0b:08:f6:78:3b:52:c9:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7A:40:B3:1A:C2:96:B6:F1:99:39:88:AB:35:BD:0D:9C:3D:7B:43
            X509v3 Authority Key Identifier:
                keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:20:22:44:b3:b9:7e:95:bc:e4:88:43:b7:8e:a8:18:1e:f7:
         c9:cb:d0:1e:69:80:c9:27:a5:fb:11:c5:f9:a5:2b:e1:aa:6d:
         10:f7:f4:12:5b:64:97:8a:9d:7e:dc:2d:51:88:9e:81:1c:36:
         06:a6:4f:e0:e6:8b:2e:bf:d9:ec:e9:ca:2f:b6:4a:8e:56:61:
         80:d8:2f:db:12:c1:28:9a:1a:3f:ac:5c:a4:83:ca:3f:66:9e:
         0a:95:f6:44:69:db:8f:bb:29:e4:ed:8d:26:b7:c2:80:31:17:
         72:43:29:2f:f3:e6:1b:ff:49:47:6e:bb:52:fb:c5:b5:84:0f:
         62:43:68:8a:5f:92:be:8a:0c:42:42:15:26:7e:31:2b:4c:b9:
         1c:54:1f:d9:c4:07:cf:95:4c:7e:83:76:1c:b5:f2:b6:2f:6e:
         f2:60:53:27:93:3c:bd:b7:dd:26:61:84:36:a2:53:7c:5c:c4:
         2a:43:a3:19:9b:f1:ce:70:76:f8:a6:9d:e4:17:8d:6b:08:fe:
         bf:20:72:b0:62:3d:1a:b8:3f:ef:20:2d:0d:a1:f9:d1:6d:5f:
         75:04:21:5e:96:c2:44:fa:d1:56:19:2f:f8:f4:75:d2:7c:3c:
         14:07:14:21:33:fd:4e:c7:83:f1:bb:6b:c4:34:45:3a:22:6a:
         5e:56:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:03 2026 by rpki-client