Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File:                     _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier:          8LYYmhbMPj51yo5qDTGCIUoloLc7JHt4y+4cSJF67g8=
Subject key identifier:   3B:A1:2D:6C:52:01:05:FE:19:55:AE:0D:18:15:8E:28:FF:D8:79:C8
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer:       /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial:       019F946DD085EF7D0FDA203E7C0D1BC4805F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number:          0A62
Signing time:             Fri 24 Jul 2026 14:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:52 +0000
Files and hashes:         1: Dr3OacsNKO2WTdv7Q8llg_soZvA.roa (hash: KbhoDJ9dQsBvDj3nKAtLQGpRyI1OX7thvD73xgl+H2g=)
                          2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: TJXzYb44AEpNMBvI8Sx1znOfWaCx3EGNKLD6JBjn/XY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:d0:85:ef:7d:0f:da:20:3e:7c:0d:1b:c4:80:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
        Validity
            Not Before: Jul 24 14:00:52 2026 GMT
            Not After : Jul 25 14:00:52 2026 GMT
        Subject: CN=3ba12d6c520105fe1955ae0d18158e28ffd879c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:67:37:d1:ba:7a:98:66:53:36:59:6e:fa:
                    5a:ba:45:f6:f7:a7:7d:73:41:0f:4e:e7:a3:2a:42:
                    6e:54:b4:60:35:cc:48:7e:d5:99:60:3c:a1:5d:a3:
                    71:4e:5e:08:89:61:2a:aa:40:44:5a:6c:88:22:13:
                    45:50:91:af:87:52:48:a2:25:10:be:b5:53:74:3e:
                    9c:ed:e4:a6:4f:87:50:2a:24:5d:62:15:bc:8f:20:
                    b6:ab:0e:4b:ef:d1:61:bd:85:62:c8:14:55:53:af:
                    ff:00:72:1b:50:cc:36:a1:6a:3f:e6:34:06:b1:97:
                    72:f4:72:fd:d8:e3:57:07:e9:92:93:65:74:a8:e8:
                    08:a4:3b:5a:d9:ec:07:c5:cf:2d:dc:45:46:83:b7:
                    ca:e8:cc:9a:1a:d5:18:1d:64:0d:d4:d1:c1:be:f3:
                    d3:67:79:e3:d8:00:e3:d6:c0:f6:61:f9:54:33:47:
                    ef:74:eb:09:5c:2a:2b:3a:52:16:c5:93:41:26:20:
                    b0:05:aa:84:c4:cb:f1:80:d6:dc:d8:18:d7:c9:b3:
                    f2:df:d9:97:65:aa:ef:92:54:fe:d0:e0:64:8d:d0:
                    be:d1:31:bb:6d:fe:16:92:e4:ec:ae:fb:9f:7e:ec:
                    8b:35:50:0b:54:26:69:37:b9:d8:48:15:17:c8:ed:
                    8d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A1:2D:6C:52:01:05:FE:19:55:AE:0D:18:15:8E:28:FF:D8:79:C8
            X509v3 Authority Key Identifier:
                keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3e:c1:7d:2d:40:c2:66:bc:ab:b6:98:26:82:de:f4:c6:bb:
         68:19:4b:98:98:35:9a:45:16:6f:51:8c:1f:fd:85:1f:9f:27:
         3c:45:fc:e1:1c:cb:b6:ed:4c:bf:49:10:e9:e5:a0:ea:8d:6f:
         bb:cf:7f:92:ef:f9:4e:8c:87:d1:37:0e:8d:28:14:c2:ed:93:
         f0:6b:55:dd:dd:10:d2:f7:27:89:e4:d0:66:c3:c1:72:df:bb:
         55:ec:1e:1f:82:b8:48:16:7f:4d:f3:f7:79:4e:96:94:31:20:
         36:cf:d4:68:4d:25:14:33:b4:e7:7d:47:36:13:04:a5:15:38:
         bd:64:8e:f7:5e:14:dc:05:2b:5c:b1:fa:92:c0:4d:d1:e2:eb:
         45:ce:11:e7:96:c7:cd:8a:f6:e1:9c:75:96:73:9e:60:d2:53:
         55:33:b3:80:f9:7a:c4:59:60:32:fa:01:da:49:9b:5c:90:54:
         0e:13:f0:a3:18:d3:cf:0f:1b:9d:3f:0e:b0:6f:44:ff:56:bc:
         88:45:ed:fc:06:72:d6:a5:7c:47:52:ac:e4:a7:4f:b2:00:d4:
         72:72:2c:d6:d0:2c:9a:99:63:ab:2a:17:3d:4f:56:b3:c8:62:
         b4:3a:e2:0e:f5:2c:b8:8f:ca:b8:5a:54:b9:6a:48:a2:b2:fb:
         ee:35:bf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:00 2026 by rpki-client