Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
File:                     fEzLocBe-GYMTYmHl0qtA4vCtDA.mft (raw, json)
Hash identifier:          TUywA9AMjYPQzfiTCrwkFOWmYBdNj54eLh9uEVusPvI=
Subject key identifier:   88:15:93:07:F1:C1:A9:AE:27:D0:6A:95:35:21:CC:A5:A9:91:E7:3C
Authority key identifier: 7C:4C:CB:A1:C0:5E:F8:66:0C:4D:89:87:97:4A:AD:03:8B:C2:B4:30
Certificate issuer:       /CN=7c4ccba1c05ef8660c4d8987974aad038bc2b430
Certificate serial:       019F935B42EB89331B8A79E0DB4C9B5842B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:59 +0000
Files and hashes:         1: fEzLocBe-GYMTYmHl0qtA4vCtDA.crl (hash: 6F6ZjIT7i3u/P6oUuFE+rGglwLZVyMaFNhn2yt1SKgk=)
                          2: sXywAJPQehkX1g8ECCZJdITzLYQ.roa (hash: hR+8uJ6ekanBnzUMm4s8hR/ynV+UmDevvGRnAGbC8cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:42:eb:89:33:1b:8a:79:e0:db:4c:9b:58:42:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4ccba1c05ef8660c4d8987974aad038bc2b430
        Validity
            Not Before: Jul 24 09:00:59 2026 GMT
            Not After : Jul 25 09:00:59 2026 GMT
        Subject: CN=88159307f1c1a9ae27d06a953521cca5a991e73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:c0:6a:aa:d9:cd:d0:45:dd:04:63:47:47:
                    2b:ce:d2:d4:c8:8b:da:d3:b2:69:15:0f:e5:ef:7a:
                    11:33:ee:52:a0:9b:53:4a:d8:71:02:b0:23:65:26:
                    7e:45:8b:86:16:aa:e4:7b:19:98:71:59:fb:b1:87:
                    1e:78:a0:bb:1a:cf:59:4f:ed:e7:af:83:92:10:94:
                    ac:84:59:bd:ee:75:9c:6e:cf:e2:ee:bd:7b:7a:e0:
                    35:2d:e3:8a:29:ee:8a:0f:4f:d8:10:3c:98:a3:ff:
                    ec:f5:e4:b5:96:1c:26:69:c2:c5:33:0b:b7:08:cc:
                    c3:56:c3:92:84:c4:12:12:f2:f2:c3:6d:5a:df:0b:
                    de:3d:01:bf:88:53:92:dd:3f:4c:d3:f3:e3:65:eb:
                    bc:bd:f3:8b:f9:ba:d3:d3:93:d8:42:d5:db:fe:94:
                    14:74:bc:5f:c4:e7:51:16:1e:c3:7c:bb:db:b8:af:
                    12:75:0e:0b:59:f4:20:74:7d:04:1d:32:10:ea:90:
                    0d:43:e7:58:39:81:a8:24:33:74:97:01:e7:06:f5:
                    9c:7e:82:a3:23:7f:b2:2e:9c:7d:e2:73:bf:a7:42:
                    c7:c4:3d:54:0b:8b:18:7c:3b:8d:90:01:4f:6e:34:
                    c6:71:b2:ee:dc:7e:b9:55:b4:8f:53:23:c2:00:37:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:15:93:07:F1:C1:A9:AE:27:D0:6A:95:35:21:CC:A5:A9:91:E7:3C
            X509v3 Authority Key Identifier:
                keyid:7C:4C:CB:A1:C0:5E:F8:66:0C:4D:89:87:97:4A:AD:03:8B:C2:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:12:7b:6c:50:d1:12:a8:93:48:c2:05:e8:bf:cd:ca:21:2c:
         b8:6c:2c:30:d5:6a:e2:b5:d0:c4:0f:af:e5:cb:56:55:f3:c6:
         99:56:eb:21:c6:20:f7:3c:0f:c0:e5:7a:f4:9a:1f:54:8a:0c:
         7a:60:fa:67:70:cb:25:92:01:8f:f0:0b:80:6c:60:18:f2:e6:
         96:5b:f0:ad:b3:6c:ff:ee:e0:06:2b:6b:b2:a8:2a:18:c5:48:
         cb:a4:8d:e5:8e:fd:6d:01:3c:cb:20:bc:2c:8e:a4:b2:1a:10:
         4a:38:17:70:a8:c3:46:f6:23:e5:d3:4a:5c:fc:22:2a:56:15:
         ed:ed:12:56:73:58:b8:8d:bf:4c:4e:4c:1d:bc:77:6f:62:39:
         18:57:5b:78:53:ad:30:75:be:ed:79:97:fe:b3:0d:f3:1d:17:
         16:e8:ce:01:ef:f9:2a:8e:f5:72:e5:1d:b1:ad:25:80:9b:f7:
         24:42:3c:39:fe:8a:90:2d:7b:4c:e9:7d:cd:4a:7a:a0:80:2d:
         75:c1:f7:81:9c:ff:6f:fe:9b:6c:96:7d:ea:92:dc:a6:30:4d:
         fc:65:68:9c:8a:dd:c3:88:ff:a1:18:d4:27:ea:55:70:a9:38:
         94:68:74:c8:d2:07:60:d6:23:fb:b2:e5:bd:92:3b:39:cc:67:
         93:eb:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:58 2026 by rpki-client