Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File:                     00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier:          qG43MZ4GPLuMxJ+4wIiSOovRnmBnIjkgKNnfZBeNr4M=
Subject key identifier:   80:C9:B4:A6:64:F4:82:96:69:13:D4:CF:21:28:2E:2E:2E:8F:8A:2F
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer:       /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial:       019F8F7F94EDC0C78C477E5006CA08B45A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number:          056E
Signing time:             Thu 23 Jul 2026 15:02:10 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:10 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:10 +0000
Files and hashes:         1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: oxFg9XrWjRaA2W/VyzObkKR2Cdsrf8uKb4OUWgFDWh8=)
                          2: Fb3aBBcJ_RU5gPWUY71udWZuQ_o.roa (hash: VnpK440llW/db9ofXXkT+hMi7FL519qaQ5nOCrY4q+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:94:ed:c0:c7:8c:47:7e:50:06:ca:08:b4:5a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
        Validity
            Not Before: Jul 23 15:02:10 2026 GMT
            Not After : Jul 24 15:02:10 2026 GMT
        Subject: CN=80c9b4a664f482966913d4cf21282e2e2e8f8a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:51:d8:5a:3f:03:03:7d:c6:37:45:0b:83:
                    c1:f2:fa:19:85:69:84:0d:43:46:c0:47:50:d6:13:
                    20:20:ee:05:7f:37:98:4c:d2:d9:02:ea:d7:c6:65:
                    53:b0:70:96:be:9d:04:41:8c:62:da:13:06:ab:1a:
                    61:62:cd:1f:1b:07:b4:45:c5:c1:d1:33:c9:e8:5a:
                    19:d4:9a:ee:f2:9e:e3:c5:9f:08:04:ad:81:e7:26:
                    a5:74:ac:ff:eb:ed:83:f0:28:60:20:0e:fd:aa:ca:
                    86:09:b5:86:8e:f4:da:f7:8d:05:36:cb:37:3a:13:
                    84:2c:58:46:7d:93:ad:16:55:71:3e:ab:f4:86:b0:
                    16:6d:ca:84:84:4e:f9:86:7a:ac:4b:68:4c:e6:95:
                    67:52:c6:f8:07:5a:94:71:53:fa:1c:47:4d:06:31:
                    cb:ec:c0:f7:83:12:01:4e:e6:af:2f:d7:e2:75:3c:
                    ba:69:19:48:6b:a5:7d:e9:7f:13:56:7c:dc:f5:3b:
                    df:ce:85:fe:e6:43:72:f4:49:33:2e:01:f8:04:a3:
                    8a:12:f4:ce:6e:e5:d2:a0:89:67:1f:59:a0:2f:85:
                    23:81:96:f2:39:78:8b:92:7a:41:7c:9a:0e:23:c8:
                    54:31:a1:b1:b4:84:81:c8:72:f3:15:83:2c:58:50:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C9:B4:A6:64:F4:82:96:69:13:D4:CF:21:28:2E:2E:2E:8F:8A:2F
            X509v3 Authority Key Identifier:
                keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c9:b3:13:dc:a6:43:53:39:8e:04:4f:95:0a:8f:fd:21:f6:
         16:32:74:05:13:73:08:0f:65:c3:dc:32:bb:09:c7:46:40:7e:
         ab:57:db:d9:52:51:29:6d:dd:c0:83:c0:65:c0:61:49:38:d3:
         db:29:40:64:fd:68:1b:75:86:cb:5b:20:47:87:3a:92:70:fa:
         8d:b3:02:5d:df:3c:96:30:9e:37:ae:f1:7e:af:47:ce:7a:82:
         3e:41:d2:12:db:80:9e:d3:38:78:32:c1:95:bc:36:09:69:81:
         c2:83:85:f8:38:5a:9a:2e:5a:33:32:00:45:45:e0:81:c4:e0:
         49:07:f9:90:6b:34:ee:7a:b6:58:08:2a:3e:e6:7d:6e:bb:d5:
         2a:41:fc:93:36:2a:2a:e0:92:c9:92:d2:9b:9e:bc:51:d8:6e:
         33:60:a9:db:3a:b3:31:84:9e:b5:e5:59:8e:81:85:b5:ea:8a:
         63:9b:3a:8a:73:b9:c0:ff:57:a5:75:78:4a:83:c8:2f:7e:10:
         ba:ed:ac:7e:ff:1a:cb:4f:59:b2:6e:73:ba:f8:4d:eb:71:7b:
         05:ad:7f:38:07:0a:29:06:c7:61:c4:b8:8e:bd:e8:31:b7:d3:
         54:49:b3:d1:87:41:f0:8b:d9:45:df:e1:47:24:47:0b:2e:cf:
         ea:2f:ed:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:19 2026 by rpki-client