Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File:                     u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier:          E1//f006reg8xlFMnwWTt4JGG3GWYab4cXL2xfWb344=
Subject key identifier:   52:CB:EC:E4:26:C7:EE:E8:33:4F:E0:49:8D:10:66:68:C6:53:D1:A4
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer:       /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial:       019FA03B0532CEC8C7527FD2672AC521B9E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number:          05F1
Signing time:             Sun 26 Jul 2026 21:00:50 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:50 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:50 +0000
Files and hashes:         1: SvNmMoOS2D7ABYeycDZExPxmaNI.roa (hash: hAPQtadJ57I6XgA+8LOiB1aW1n0vaUnx78Tugxa2seU=)
                          2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: hM2LnPEtwgAB0GB0kHGoC/l7LXxcLgn/fU+v3HY8Jjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3b:05:32:ce:c8:c7:52:7f:d2:67:2a:c5:21:b9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
        Validity
            Not Before: Jul 26 21:00:50 2026 GMT
            Not After : Jul 27 21:00:50 2026 GMT
        Subject: CN=52cbece426c7eee8334fe0498d106668c653d1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1a:87:70:4c:63:c4:f9:7c:6e:2b:dc:61:30:
                    34:02:f5:f1:88:6f:6b:c5:1e:65:66:3a:eb:2b:67:
                    db:58:1d:9f:0c:5b:b7:4f:b0:ff:35:e8:24:7e:1b:
                    5b:81:c4:bc:e2:cd:5d:f4:6b:4a:f6:3f:81:4f:c6:
                    ad:e9:89:ce:7a:67:25:37:3b:31:84:b0:40:f7:f7:
                    51:e7:eb:9a:5d:55:3b:52:7d:a3:26:cc:90:7c:bd:
                    1d:cd:56:eb:05:d2:60:9d:4b:f7:2a:55:b9:b1:17:
                    6c:ff:26:5d:ea:ca:e3:c7:e4:c9:25:d5:fd:4d:4e:
                    fe:fb:b0:45:ad:e9:2a:dc:d1:af:80:4a:52:9b:8f:
                    84:3d:c2:94:7b:1d:84:08:40:b6:cd:fd:fa:ea:03:
                    48:f0:07:9c:eb:04:41:5a:d3:30:f6:2d:1f:85:4c:
                    e7:95:71:06:be:81:73:10:7d:55:30:21:97:c2:86:
                    48:70:ad:7e:7f:ef:69:ec:43:9c:7b:1e:76:2b:44:
                    b3:15:1a:5c:0b:cd:bf:e1:36:de:c0:54:1c:09:c4:
                    b5:87:c1:8d:1e:44:f1:2b:b3:cd:ef:14:e9:07:1b:
                    2f:cc:0b:e6:45:80:98:2f:64:ff:15:5f:31:7a:1f:
                    ba:4e:d7:3e:12:0e:f6:a2:0b:fc:7f:d3:e5:fb:59:
                    6c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CB:EC:E4:26:C7:EE:E8:33:4F:E0:49:8D:10:66:68:C6:53:D1:A4
            X509v3 Authority Key Identifier:
                keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:2c:71:d9:64:e0:2e:f9:bb:e2:f2:ac:b4:0a:6f:40:20:e2:
         2e:87:34:5c:8e:7f:34:73:cb:d1:5b:e1:d7:6d:5c:c0:39:b3:
         67:83:d1:8b:91:62:8b:9c:3d:09:94:8c:a4:50:5f:15:65:e9:
         4c:92:10:a9:51:74:67:a9:1c:72:a1:9d:2b:ed:e2:82:cf:cf:
         9d:33:cd:f9:ee:e4:71:69:c4:2e:e7:61:12:3d:67:b4:b0:85:
         12:dd:5c:f1:dc:ea:d5:08:f4:0d:2b:3d:f5:89:cd:71:2a:cc:
         0d:92:79:b7:96:d4:26:6d:cf:fa:98:70:a1:4c:b1:5b:ed:56:
         3d:b8:5f:0e:2f:d2:4d:22:fe:bb:af:2f:fc:1d:5c:4e:18:1b:
         2e:33:b7:cd:75:1b:fe:fd:dd:a6:db:b9:f7:e1:bc:1e:9b:c2:
         34:fe:2a:a8:94:c7:93:64:4c:da:e2:e4:93:30:51:8b:90:8c:
         c5:83:d8:01:5d:07:42:87:50:03:b6:50:ce:2f:4f:a3:bc:55:
         ea:c0:db:40:68:25:34:39:35:ed:2d:6e:13:59:26:17:93:d4:
         d3:84:d0:90:e6:fc:69:a0:dc:26:99:16:05:40:e4:95:d1:ed:
         e6:b3:30:d3:51:80:53:03:44:63:ad:ca:c6:a9:ce:7f:27:46:
         eb:eb:80:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:50:55 2026 by rpki-client