Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File:                     AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier:          F8Ofi4laOLaW11QckK+QdEmCAsS1Lb9mK8aXzPMdcs4=
Subject key identifier:   FB:51:0D:BF:4E:8E:78:F7:8C:0C:BC:14:FE:D0:B4:E9:06:0B:B6:62
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer:       /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial:       019F8F102D82353CF198BB25E67013A14DDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number:          18CB
Signing time:             Thu 23 Jul 2026 13:00:29 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:29 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:29 +0000
Files and hashes:         1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: 96PvxcVs54ppzJHVYTiz7HUvEy9wR1tBk7H6l3jrGNk=)
                          2: OkVoScbKIL9TXKvP438rB5FRYb0.roa (hash: 45VM0zyf0tTbWI+Pen84q/pMakzdNZmUXMwDebqNLz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:2d:82:35:3c:f1:98:bb:25:e6:70:13:a1:4d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
        Validity
            Not Before: Jul 23 13:00:29 2026 GMT
            Not After : Jul 24 13:00:29 2026 GMT
        Subject: CN=fb510dbf4e8e78f78c0cbc14fed0b4e9060bb662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:d1:a1:05:d6:85:0a:85:ad:5a:b2:b7:89:
                    a1:a3:9e:cd:f1:60:cb:3d:0b:1e:af:26:5e:84:bf:
                    4e:ca:55:75:f4:e0:37:57:56:5b:1e:a1:a3:92:ff:
                    2e:90:49:08:89:f3:28:14:8a:fd:cd:46:12:2b:74:
                    ac:dc:74:3c:1a:d1:89:57:8d:46:ed:c8:ba:f7:ea:
                    48:27:3d:ca:76:c3:78:d3:50:30:01:06:cf:5c:a5:
                    b4:cd:29:82:31:3a:6d:ba:aa:a0:91:be:81:41:39:
                    85:9b:06:aa:5c:67:71:2e:62:39:fe:78:88:13:ab:
                    6e:d1:9b:59:e3:1d:5e:12:db:3a:71:29:47:be:c5:
                    5d:79:16:2e:ee:0b:4a:b8:16:10:92:8d:ab:ea:54:
                    3c:e6:e8:62:90:8f:71:7e:51:44:ac:d1:5e:f9:28:
                    e2:9a:23:49:79:04:44:53:79:36:5f:cd:f0:6b:0c:
                    be:86:4b:25:58:a8:c8:c7:5d:2d:66:4f:f3:28:f6:
                    30:3d:19:72:3c:ba:55:b3:6f:23:71:22:42:84:d2:
                    75:d0:83:f0:e4:94:98:59:e3:03:6d:a6:87:3f:0a:
                    36:9b:de:57:da:d6:25:22:66:78:72:f4:13:66:1a:
                    d7:1a:3d:4b:90:e7:b0:da:7a:96:10:ef:5c:26:bf:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:51:0D:BF:4E:8E:78:F7:8C:0C:BC:14:FE:D0:B4:E9:06:0B:B6:62
            X509v3 Authority Key Identifier:
                keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:66:a5:7d:0c:54:99:bd:c0:46:9d:39:b4:16:af:be:40:
         59:9c:3a:fe:bd:d7:e5:41:a3:af:ad:c4:ed:69:29:a8:78:f4:
         b6:2c:19:99:a8:aa:bb:93:7b:ef:38:71:75:42:8c:05:28:a8:
         19:ef:4c:b3:45:a5:2e:c4:d3:cd:2e:92:4a:c0:a3:3b:8f:fa:
         a0:7b:5b:f7:f9:55:b7:ab:44:fa:7b:7d:3c:8f:1b:0e:d4:e1:
         67:c8:ec:8f:c7:2e:2f:6a:7a:ac:a1:4b:26:e3:f9:fd:f2:cc:
         3f:6c:4c:23:5e:87:15:1a:94:a9:15:8a:33:46:7f:40:a5:c2:
         e4:f0:ce:02:57:8d:08:12:99:74:d3:8b:0a:89:d0:bd:21:5f:
         e0:8d:3d:6b:97:fe:0e:8e:2e:38:29:52:f2:46:9f:f5:b3:50:
         ad:20:5d:d8:20:06:ff:8a:b0:f3:ea:58:ff:7c:99:c5:6a:e4:
         58:4f:20:e0:a8:3f:69:64:71:d6:12:dd:46:13:0c:14:f6:29:
         df:00:a2:6b:ad:05:23:13:ee:71:7c:20:12:82:bd:ae:5a:c8:
         b9:6c:c1:fe:9f:78:3e:a3:87:a5:53:f2:00:f4:5b:f3:0b:a8:
         d2:3d:35:c7:9c:18:8e:6a:83:f1:b4:0a:64:91:2b:c5:60:a9:
         a8:c3:97:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:45 2026 by rpki-client