Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File:                     sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier:          3ESxohhzeVJ+vyhZBOjcXejmCtd7npex7yku5CBh7FQ=
Subject key identifier:   57:BF:53:7E:E8:6A:9A:2A:7A:E0:FD:B6:45:8D:E4:45:88:52:E9:64
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer:       /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial:       019FA1BB64166C0F51A9E4514734376E6E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number:          06C9
Signing time:             Mon 27 Jul 2026 04:00:40 +0000
Manifest this update:     Mon 27 Jul 2026 04:00:40 +0000
Manifest next update:     Tue 28 Jul 2026 04:00:40 +0000
Files and hashes:         1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=)
                          2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: fwmV9w84O240HQg4j4cK+FVJ4VZkwRwoHl/Vzlk2LgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:64:16:6c:0f:51:a9:e4:51:47:34:37:6e:6e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
        Validity
            Not Before: Jul 27 04:00:40 2026 GMT
            Not After : Jul 28 04:00:40 2026 GMT
        Subject: CN=57bf537ee86a9a2a7ae0fdb6458de4458852e964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:63:38:a3:7b:3c:a7:93:33:69:2f:a0:da:
                    e1:2c:20:63:ec:49:be:3d:73:da:a5:77:4d:91:84:
                    a5:59:a2:42:cd:53:e4:93:8c:92:36:8c:f5:24:11:
                    70:d7:83:f5:3e:49:bd:75:c2:f3:32:c0:e2:ec:b3:
                    60:eb:af:a2:60:a9:18:6f:c9:27:b0:5f:e8:6e:7c:
                    32:4b:8d:a3:2c:09:b2:6e:a0:9a:a1:23:00:f2:b5:
                    e2:86:89:74:eb:18:bb:e8:30:da:e5:29:0c:5f:73:
                    b9:34:ca:b6:1c:1e:62:5b:eb:ed:17:eb:1a:25:44:
                    b2:6d:4e:64:76:57:b0:40:31:0a:0a:57:14:20:8f:
                    78:b7:a0:a5:fc:f9:0b:58:d3:fe:f9:47:aa:41:67:
                    fb:0c:2d:8d:36:76:f7:05:3f:66:4d:5e:49:2b:df:
                    b9:e6:1f:a0:3e:31:46:6a:14:6a:e8:f2:a4:c2:ce:
                    c0:d4:8e:4f:2f:6e:34:e7:18:ce:c4:55:c1:aa:60:
                    a7:41:88:89:e1:31:43:e4:5a:80:90:2c:9d:5b:9e:
                    da:95:59:2e:49:7a:47:37:c4:56:2e:59:65:2a:ac:
                    10:07:3a:aa:aa:76:ce:ae:ef:cb:9a:6f:d4:f8:b2:
                    5c:e6:a9:c4:d3:f6:fd:c8:6c:fc:ab:b1:76:42:0d:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BF:53:7E:E8:6A:9A:2A:7A:E0:FD:B6:45:8D:E4:45:88:52:E9:64
            X509v3 Authority Key Identifier:
                keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1a:de:51:80:f1:0b:1b:48:a1:3b:31:6c:43:86:92:e8:75:
         28:56:5f:10:dd:fc:66:92:ce:5a:1f:64:f3:44:0f:d2:b1:40:
         52:4a:c5:84:1f:91:e2:94:ed:2b:ac:35:4c:0d:b5:f9:ac:a4:
         3e:5b:64:50:e8:ab:b0:85:d5:ba:d9:8b:bd:3b:68:52:9d:a0:
         7a:ce:31:f1:1e:1b:7e:02:1c:6c:63:82:8c:f2:5e:54:55:a1:
         37:91:fd:ca:20:fe:32:14:91:e2:b7:2a:82:c1:dc:3c:4c:24:
         2e:0b:ea:db:8d:59:27:5f:0a:62:77:0e:68:cd:8e:2d:21:29:
         50:1e:3f:5d:3b:3d:ec:56:1c:05:4b:45:ae:13:87:2d:ff:54:
         88:f1:dd:a5:08:90:1d:9d:dd:e0:24:57:dc:91:c1:fb:90:3d:
         59:be:20:39:0f:89:8d:9a:a0:e6:9d:c2:4b:41:83:22:b6:f2:
         85:cb:c4:2e:ed:6d:79:62:d5:a4:d9:57:b7:a7:a5:ea:64:b5:
         74:57:c8:06:a3:7a:4c:36:3e:04:9e:59:8a:11:5c:d4:8c:27:
         4a:db:d7:72:bd:24:0f:66:ef:34:b2:22:15:ec:5a:dc:4e:17:
         55:9a:58:22:60:ea:d4:ff:a4:c6:e0:f0:5e:e5:d0:12:5f:26:
         e1:6f:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:08:44 2026 by rpki-client