Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
File:                     7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft (raw, json)
Hash identifier:          HBx944RSK3gFXHGoGEpPVPQvFZJF+ieS1R3QKVrWzXU=
Subject key identifier:   EF:7E:13:ED:99:66:7B:58:92:3C:5A:1C:47:17:89:B1:68:20:62:97
Authority key identifier: EC:E1:B7:BD:C9:F5:70:EC:58:35:99:95:DE:A4:F7:39:FC:FC:06:52
Certificate issuer:       /CN=ece1b7bdc9f570ec58359995dea4f739fcfc0652
Certificate serial:       019F8FEBC024D37DA35DB43DBEA72A11181F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
Manifest number:          F5
Signing time:             Thu 23 Jul 2026 17:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:19 +0000
Files and hashes:         1: 7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl (hash: zRknTc+CJ50XzMwOoTORHwk/dL5U+mKTctn5oYhr9Bo=)
                          2: PaSCSViEAOmnkxIlKs2oejLqNDc.roa (hash: C95nSsqwtFhFODAGdM0T/xTl1c5zR83Twu0Y8s23u5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:c0:24:d3:7d:a3:5d:b4:3d:be:a7:2a:11:18:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ece1b7bdc9f570ec58359995dea4f739fcfc0652
        Validity
            Not Before: Jul 23 17:00:19 2026 GMT
            Not After : Jul 24 17:00:19 2026 GMT
        Subject: CN=ef7e13ed99667b58923c5a1c471789b168206297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:94:09:bb:11:a6:95:c3:3a:27:82:d3:a3:
                    d3:98:bc:b0:cb:62:68:0c:76:aa:32:9f:d2:ba:5a:
                    f8:9e:17:e9:a5:f4:fc:7b:31:b4:5c:2c:b3:35:5b:
                    6d:7a:f6:d5:e3:b1:71:9a:70:58:8f:61:1d:52:20:
                    36:35:d2:ab:4c:c6:0d:83:0f:be:a9:19:99:b5:09:
                    3e:79:c2:b0:86:63:83:76:5a:f5:06:bc:a7:e4:b5:
                    3a:64:c8:4c:43:24:77:ca:42:03:f7:4d:20:3f:5d:
                    f7:c7:59:b3:a4:9a:f4:a6:0a:6b:b4:ed:c3:01:ea:
                    80:ed:1a:b4:53:9a:ca:72:a5:17:4e:c3:fa:c3:51:
                    59:61:9e:46:3c:4c:14:d2:bb:ed:88:9b:b1:33:e7:
                    5b:d6:de:dc:d5:66:6b:1c:da:30:49:ee:fc:b9:99:
                    2c:f7:a7:3d:22:2d:5b:02:be:8d:a0:f2:0b:0d:06:
                    c6:89:b4:3c:a0:a0:b0:39:e5:d5:72:be:fb:f3:de:
                    ea:3a:49:27:1c:8a:9b:06:a9:ab:a1:6d:ff:79:54:
                    9b:66:ab:16:0b:ba:22:bc:78:3f:a7:eb:41:fe:3c:
                    37:a5:f3:8d:c0:3a:c7:d4:58:9e:a3:c1:93:7b:51:
                    d1:f8:48:82:56:62:c3:70:f2:55:24:cf:19:61:4c:
                    74:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7E:13:ED:99:66:7B:58:92:3C:5A:1C:47:17:89:B1:68:20:62:97
            X509v3 Authority Key Identifier:
                keyid:EC:E1:B7:BD:C9:F5:70:EC:58:35:99:95:DE:A4:F7:39:FC:FC:06:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:1d:95:71:51:fe:58:86:5f:87:7c:b3:d6:a8:46:32:36:
         5c:6e:cc:7f:99:8c:0a:f3:32:51:29:c1:ae:6a:ff:08:9c:35:
         0f:36:e2:84:1c:99:52:7b:54:6a:6e:2f:0b:6a:3e:94:80:6f:
         fd:55:c0:ca:4e:d5:8a:53:4c:94:ca:82:52:d7:e5:1b:f5:08:
         6d:a5:d8:a7:92:3f:5d:61:1b:9b:82:a7:f6:c9:3a:94:66:ac:
         8b:ef:b7:17:ed:ba:3c:f8:01:a9:71:14:21:45:8a:08:4a:83:
         91:b4:28:a6:b5:e2:90:50:32:ff:db:1f:62:fa:33:74:83:19:
         24:97:c0:5d:06:06:93:de:fb:ef:01:bd:d3:00:f1:7b:2f:dc:
         2b:8e:56:4b:04:bd:4c:87:74:9f:49:e0:c0:26:28:5e:8a:33:
         89:19:4a:e0:d5:3d:1f:b2:8a:c1:a6:67:80:36:16:fd:65:ae:
         7e:e7:c4:ed:46:74:51:4b:1f:cd:8f:24:e4:a7:c8:50:10:43:
         5f:b9:8c:3a:84:df:50:50:7a:4f:2a:f3:a7:16:c5:62:05:2f:
         30:df:73:57:6a:96:8d:ab:e2:c0:9d:3a:40:e3:2b:f3:e9:51:
         98:d4:ce:a0:88:38:cc:a5:ba:84:a5:1a:d5:8e:6c:11:8c:de:
         80:84:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:15:59 2026 by rpki-client