Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File:                     B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier:          cJn69iOjf2GZLkplqc4Wj4Ve9YhA8mxstY4yEZHOlZs=
Subject key identifier:   56:5F:77:7F:9F:A2:67:15:D4:0D:F3:95:30:BA:AE:A7:70:16:5C:21
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer:       /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial:       019F93C8D2402CAAEAF99A7F396051F042D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number:          17C5
Signing time:             Fri 24 Jul 2026 11:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:39 +0000
Files and hashes:         1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: idP4IVCFfgm6OU+5GVcOsiD8i54UzzVMT5boni5+RME=)
                          2: J9FY2qroRIRJPM9mPDgO48qgTbE.roa (hash: yx1+DdoiXQhyMmS5jvrhikl5bF1DwyLGoQlsUY1c8yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:d2:40:2c:aa:ea:f9:9a:7f:39:60:51:f0:42:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
        Validity
            Not Before: Jul 24 11:00:39 2026 GMT
            Not After : Jul 25 11:00:39 2026 GMT
        Subject: CN=565f777f9fa26715d40df39530baaea770165c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:18:05:fa:1e:e1:d7:a7:62:0b:da:21:47:
                    e0:4f:bb:a2:96:40:42:16:d4:49:f6:bc:2a:06:73:
                    b5:b1:43:c4:dd:a1:04:58:bd:a4:59:10:51:79:29:
                    e9:80:ef:7c:16:c9:ed:a5:1f:95:36:a5:a2:df:4f:
                    49:1c:04:5e:74:fd:96:66:8a:0d:db:38:4a:a4:ea:
                    c4:55:53:3f:05:11:85:6e:d9:ed:90:8a:e4:22:fe:
                    f6:49:6e:07:ab:1c:3d:33:fd:3e:fc:09:19:b5:73:
                    d5:a0:a6:f9:a4:ca:64:2f:1f:63:7e:0a:b1:e7:b5:
                    47:b4:bf:f8:b9:4a:03:99:11:a9:7a:18:1d:8a:d2:
                    66:40:0a:4f:7e:a8:5e:c5:01:4d:13:d8:4b:eb:87:
                    1c:4b:d6:0d:5a:4a:11:7f:1b:77:8a:9f:a0:4c:16:
                    ad:74:05:63:02:11:b1:03:00:cd:38:48:28:33:e5:
                    9f:80:81:ea:e2:0f:95:6d:85:ee:ae:c7:99:85:5b:
                    18:62:06:e2:64:3e:f0:f4:61:ad:f8:45:d0:64:99:
                    b0:f2:9e:b2:1f:0b:6e:8f:e3:8a:91:05:37:4a:c6:
                    87:87:08:8d:10:f2:5c:1e:81:14:f0:31:2f:ef:10:
                    1c:f2:0b:bc:66:1d:59:10:47:2e:2f:43:65:08:49:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5F:77:7F:9F:A2:67:15:D4:0D:F3:95:30:BA:AE:A7:70:16:5C:21
            X509v3 Authority Key Identifier:
                keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:75:e0:7a:11:0b:16:9d:49:e0:7e:ce:f5:6d:3e:db:20:36:
         c6:ef:d1:91:ed:be:6f:af:a6:28:00:d5:66:d4:3a:20:fb:77:
         24:a7:f4:cf:ef:66:f6:e6:a0:fa:ae:71:16:1d:4f:56:1c:5e:
         d3:75:16:5e:0a:22:d6:90:95:6f:2b:ba:71:7d:20:42:4f:14:
         8c:1c:c7:58:58:2a:4e:08:75:02:0b:37:c2:5b:62:33:29:dc:
         f9:bd:1c:7a:98:a2:06:55:b3:3d:2d:6b:6d:7b:aa:10:3f:8f:
         82:6b:60:fe:4d:14:d3:7a:f4:79:ca:ab:a4:b9:2c:15:39:9f:
         97:11:2c:98:f5:e0:be:e9:51:7f:8d:76:8f:cc:af:4c:47:2e:
         8d:59:8b:4e:e8:99:e8:cd:58:34:e4:7f:97:ad:48:35:d8:b2:
         df:0d:a5:11:42:29:2f:99:5f:2e:41:6f:29:3a:e3:7d:a7:a8:
         99:e7:0d:21:30:ca:79:97:6b:78:62:6d:c9:f4:eb:89:34:f7:
         d8:c1:88:dc:59:db:4d:68:97:69:22:5c:b9:69:77:6c:6a:3e:
         37:1c:27:0a:74:d7:65:ce:17:2b:e1:c7:00:9e:d7:5a:1a:8a:
         94:23:65:95:d0:e7:de:a7:b0:92:bb:8e:87:9e:fa:b3:65:21:
         be:d6:da:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:48:42 2026 by rpki-client