Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File:                     SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier:          s4lpw5P3FR8t+gCabtyPa/9WyKsZGj3qy4sqIChMmhE=
Subject key identifier:   2F:8C:8A:C6:0D:C3:B0:E0:24:FB:39:A7:CB:A3:C8:C8:79:3E:AD:30
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer:       /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial:       019FA2298513B3A6397AC3D5C40C7F7E87A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number:          05F2
Signing time:             Mon 27 Jul 2026 06:00:57 +0000
Manifest this update:     Mon 27 Jul 2026 06:00:57 +0000
Manifest next update:     Tue 28 Jul 2026 06:00:57 +0000
Files and hashes:         1: JJCCXVuKGJb9ue4yyF1fCtUPK9E.roa (hash: 9nwd4CsbVqKtlvKwPGpaOjb7a2D6lmLy6I2tj8BYZf4=)
                          2: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: rbN++5cYAQIF6sZmqxNQCUUrbNVZunXtdyXuV6VYUIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:85:13:b3:a6:39:7a:c3:d5:c4:0c:7f:7e:87:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
        Validity
            Not Before: Jul 27 06:00:57 2026 GMT
            Not After : Jul 28 06:00:57 2026 GMT
        Subject: CN=2f8c8ac60dc3b0e024fb39a7cba3c8c8793ead30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:e8:62:0e:84:29:47:37:2e:87:99:08:df:
                    d0:bd:e0:8c:49:f2:92:39:82:a2:45:e0:71:94:33:
                    9e:07:5c:0c:8b:17:92:00:4f:46:3a:b5:e0:f9:fa:
                    64:ac:51:fd:ca:5d:5e:ea:83:35:42:1b:d5:61:56:
                    08:e4:3b:08:6e:d6:4a:8e:05:88:5d:cb:ee:a4:d7:
                    61:a9:7a:c0:3b:30:e4:af:bd:63:d9:6e:15:fe:69:
                    2a:24:ae:52:1b:e9:09:0a:c4:ec:db:f1:50:ac:74:
                    e4:cd:9b:2b:ec:d5:7d:39:92:fe:bc:52:32:39:37:
                    d8:20:03:9d:d6:e1:9e:58:f6:f1:83:28:84:65:01:
                    22:72:6e:3c:40:2a:d2:c2:99:3c:ff:04:9b:7c:b6:
                    0b:20:41:5d:16:d5:e0:fd:5a:2a:17:d6:77:f2:23:
                    12:1d:6c:75:9b:a6:e6:ec:0c:5c:36:dd:af:87:d8:
                    80:03:15:a1:f6:cf:6b:1e:14:1c:46:3e:66:90:e0:
                    17:63:95:a5:d3:e0:b8:49:ae:aa:52:53:e8:e0:27:
                    6d:da:8e:1b:5c:49:3f:c4:5b:50:d2:9a:8d:94:68:
                    90:dc:9d:80:ce:c3:9b:a0:d6:d9:28:19:8c:3d:3d:
                    22:99:4e:e6:5d:a4:44:ca:26:67:a5:8a:9f:c6:fe:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8C:8A:C6:0D:C3:B0:E0:24:FB:39:A7:CB:A3:C8:C8:79:3E:AD:30
            X509v3 Authority Key Identifier:
                keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:39:bd:71:26:9a:5e:02:c6:c3:3c:d2:07:d6:f5:57:56:3f:
         3d:70:89:ab:eb:bd:90:9b:fc:06:82:a1:a0:e8:d3:fe:80:a1:
         e5:8f:9f:a2:73:77:1c:57:c9:40:f0:9a:1c:92:89:3f:df:c6:
         36:82:86:7c:a1:d6:95:ef:c1:c5:83:cd:a9:ad:ef:fe:8a:d4:
         3d:13:84:53:3f:5f:5c:dd:13:e2:5c:d5:67:4f:91:d1:2f:19:
         07:9a:85:27:ab:63:70:b9:e4:c2:b0:ce:74:6b:b2:e5:bf:fa:
         28:26:54:a5:03:be:c8:73:a2:ca:36:d8:eb:0b:8e:1c:93:32:
         23:56:0e:c3:5e:a5:6d:e1:1b:88:7b:46:7d:2e:fe:c7:0a:98:
         4d:01:24:fc:e7:c9:cf:59:cd:e0:e0:4e:89:e1:1b:0c:ae:32:
         16:d8:31:24:1d:07:6f:19:61:02:df:ea:1b:84:2f:fa:78:a8:
         ed:5e:46:8e:e1:8e:00:ff:d6:28:e2:20:36:fa:2c:73:0e:c4:
         2d:d7:5b:87:8f:75:f5:7b:6c:f4:62:36:c9:64:68:69:41:3f:
         3e:a5:11:0d:ac:31:3f:26:99:2e:9b:86:a1:8c:b1:21:b3:ad:
         ae:83:77:08:42:af:a5:82:72:0e:b3:85:9e:3c:bd:de:42:f8:
         f8:96:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:01:13 2026 by rpki-client