Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
File:                     1oFRD_A-lUZKxySioFlNpAfwWwc.mft (raw, json)
Hash identifier:          w7cw6q3ocHUqQmPPApAyBtjQLxAYPnndmuXD1TNb3JE=
Subject key identifier:   D1:47:9F:E3:DC:35:55:5E:65:8B:D2:C0:13:D4:E2:2D:68:D0:14:80
Authority key identifier: D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
Certificate issuer:       /CN=d681510ff03e95464ac724a2a0594da407f05b07
Certificate serial:       019F927FA014DB76C8D424B09E53129BEAEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
Manifest number:          0130
Signing time:             Fri 24 Jul 2026 05:01:05 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:05 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:05 +0000
Files and hashes:         1: 1oFRD_A-lUZKxySioFlNpAfwWwc.crl (hash: ITje1xUAkhdon0x/PuQrvlTew/tHD5QUtygIMYYU3AA=)
                          2: DjQMqg2kffWJVFlf9YdB26kT8mU.asa (hash: Cp0XT0ge1mZD2iIW7l9FB0V1yVWibAjRZhffKMIEnu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:a0:14:db:76:c8:d4:24:b0:9e:53:12:9b:ea:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d681510ff03e95464ac724a2a0594da407f05b07
        Validity
            Not Before: Jul 24 05:01:05 2026 GMT
            Not After : Jul 25 05:01:05 2026 GMT
        Subject: CN=d1479fe3dc35555e658bd2c013d4e22d68d01480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:42:ac:a0:7b:49:08:95:30:54:8f:da:a0:
                    9a:19:f6:6d:b1:84:bc:6e:35:e4:35:96:2b:3f:8c:
                    de:43:ed:61:dc:a2:be:a1:68:4e:67:64:1e:57:11:
                    1b:c8:d5:92:1c:68:a5:c1:4f:bb:f6:22:19:78:90:
                    48:20:52:aa:d9:11:bb:54:82:00:4c:7d:d6:1b:04:
                    9f:c8:65:75:97:47:64:9b:73:29:6d:18:1e:3e:0e:
                    4f:14:ac:5f:ff:cc:ad:3c:e1:a7:32:c8:59:b8:79:
                    67:10:57:7d:5b:fe:d5:44:c7:2f:81:09:04:dc:19:
                    6f:e2:63:e3:2a:77:d4:03:0f:d9:07:f3:f2:94:76:
                    69:d1:a0:35:4c:67:b3:17:bc:82:21:17:22:ed:5e:
                    d0:ab:b4:b8:9c:f5:12:1b:d1:d6:c0:a8:c0:88:8a:
                    b8:1d:fb:a2:ee:69:f1:8a:aa:62:54:98:f6:63:ed:
                    0f:40:27:2e:c4:ac:06:73:3d:23:72:06:12:0a:54:
                    bd:f8:5d:c6:c5:28:98:a0:b9:42:6d:10:96:e3:b6:
                    a7:00:43:f0:fe:66:f4:c8:21:6b:b8:76:1d:bf:ca:
                    73:6a:20:99:b7:92:40:3d:39:63:f6:28:c0:9c:a6:
                    f9:dd:c6:9b:2d:c3:a8:8a:b7:11:7f:2a:cb:30:e6:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:47:9F:E3:DC:35:55:5E:65:8B:D2:C0:13:D4:E2:2D:68:D0:14:80
            X509v3 Authority Key Identifier:
                keyid:D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:7e:ba:3e:14:cf:0e:70:0f:68:aa:a4:21:e7:9d:96:87:12:
         d4:8e:1e:27:65:73:bb:52:31:c1:bf:ea:ff:88:a9:ef:75:41:
         f6:77:0b:37:dd:a6:cd:1b:37:e6:cd:69:bc:19:40:4e:80:fe:
         6b:ad:b5:ff:30:e7:75:90:cc:88:65:56:69:aa:1d:1c:66:e1:
         61:e5:c3:13:6c:0f:de:84:70:d0:39:36:22:a3:c1:90:cf:52:
         fc:97:22:7a:9a:8f:67:cd:80:c0:21:fc:eb:14:57:d7:13:5d:
         1a:f2:8a:bd:3e:fa:fb:15:84:a6:fc:de:9e:b6:c4:6f:5c:1d:
         e1:18:aa:fd:05:b4:2c:7d:f1:bc:13:e2:f2:6d:04:8c:61:11:
         91:19:b8:49:ea:c0:23:8c:c6:ed:fa:c6:ec:d3:0a:28:e4:37:
         89:cf:b6:b7:a1:fb:a6:b1:81:cb:f4:0d:c4:5d:7e:e2:3b:09:
         f8:0d:88:8f:c3:ce:41:5c:b7:75:82:7d:0c:7a:e6:ea:dd:af:
         b4:a4:36:3c:f4:49:db:cd:64:73:2a:24:e7:06:2d:c6:cf:7a:
         5f:f3:e5:3a:13:3e:54:5a:0e:51:28:62:6a:a7:59:33:28:66:
         c1:7e:6e:e2:f4:26:b5:4e:6d:c9:d4:5c:44:e9:95:39:9a:05:
         5b:d2:ec:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:28 2026 by rpki-client