Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File:                     f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier:          cu9cN5lEqVWMa6lQlKzeq+u80IEcxe0XhSP0EQFC4VA=
Subject key identifier:   59:44:A7:40:3C:57:E2:7C:D5:F6:2A:12:44:44:81:B1:DE:FB:23:F0
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer:       /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial:       019F905A9397E7A072F864C10C82793DF6A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number:          070C
Signing time:             Thu 23 Jul 2026 19:01:22 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:22 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:22 +0000
Files and hashes:         1: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: ul9Jo9Rzl731bDwcNTydS4sRfvcSbRdIgtcCu0E0WYc=)
                          2: nfdpyeKlCuQOx7_W49-x6O8ih_s.asa (hash: HMOJp4h10Y4D9hDQRuGq2+JTFg3aBr1LYBivU1L3FOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:93:97:e7:a0:72:f8:64:c1:0c:82:79:3d:f6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
        Validity
            Not Before: Jul 23 19:01:22 2026 GMT
            Not After : Jul 24 19:01:22 2026 GMT
        Subject: CN=5944a7403c57e27cd5f62a12444481b1defb23f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:12:ee:b4:a1:16:52:2c:78:73:f1:6c:fb:
                    c8:cd:12:94:c9:c2:e2:e0:4f:a2:2c:35:d2:e0:f2:
                    51:a4:86:74:e9:b4:1e:7e:cf:cd:39:04:df:43:bb:
                    49:b6:51:75:48:cf:e2:9d:26:bd:98:b7:12:89:e2:
                    9b:02:fe:80:9c:31:b6:59:1b:6d:1f:5d:1e:09:3f:
                    49:f6:6d:20:f9:8b:49:f7:45:28:3a:db:04:bf:ed:
                    fc:70:86:97:88:51:d8:4c:76:c5:00:97:58:54:d3:
                    62:f5:9c:53:46:2c:e7:2a:aa:4d:4f:6d:5c:78:bc:
                    15:e7:de:60:7f:09:10:74:d4:32:c4:23:5c:84:9f:
                    8d:b9:13:18:09:41:f0:9c:fb:c9:21:49:3f:b6:74:
                    15:5b:86:cf:a1:63:99:fc:dd:68:8c:8d:b8:3c:7c:
                    f4:4f:1e:79:a6:7d:e8:06:74:06:89:85:e6:84:8b:
                    f7:77:92:62:34:21:f2:10:2d:ca:ec:72:96:99:bc:
                    c5:bf:1e:11:fc:84:57:25:d7:37:f1:c9:5d:9e:dc:
                    00:89:45:86:9b:b8:f4:17:36:62:a5:5a:5d:e8:a1:
                    58:2f:b0:99:69:07:f9:7d:ce:26:cf:36:ef:a4:cd:
                    89:81:26:52:c1:e4:21:30:e7:1b:0c:d1:e4:69:16:
                    93:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:44:A7:40:3C:57:E2:7C:D5:F6:2A:12:44:44:81:B1:DE:FB:23:F0
            X509v3 Authority Key Identifier:
                keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:70:7d:13:9a:a3:12:de:67:1b:9f:5a:0c:a6:0e:b8:cb:82:
         d9:20:b8:58:af:c0:c8:0d:7a:f6:e7:48:d8:d6:bd:3f:da:95:
         41:ff:84:80:d5:17:58:62:fa:50:bc:c7:4f:3a:c9:f2:20:a5:
         93:de:ec:15:3d:eb:e5:63:d6:41:c0:23:47:6e:b6:23:88:db:
         e2:e7:87:5e:b0:71:24:a1:e6:7e:5a:a2:cc:75:de:c3:c8:d2:
         f4:9c:54:89:e3:3c:b6:f5:7e:22:db:8e:35:74:50:b5:99:5d:
         ed:a6:96:b8:c5:d3:a4:83:c3:79:17:16:3e:49:ad:9e:04:7b:
         f0:1d:9c:d9:4c:f5:63:55:03:1d:cc:2d:28:d0:8d:5b:5d:38:
         d9:57:e1:b2:c6:e2:74:b7:63:af:3c:4b:f7:fb:cd:e9:4a:96:
         07:03:36:6d:f5:60:91:73:ef:1a:45:e9:3c:0d:8e:02:f9:15:
         25:cf:4b:4a:6f:c5:51:4a:dc:fd:4b:d0:2b:b4:6e:41:e7:7e:
         b2:8c:56:fa:ea:4a:5b:c7:34:5c:38:67:22:a5:45:06:6c:02:
         13:cd:e4:68:4d:f1:5e:70:f0:7c:11:49:f4:0b:03:b4:6f:fb:
         ec:4f:40:f4:c3:df:3e:6c:39:77:2d:b9:b6:8f:ba:ac:c4:fd:
         17:05:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:05 2026 by rpki-client