Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
File:                     mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft (raw, json)
Hash identifier:          w61J/CkMSJTdUL1GCt/Yq/RC72p+uOOyM2PYre0EJPY=
Subject key identifier:   DC:27:54:79:A1:1E:3A:0D:72:52:CC:2D:CD:E4:19:F5:E2:70:B6:C8
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Certificate issuer:       /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial:       019F85D73095FB23BBE31FF6BCB953D62BA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
Manifest number:          0FCA
Signing time:             Tue 21 Jul 2026 18:01:40 +0000
Manifest this update:     Tue 21 Jul 2026 18:01:40 +0000
Manifest next update:     Wed 22 Jul 2026 18:01:40 +0000
Files and hashes:         1: mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl (hash: C0cMRCKtco7iYmA4zQACQ67i+DwJqh4ivuQ6HUM1RrQ=)
                          2: ymwnzHfZGdMRFGEeM7VXK-BgXAw.roa (hash: zIUfyqH90eqwbG4q9Ekkq/Mb1Io/2HvKy6Zq+oTaP8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 18:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d7:30:95:fb:23:bb:e3:1f:f6:bc:b9:53:d6:2b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
        Validity
            Not Before: Jul 21 18:01:40 2026 GMT
            Not After : Jul 22 18:01:40 2026 GMT
        Subject: CN=dc275479a11e3a0d7252cc2dcde419f5e270b6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:a1:eb:27:00:ad:92:9f:bb:0b:ab:f8:c9:
                    50:93:99:75:63:a5:8e:65:78:2d:aa:15:10:29:c4:
                    5a:a5:2f:7b:56:1d:0d:ee:6c:f4:38:00:81:54:47:
                    40:a6:7c:bf:98:ed:58:fd:cb:df:ed:1f:5b:0d:8b:
                    dd:1f:53:47:8f:c3:19:85:89:f6:81:12:f0:56:38:
                    79:69:a3:0a:68:00:56:f5:76:36:d5:cc:16:40:55:
                    84:c9:48:4f:eb:2d:14:33:65:12:de:ca:12:35:35:
                    8d:76:db:15:40:10:0e:3f:2b:58:1d:ab:d5:bc:0c:
                    de:98:43:ea:59:cd:9e:e6:96:20:a6:73:e9:fc:13:
                    a9:9b:d8:46:41:f1:8e:23:c7:04:b4:1c:96:fa:fc:
                    27:f7:f5:97:63:0c:3e:43:e6:82:a0:87:3c:f0:53:
                    1e:52:c4:11:81:c2:ac:78:f3:f6:ea:d7:52:2c:11:
                    f7:f6:5f:77:a8:12:f5:28:61:7b:8d:9c:cb:56:ab:
                    31:46:33:d0:0b:02:f5:53:3f:f9:29:a0:77:88:bf:
                    3f:ed:cb:f1:4f:17:ce:e0:e4:5f:1b:9d:47:51:a9:
                    81:88:1c:c2:2e:4b:15:21:6b:42:28:74:66:98:2f:
                    6d:43:28:d2:0c:9c:18:a9:cd:49:1a:22:42:69:57:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:27:54:79:A1:1E:3A:0D:72:52:CC:2D:CD:E4:19:F5:E2:70:B6:C8
            X509v3 Authority Key Identifier:
                keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:5e:de:c8:89:28:85:6f:3a:cf:9d:78:d2:c6:84:5e:71:
         f7:db:a7:74:1f:18:72:b8:f0:61:74:c1:fc:9c:1c:4e:a5:4e:
         f7:c5:23:10:f9:68:9e:3d:7a:5a:4d:f5:08:cd:4c:6f:3e:26:
         57:40:9e:69:f8:b3:4d:66:2c:76:5f:37:d1:57:3e:8b:1a:c4:
         b0:76:97:9f:f4:83:2b:77:0d:13:16:47:bc:26:93:1f:02:41:
         7f:5f:bb:c7:e0:c8:c6:c6:4b:81:5a:03:fd:67:bd:67:84:f1:
         81:4f:d8:fe:fd:c2:3c:fb:d7:3b:1b:de:7e:0e:a6:eb:51:2a:
         5d:d6:de:af:04:7c:14:13:78:fd:b2:6e:e8:ef:70:da:4e:69:
         f8:90:89:67:ab:cf:20:a1:3b:c4:ff:f2:a5:ad:28:74:8e:d7:
         36:1e:19:56:4e:e9:f7:67:40:56:2b:d9:4a:34:3f:1e:07:d5:
         7f:5a:41:02:10:21:5f:48:73:c5:ff:f4:15:51:b2:86:66:3a:
         20:7a:04:87:a9:a3:9b:bc:c5:c1:75:ba:1a:3a:08:7d:b1:50:
         98:63:a3:e8:dc:e2:d8:4a:9f:fe:19:76:cb:e6:90:10:f4:cc:
         56:4c:29:a7:a9:a4:16:45:72:9f:6a:1a:0a:7a:c3:e9:24:d4:
         9e:cc:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:42:24 2026 by rpki-client