Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File:                     15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier:          UczifdGO39M28VLe46TKwEjyzJZQLSpgtFuC1ykzidY=
Subject key identifier:   49:DF:3A:1A:BD:DB:F4:DD:26:98:E6:19:F7:9D:67:AB:2D:08:BF:C4
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer:       /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial:       019F90FF42C3C896CCB459D1006853D1A6B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number:          1150
Signing time:             Thu 23 Jul 2026 22:01:15 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:15 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:15 +0000
Files and hashes:         1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: QwL0yjVK0l/hEpvWNXRqiSP5y/c2qC1pXtYvWxI8ZEs=)
                          2: ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa (hash: b2Z3qDf5qe3MjesJLnqAMi8pQaoBZLbH5mVHFy7vu6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:42:c3:c8:96:cc:b4:59:d1:00:68:53:d1:a6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
        Validity
            Not Before: Jul 23 22:01:15 2026 GMT
            Not After : Jul 24 22:01:15 2026 GMT
        Subject: CN=49df3a1abddbf4dd2698e619f79d67ab2d08bfc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5e:59:bd:6c:f9:59:42:b2:02:21:77:27:1f:
                    94:07:81:f8:a5:bf:3d:e5:19:4a:10:d2:78:e6:e5:
                    72:27:4f:9e:01:97:1c:4a:75:db:76:36:52:c5:e7:
                    9e:1a:13:e0:cf:8d:c3:35:99:ec:fc:43:be:a2:05:
                    34:16:f9:8c:25:da:1b:94:fb:3f:c9:6f:f0:8b:69:
                    43:b7:9b:4a:76:f4:73:11:4d:df:9b:13:6c:68:29:
                    7d:59:a9:ea:1e:56:9b:e5:37:41:2e:ad:8a:d1:05:
                    72:56:b9:ea:76:80:b8:a4:38:8f:64:dc:76:e4:fd:
                    cc:42:77:63:97:00:65:00:17:ef:12:66:79:65:8e:
                    0e:08:64:ea:0b:dd:4c:b1:45:49:6b:bf:9c:d0:c4:
                    ab:d7:78:d8:3c:35:37:7d:4a:2b:95:2f:9c:e3:2f:
                    2a:10:ba:69:6e:5e:e6:75:3a:b1:fa:8a:d7:c9:b9:
                    62:e9:6b:b9:cf:2c:85:8c:7f:a7:96:e2:d7:1f:4e:
                    b8:e8:f2:4e:3a:83:f0:8f:ea:12:16:f3:a4:23:d7:
                    67:d3:9d:1e:eb:25:39:d8:77:92:36:34:57:4c:44:
                    10:98:20:d2:ed:6f:16:dd:c8:c7:8d:f8:a1:c9:5c:
                    2d:28:bc:8d:97:de:15:e1:ca:a3:2a:7f:5e:b8:58:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DF:3A:1A:BD:DB:F4:DD:26:98:E6:19:F7:9D:67:AB:2D:08:BF:C4
            X509v3 Authority Key Identifier:
                keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:0c:d1:c5:7e:4b:c0:2d:a4:cf:8f:52:9f:e1:db:a0:e2:
         c0:e5:8c:7d:21:18:7c:59:f8:fc:eb:90:b2:15:de:52:52:5f:
         49:27:d7:4a:75:e8:f0:ed:7f:7a:f3:46:d8:0d:f8:1a:2f:d5:
         ba:c0:52:88:eb:cf:85:55:34:37:f0:1c:8b:c5:34:37:93:fe:
         e6:7e:b8:a7:7b:f1:91:3a:4b:b4:7f:2f:4b:1f:8e:75:7d:9f:
         c4:e5:39:1f:30:ea:e2:d3:62:8f:b2:60:cb:01:1c:0d:b0:61:
         33:41:50:8b:bf:9b:82:a1:70:96:f3:05:b9:d9:80:ff:12:51:
         88:87:e5:23:cf:80:f8:4b:ba:d9:b3:16:09:74:bd:80:9a:00:
         28:a1:ca:77:26:5d:57:de:47:06:c8:fd:64:cb:37:6e:8f:e9:
         60:95:2b:6a:9b:c7:bf:62:b4:5f:b8:02:17:28:39:cf:bf:dd:
         26:56:72:e9:bc:8b:39:7a:ca:1b:ef:9d:05:f6:ce:7d:9a:e5:
         ed:21:08:a4:9e:25:99:69:5a:a3:7e:ad:c4:0f:a5:0c:cf:5e:
         3c:1f:e9:63:48:f0:20:80:89:39:d8:13:3f:dd:51:9e:b7:06:
         21:61:7d:d7:97:41:f8:41:48:60:c5:7c:02:46:6c:ce:9a:19:
         bb:6f:74:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:28:01 2026 by rpki-client