Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
File:                     CTdXHsK0hQX72gnKfqaN69lOAdM.mft (raw, json)
Hash identifier:          SpWG7/1huYIAa8E+GgnMZH7GhOqQyw3/HAfdRkROAWw=
Subject key identifier:   94:FC:BC:AA:52:88:28:39:55:A1:EF:A3:75:76:E8:55:83:C7:49:80
Authority key identifier: 09:37:57:1E:C2:B4:85:05:FB:DA:09:CA:7E:A6:8D:EB:D9:4E:01:D3
Certificate issuer:       /CN=0937571ec2b48505fbda09ca7ea68debd94e01d3
Certificate serial:       019F8F7EFA2984D80CF143A26A7E0BFE27B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:31 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:31 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:31 +0000
Files and hashes:         1: CTdXHsK0hQX72gnKfqaN69lOAdM.crl (hash: DF30k/DOPBlX0r02Mg8qmSkAyJ9naWw8fxEkgoQDZUw=)
                          2: pjNNqrlFdBEk-5LXIPaA2yAX9II.roa (hash: 6xAgp3Y3/YbpjnpdTMNy11kqzchtaR+Q0nGNwxBy1EY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:fa:29:84:d8:0c:f1:43:a2:6a:7e:0b:fe:27:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0937571ec2b48505fbda09ca7ea68debd94e01d3
        Validity
            Not Before: Jul 23 15:01:31 2026 GMT
            Not After : Jul 24 15:01:31 2026 GMT
        Subject: CN=94fcbcaa5288283955a1efa37576e85583c74980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:b4:c8:ea:78:d5:e1:71:8e:c0:a1:21:04:
                    50:3a:e8:76:d4:4e:13:7a:65:3a:cc:2c:65:12:fa:
                    12:b1:ce:27:02:73:a0:0a:70:84:98:12:46:c5:44:
                    15:32:41:40:fc:95:97:8d:cb:c5:f3:7f:7a:e5:df:
                    be:99:4c:95:c3:25:10:e6:67:8e:12:db:e2:d3:5b:
                    9b:14:bc:6c:d3:57:ee:1c:19:62:56:96:82:3e:b5:
                    3e:78:16:f3:1a:7f:05:01:f6:3e:8a:59:14:26:3b:
                    96:17:31:37:24:78:20:e5:a1:83:d9:ea:a1:8d:2e:
                    f2:b8:63:26:c2:46:d0:46:cc:9c:1d:5d:1a:6d:57:
                    52:3c:6f:5a:6c:d9:39:6c:35:58:9e:fd:02:ca:ab:
                    eb:cc:32:9f:7a:73:3a:f8:1e:90:85:89:b1:02:db:
                    80:24:db:b7:25:06:0f:a4:89:74:cc:c4:93:6f:4d:
                    a4:10:14:46:54:94:4a:d4:af:15:65:79:9b:28:ef:
                    7e:f2:8a:4e:63:0e:11:1e:d8:be:dc:73:3e:f9:82:
                    e3:7f:01:a7:a7:31:fd:ec:53:c5:80:f7:f8:c9:c9:
                    45:f3:e2:4d:58:08:03:62:71:f6:fe:47:f9:4b:1f:
                    3a:08:1e:ca:9f:8d:fb:5b:96:d2:66:ab:ed:50:08:
                    f8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FC:BC:AA:52:88:28:39:55:A1:EF:A3:75:76:E8:55:83:C7:49:80
            X509v3 Authority Key Identifier:
                keyid:09:37:57:1E:C2:B4:85:05:FB:DA:09:CA:7E:A6:8D:EB:D9:4E:01:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:55:dc:9c:39:47:73:1b:06:b1:a6:6b:cd:98:6f:58:7c:6a:
         12:22:f1:8d:3a:01:5d:c9:e4:3e:16:20:e3:0d:9c:75:f0:70:
         5b:09:ba:73:b4:5a:27:f4:a0:e6:19:2a:f1:cd:1b:2b:9b:57:
         16:9c:9a:a0:b6:f5:96:26:09:b2:89:af:98:fb:6e:62:6f:2b:
         81:39:37:b5:63:17:a6:7d:57:37:20:45:ee:3e:53:d9:d2:8a:
         f6:35:57:59:a1:d7:80:e7:a4:c8:a2:98:4e:f3:ca:57:52:4f:
         fc:96:3b:a2:e4:ae:9c:20:70:bf:2d:37:1f:fb:e6:40:fe:4c:
         ea:60:0c:a2:b8:68:cf:e6:e6:9a:31:b8:16:1b:f7:4f:a3:b0:
         bd:d9:23:35:5e:a5:1b:0d:9b:cb:ed:52:d9:96:78:69:66:1c:
         a2:b4:27:22:04:29:db:39:b3:fc:68:61:92:f1:10:92:99:85:
         e8:8f:e0:7c:a9:66:66:ba:3d:eb:29:e8:9c:ab:89:f9:c0:53:
         94:a2:53:de:7f:a8:4f:5f:c5:b9:ef:53:40:c2:7b:90:40:f7:
         c8:8d:3f:d4:fc:6f:60:4f:9a:1a:3b:0f:ea:d5:6b:d7:db:22:
         51:b0:a5:a3:5b:e3:30:af:6f:ac:bd:c2:a1:e8:17:44:00:bb:
         51:27:90:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:08 2026 by rpki-client