Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File:                     dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier:          ls/geO3mCFVK7ho+PgPVY8rwxzlg5rLp5laLp//hElk=
Subject key identifier:   B5:C8:1C:B2:84:86:89:0D:32:E4:DC:F6:CA:17:6A:20:93:1E:7A:27
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer:       /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial:       019F90C8265746415373E3196DF213EAE611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number:          0550
Signing time:             Thu 23 Jul 2026 21:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:03 +0000
Files and hashes:         1: aON68VTwskogSIwfK0by-nZp_Rg.roa (hash: dkh8/Wbv+HTgUBFM4ZbuS+fZuVAjLH6qIB6RVSRMT9M=)
                          2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: 6pTOwGoYEbMsvHhsL+4F1eRcd5N4GyGY3Wj2tgI3pEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:26:57:46:41:53:73:e3:19:6d:f2:13:ea:e6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
        Validity
            Not Before: Jul 23 21:01:03 2026 GMT
            Not After : Jul 24 21:01:03 2026 GMT
        Subject: CN=b5c81cb28486890d32e4dcf6ca176a20931e7a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:28:cb:00:52:41:f7:12:71:25:90:11:ea:
                    1f:da:8b:76:e5:ba:e9:70:a4:62:17:8f:47:73:78:
                    03:ef:5e:79:5d:f3:58:bc:4d:8f:c8:69:82:d2:d7:
                    54:c5:cf:cc:35:35:e0:0a:77:2d:7a:4c:8d:c7:fa:
                    69:47:c0:c1:37:7f:9d:3a:c7:08:d8:24:ba:2f:aa:
                    cb:df:b6:a1:2e:7f:c3:7d:71:ad:f3:66:e2:f7:d8:
                    69:dc:f2:d9:ee:51:7f:41:19:46:71:19:87:9a:81:
                    70:de:74:58:16:55:50:73:e8:63:da:3a:35:f6:dd:
                    df:d0:e7:21:be:70:de:dd:83:97:7a:40:7e:34:eb:
                    01:08:92:d9:83:c6:11:1a:85:dc:ec:d1:8e:90:b6:
                    6d:53:93:ef:9c:ed:9e:08:84:ef:b4:50:11:4d:69:
                    3d:06:6b:cb:18:2f:5d:29:e7:57:59:d8:8e:cb:ca:
                    7a:5e:23:54:d8:b8:c8:be:8d:dd:65:4c:d4:81:58:
                    e4:70:8a:0d:20:52:ad:a7:2b:90:5a:80:4c:a3:c0:
                    53:cf:3d:09:07:96:30:c7:b5:80:f7:d7:e7:6b:f2:
                    d3:6c:3c:3d:bc:10:f3:99:6a:5d:8e:25:fa:76:56:
                    db:0b:ab:b6:68:bd:ea:c4:49:24:21:ab:c1:b7:38:
                    d5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C8:1C:B2:84:86:89:0D:32:E4:DC:F6:CA:17:6A:20:93:1E:7A:27
            X509v3 Authority Key Identifier:
                keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:33:b4:1b:aa:09:73:9e:a5:c6:40:bf:6b:33:c9:7a:d6:93:
         40:50:68:8a:c7:24:e8:3b:ad:7d:e3:17:2f:e9:cf:f5:c7:f7:
         9b:48:17:97:c7:af:7b:fd:71:25:d1:87:3c:95:a7:fe:90:3a:
         cf:cd:64:35:71:7a:ee:f3:e3:fa:3b:86:f8:86:6d:12:74:55:
         40:09:9f:f5:6d:2b:cb:f9:ed:24:27:9d:66:fa:06:e7:fb:f1:
         7e:33:e3:7c:be:31:a3:63:78:e5:12:0f:f7:16:a5:5a:eb:7d:
         71:a1:1e:c8:d1:8c:d3:c0:db:e0:a3:ec:3a:06:2f:fb:7a:cc:
         13:b0:4a:05:a5:fc:2a:ac:e9:56:cd:b9:68:88:2c:b2:50:da:
         2c:97:78:4b:9b:43:d4:46:f7:ae:10:f8:98:2f:2a:25:3f:94:
         b2:0f:57:00:fd:ce:af:31:cb:37:e1:ac:b2:2f:1c:3a:f4:19:
         de:74:8d:a4:0b:77:66:b2:3d:10:bd:2e:a7:1c:df:67:47:5a:
         91:42:f2:85:09:bb:95:c9:08:a4:f7:70:c4:4e:1b:b2:2c:0f:
         9f:09:37:58:d9:b7:f1:9e:31:79:8b:4d:05:a0:d1:39:51:6f:
         28:95:57:23:c7:2f:bc:13:3f:01:ff:82:0c:8a:9c:9b:0b:55:
         fc:dd:83:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:52 2026 by rpki-client