Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File:                     1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier:          xabMOwF75U13nfFkYE1QadQf+56cdM44xh10o4VVxl0=
Subject key identifier:   54:BE:9C:D4:9C:C4:CF:71:64:E3:EC:EA:B8:26:7F:29:75:A0:85:52
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer:       /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial:       019F927FA9781FABA3A4C00FF5411834CA20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number:          0EAF
Signing time:             Fri 24 Jul 2026 05:01:07 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:07 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:07 +0000
Files and hashes:         1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: ZZYNl1Oz3j1wWXDdkOF0argfageAjT9c9SRupB2W94w=)
                          2: m2WjaGlBAPztzFvBOucPXcVz1A8.roa (hash: 8IEpJ0cdndWX7mjoIio/qLWep6snHpr/fCFNjySaEQc=)
                          3: xjDEGzwGWC32KNbYgkAYk69skio.roa (hash: k8gKJxzXreZ0dQt23gwa3WP6vJjAJk09SNp21SFCKec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:a9:78:1f:ab:a3:a4:c0:0f:f5:41:18:34:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
        Validity
            Not Before: Jul 24 05:01:07 2026 GMT
            Not After : Jul 25 05:01:07 2026 GMT
        Subject: CN=54be9cd49cc4cf7164e3eceab8267f2975a08552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:84:f2:a6:c9:47:39:17:00:2d:45:7b:84:43:
                    d1:ad:06:a4:db:f0:00:98:c5:e1:5c:e6:8f:a2:d6:
                    a7:4a:f0:4d:3e:55:26:f1:dd:88:0e:51:6f:61:3a:
                    2b:7f:5c:89:63:4f:08:99:29:0d:f7:fd:5c:c3:88:
                    f6:b0:4d:3c:ac:9d:05:b1:fc:e7:a9:e2:bb:d5:e9:
                    ab:6d:1c:b4:ba:97:66:fd:ef:0b:cb:b5:d2:bd:d2:
                    9d:2f:df:ce:2b:1b:9d:28:5c:79:fb:69:5b:f0:3c:
                    ea:2f:86:57:d9:c5:0f:c2:c6:59:8a:59:7c:a9:27:
                    05:45:3e:4e:70:a1:f5:0e:dc:69:b8:78:f6:6a:c1:
                    c1:f8:fe:7e:40:67:65:79:5c:46:a2:69:31:43:98:
                    fa:16:cf:85:57:b7:bb:f7:14:df:73:69:d5:7f:d8:
                    08:b1:d2:2d:da:67:b9:1b:2a:76:42:c7:bb:fc:4c:
                    0a:76:42:20:b2:ee:43:48:42:5a:54:86:c8:fb:60:
                    8b:3a:c3:e4:16:03:8e:eb:39:c3:40:93:0d:23:b5:
                    d4:5a:27:cd:72:43:c9:be:31:26:f3:66:a6:27:ff:
                    57:15:02:a5:cf:03:41:d0:a8:fd:c7:7f:32:61:61:
                    7f:81:58:04:26:07:f0:e7:f5:0c:8a:35:15:bd:df:
                    0f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BE:9C:D4:9C:C4:CF:71:64:E3:EC:EA:B8:26:7F:29:75:A0:85:52
            X509v3 Authority Key Identifier:
                keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:dd:7c:3a:42:46:a4:8a:7d:f6:cf:ef:45:e7:d9:cd:22:af:
         2d:fd:13:2f:36:88:a3:26:34:d6:e6:a9:d6:98:72:32:70:35:
         87:16:3f:2a:ce:af:1f:92:b4:99:9d:60:4d:34:00:24:b7:f4:
         3b:88:c3:db:34:c4:0d:69:5e:80:04:62:5e:60:ce:0c:82:fb:
         04:6d:ce:3f:05:85:f4:20:dc:95:59:27:6c:99:69:e5:0e:49:
         99:07:11:26:1c:b3:5d:a9:c0:0c:fd:16:08:ce:58:e2:dc:e8:
         ae:ac:3d:2f:86:e4:51:8e:b5:8f:98:4b:2c:fc:6e:6b:80:f3:
         86:40:87:08:d2:60:42:5d:7e:08:77:13:c1:de:e0:a5:fd:b4:
         05:76:84:6f:0f:9a:14:7a:f5:b5:ac:d8:22:be:54:d4:3d:85:
         52:c1:ea:5d:5d:23:aa:19:92:47:91:70:72:78:04:55:0d:8d:
         c9:af:14:e1:c9:b2:6a:23:e6:38:b4:0b:ef:8c:ec:6c:64:9f:
         74:04:b3:76:c9:f9:12:6b:00:64:b7:bb:43:15:8e:55:55:25:
         90:89:b4:75:96:a0:36:9d:6d:5d:0c:f6:a5:f5:8e:fa:25:93:
         6c:65:56:d6:94:f6:c3:53:ca:a8:59:ed:ae:d9:e3:c7:bc:a2:
         74:71:6e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:11:41 2026 by rpki-client