Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File:                     B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier:          GkPcwg0csw85zht3gRQ44GGzxA+YrEOvYWH3n9Vh+o0=
Subject key identifier:   5F:4C:E7:26:56:F8:37:45:40:5A:9D:99:09:A9:B5:AF:55:79:59:8D
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer:       /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial:       019F8FEC0093CA86143C2D4EAA2B935E338D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number:          1115
Signing time:             Thu 23 Jul 2026 17:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:36 +0000
Files and hashes:         1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: YfMJNENaZ3B11eDKFVCguNmv/CBExt1/tSf6fPC6LkA=)
                          2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:00:93:ca:86:14:3c:2d:4e:aa:2b:93:5e:33:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
        Validity
            Not Before: Jul 23 17:00:36 2026 GMT
            Not After : Jul 24 17:00:36 2026 GMT
        Subject: CN=5f4ce72656f83745405a9d9909a9b5af5579598d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:00:36:59:02:db:5a:08:52:e5:fe:2e:5d:
                    87:a1:f0:f8:93:0e:1d:6b:39:66:7a:c0:dd:18:02:
                    62:3a:73:ef:8d:6b:ed:1f:bf:14:f9:29:0f:b3:bd:
                    c9:f9:5e:df:0d:f6:06:fa:aa:2c:85:2b:12:ed:f7:
                    df:91:6d:f2:06:ed:ed:e8:ef:79:45:dc:4a:ac:80:
                    de:78:f2:52:fa:9a:af:86:b0:9e:9f:f3:82:9d:0c:
                    f0:dd:31:e4:58:89:c7:ca:ab:6f:23:c4:db:1c:bf:
                    eb:05:53:58:56:50:1a:57:e1:8e:83:1f:08:f4:1e:
                    db:cf:8d:fa:d0:99:5d:7c:7e:82:36:0a:68:a8:41:
                    6d:b7:e6:ee:ac:f8:81:57:7c:4a:45:e5:64:8c:a2:
                    8f:84:de:61:4b:9c:1c:77:fe:10:0a:ab:98:7f:6a:
                    95:74:29:b0:1a:ef:bc:46:3f:0d:ca:33:8d:8c:ef:
                    28:82:fc:00:3d:05:82:bc:29:07:38:11:b4:da:15:
                    1b:71:91:b3:e1:0b:c3:17:de:aa:98:f4:81:81:3e:
                    fe:d3:d4:b4:f9:42:83:2c:e1:f2:e5:1f:48:ad:91:
                    84:3a:8f:6f:82:9f:6c:3f:5a:d2:47:21:49:fd:5b:
                    6e:a1:d9:f9:bd:14:84:33:c6:d4:11:37:c4:6a:cc:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4C:E7:26:56:F8:37:45:40:5A:9D:99:09:A9:B5:AF:55:79:59:8D
            X509v3 Authority Key Identifier:
                keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:f5:d6:bd:88:a5:b8:26:6b:d9:ba:e5:8a:60:d2:c4:3e:
         a8:e2:1b:8e:1f:1f:23:89:50:2a:ed:bf:68:8b:34:76:e2:de:
         eb:08:ed:bc:79:04:bc:58:98:78:b0:c1:7a:f6:e7:a2:fd:4f:
         a1:8b:52:d5:d4:ff:c7:b9:6e:0a:f0:7d:0a:0b:d3:8f:9d:1c:
         41:28:72:e6:59:96:8e:f2:36:ab:fa:2e:1b:44:9f:e5:92:74:
         62:8a:7c:d3:0d:46:8d:e3:38:17:01:d6:be:3b:f7:14:2f:a0:
         ef:5d:e5:a7:08:6e:7f:de:59:2e:4f:91:a5:56:cb:05:61:9e:
         dc:ee:aa:94:e6:0e:5c:23:64:f2:e5:4c:b4:2a:f1:c1:dd:16:
         5d:f5:43:b5:3f:17:89:00:82:95:6e:ad:46:8f:ea:01:ac:1c:
         50:a7:a0:e1:8c:f5:89:2f:87:0c:5a:78:d0:52:1d:f1:5b:e4:
         47:73:e8:50:00:62:26:57:69:04:14:d4:59:a5:e2:dd:6a:0e:
         db:6b:94:d3:d5:ff:d4:7f:d5:86:c2:e7:a5:31:f6:d9:cf:33:
         4d:c2:d8:90:c1:78:b0:df:42:c1:ba:1c:30:02:5e:79:df:35:
         03:12:be:38:0b:a9:3f:03:ba:a8:57:08:86:cb:b8:8d:81:b9:
         35:5a:6b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:50 2026 by rpki-client