Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
File:                     1oFRD_A-lUZKxySioFlNpAfwWwc.mft (raw, json)
Hash identifier:          +arAHhvf+YiTEcVxRjD48O0YWq8/FR+fHQOaiS43pmY=
Subject key identifier:   E2:FE:A1:D4:67:9C:26:55:5A:D6:43:77:C4:09:F6:5B:84:68:E1:41
Authority key identifier: D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
Certificate issuer:       /CN=d681510ff03e95464ac724a2a0594da407f05b07
Certificate serial:       019F9090F829AF96EE2EA7ED3753B944634A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
Manifest number:          012F
Signing time:             Thu 23 Jul 2026 20:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:47 +0000
Files and hashes:         1: 1oFRD_A-lUZKxySioFlNpAfwWwc.crl (hash: rD7DHus7J1UzOtTBH7rISxvgn1p+uJQTVS6FKKI3NqM=)
                          2: DjQMqg2kffWJVFlf9YdB26kT8mU.asa (hash: Cp0XT0ge1mZD2iIW7l9FB0V1yVWibAjRZhffKMIEnu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:f8:29:af:96:ee:2e:a7:ed:37:53:b9:44:63:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d681510ff03e95464ac724a2a0594da407f05b07
        Validity
            Not Before: Jul 23 20:00:47 2026 GMT
            Not After : Jul 24 20:00:47 2026 GMT
        Subject: CN=e2fea1d4679c26555ad64377c409f65b8468e141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:0d:cc:f9:da:3d:3b:38:72:7a:ab:87:68:
                    72:d7:ad:a4:5e:c3:26:31:21:cf:30:44:f6:24:3f:
                    ea:69:bb:a0:e4:a8:84:7a:47:78:12:61:c9:0d:97:
                    50:dd:cd:51:e2:ea:9d:a9:79:e7:8f:2f:13:58:f0:
                    c4:5a:75:4b:dd:4b:fc:13:ff:9c:89:73:0e:d9:9b:
                    e7:e1:33:f6:94:b0:0d:b7:ec:fe:6c:c1:51:e6:64:
                    de:e2:65:40:cb:40:78:29:a2:77:bd:b2:e5:d7:e6:
                    d3:bc:8d:0d:e3:79:b4:07:a6:c5:1f:c8:bb:d5:d2:
                    e2:43:a2:17:90:0b:49:db:4d:39:eb:a9:84:77:5d:
                    a7:8e:b7:d6:8e:15:da:5e:87:53:12:7f:fc:55:18:
                    00:68:87:36:60:44:83:54:a7:1f:08:06:55:70:e1:
                    a8:78:cd:32:11:8a:46:4c:3f:f3:5a:6f:5f:3f:fe:
                    39:08:bb:7e:21:b9:12:4e:b3:ec:d8:09:cf:06:f6:
                    ab:39:7f:68:87:29:fb:09:94:c5:70:61:4c:3e:d1:
                    e3:b8:70:b6:0f:7b:ba:b0:fb:f1:cd:e8:ce:23:c5:
                    c2:1f:37:ef:58:19:3f:30:09:ea:7c:6b:34:51:50:
                    fa:65:37:32:e7:58:27:63:e5:36:76:f6:d6:59:24:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FE:A1:D4:67:9C:26:55:5A:D6:43:77:C4:09:F6:5B:84:68:E1:41
            X509v3 Authority Key Identifier:
                keyid:D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f7:42:bf:0c:85:e0:d1:b0:8b:a5:ff:0b:7e:6f:a1:07:cf:
         20:1a:b1:51:cf:4f:94:d3:9c:cb:3d:e4:70:5c:af:cc:c7:32:
         15:7f:a2:8c:ee:01:d2:cb:45:1e:35:9f:31:a5:5f:fb:5f:dd:
         4c:75:6f:6c:27:c8:53:d3:bf:0b:2a:ae:d3:c5:5d:25:ee:d8:
         b2:05:e6:b4:c2:35:93:7b:12:36:f9:2f:65:ba:16:53:b8:8f:
         39:4e:7e:4c:e9:83:d1:7d:ee:51:73:4e:e0:78:89:b3:82:47:
         4a:9d:76:ab:0b:24:9a:26:10:49:7f:92:35:d6:49:7d:0d:b2:
         6c:e5:46:4a:b9:8e:eb:3a:20:2a:54:79:68:c6:f6:96:16:7a:
         07:04:61:90:54:8f:8c:76:56:59:5e:24:13:ac:5f:92:dc:cf:
         8a:71:d9:46:ec:02:00:7b:d6:26:94:b2:f5:39:88:67:ab:75:
         c7:45:c2:80:57:ff:d6:75:a1:13:96:9e:70:f2:8e:4a:93:3b:
         51:9f:0e:05:63:43:1a:30:ca:a1:82:d9:ee:82:d5:07:aa:11:
         ea:d2:a5:32:0a:aa:ba:7e:a8:2a:bc:a2:78:06:a5:66:bc:1f:
         4d:7f:bc:e9:e1:9b:e8:0a:3e:77:8a:a1:48:6f:01:ab:e7:76:
         49:3f:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:23:18 2026 by rpki-client