Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
File:                     fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json)
Hash identifier:          KQi4divWkzXjSnkuD672Tvnsl/9CFOIxjjiZBiIw8tM=
Subject key identifier:   BE:03:6D:C4:04:8F:03:39:DD:9E:36:F4:F3:C1:C1:F1:0B:29:72:B7
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Certificate issuer:       /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial:       019F93C8A3BE50C1FE7474E5EC10F215D56B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
Manifest number:          1708
Signing time:             Fri 24 Jul 2026 11:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:27 +0000
Files and hashes:         1: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: O/XBQ+xPA46nhllhdRdO50WAnIk+FipwtyhNE2PGKGw=)
                          2: iS8uMVcfTxV4oFRPmDdhbpSZpws.roa (hash: MP/qvCm1sWW7tlIkjuMYgAfGTXxSGhkZeUhVHpOpueU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:a3:be:50:c1:fe:74:74:e5:ec:10:f2:15:d5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
        Validity
            Not Before: Jul 24 11:00:27 2026 GMT
            Not After : Jul 25 11:00:27 2026 GMT
        Subject: CN=be036dc4048f0339dd9e36f4f3c1c1f10b2972b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:a2:1f:67:b3:5f:35:2d:c4:0f:c8:8e:8e:
                    b9:70:64:12:09:70:be:78:10:60:c7:0c:b5:f6:be:
                    b2:05:1b:12:e7:75:71:ee:f2:7d:70:e7:1f:f1:ec:
                    1f:1b:41:6b:2f:56:4b:a9:1e:b9:b9:04:49:e5:a4:
                    a0:67:ac:a1:9f:6a:75:4f:a2:89:b8:3f:27:a9:73:
                    6d:04:bc:a9:90:be:c3:ac:9d:5c:cb:60:0b:46:6c:
                    84:2f:62:34:a1:a4:af:58:a5:e1:d9:d3:a1:40:4d:
                    cf:74:27:4c:50:ac:7f:95:88:92:99:29:07:82:7f:
                    56:32:63:e2:cf:c2:c4:2f:a1:a4:a1:b7:9f:d6:8c:
                    a2:e7:2b:90:01:7b:44:37:7f:83:fc:26:d2:b1:e2:
                    d9:de:be:61:01:27:0c:84:60:d0:b6:53:b7:87:f6:
                    cc:90:30:22:56:36:86:f3:3e:d1:5f:d4:00:c8:ee:
                    1e:3d:58:85:94:fc:5d:e5:38:6b:44:b2:cd:63:67:
                    d3:d1:dc:1a:02:fd:05:08:fa:50:5b:0c:e6:19:d1:
                    11:ae:8f:31:53:36:83:72:40:06:ef:e3:fc:ff:6c:
                    ad:35:46:5a:55:f8:2c:b1:38:f2:48:cb:cd:48:20:
                    bf:94:2d:b7:03:c1:40:55:25:b8:34:44:19:9e:d9:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:03:6D:C4:04:8F:03:39:DD:9E:36:F4:F3:C1:C1:F1:0B:29:72:B7
            X509v3 Authority Key Identifier:
                keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:cf:aa:fc:5a:0c:60:8d:54:f1:82:7b:22:32:96:67:ef:e3:
         5f:86:83:05:df:e2:5f:04:29:65:7c:7c:09:5a:e5:0c:2f:b5:
         fa:67:07:b5:ed:f3:18:0f:52:54:c5:0b:47:97:da:12:cd:c2:
         ea:aa:ef:e2:f4:20:4c:83:93:2b:d5:8d:2b:9b:8f:fc:5e:da:
         48:de:a3:da:2d:65:5a:4d:75:7a:5f:bb:5e:d5:18:eb:82:1c:
         9f:d4:b2:0c:f1:90:2d:c2:d7:c0:58:bd:f2:a0:ea:c2:30:26:
         46:b4:0f:c4:e9:67:85:89:a4:ab:60:ef:56:6a:38:d1:8a:72:
         74:16:1d:65:a5:19:04:ce:c2:5d:01:16:40:84:11:a3:82:43:
         f0:3f:f5:83:82:56:96:56:57:26:ce:34:0f:c6:88:cf:0d:fe:
         a4:cc:82:9e:77:db:7c:fc:35:ff:d0:12:4d:82:0a:f6:df:6b:
         1b:7f:c0:18:a4:f1:7b:9a:e3:d1:31:fb:13:49:82:30:82:08:
         18:85:02:fc:b0:c5:d1:eb:53:6f:8b:2d:47:21:b7:c1:90:78:
         18:92:35:ee:88:e8:b7:31:59:bb:92:d4:e0:14:f1:63:d2:02:
         65:5b:59:df:9c:d9:47:9b:8b:92:25:1a:d1:ba:ce:a0:cf:b3:
         34:cb:aa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:57 2026 by rpki-client