Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File:                     U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier:          zocSF8aOGiypgcOjzU3OL102r/xpjG0I8s38itDLN5o=
Subject key identifier:   3F:D7:13:82:B0:DC:2F:76:52:19:DD:65:24:97:DB:8C:6A:6A:7E:13
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer:       /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial:       019F9F27F3A5D4CB7D93205CA0F7179E799D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number:          0FC5
Signing time:             Sun 26 Jul 2026 16:00:23 +0000
Manifest this update:     Sun 26 Jul 2026 16:00:23 +0000
Manifest next update:     Mon 27 Jul 2026 16:00:23 +0000
Files and hashes:         1: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: ieUEK/BV48DOwRgAQo7W2/NJv0kW8USOQchCdol+Lpw=)
                          2: VtaKLbc1bmC0OT-Q3JTgdIZyayc.roa (hash: UBrKjUxBC5vtYfpevFvOXwmeammg36EmC9n/o1kbyUg=)
                          3: ZT6FomeiG8V5UVVq_9nhQvhkJ7E.roa (hash: VNWPoTgK+6WszCC/cUNxFvYDKEgpXvtoe5rvFlIxorQ=)
                          4: fgZ2gr9j8nkuTcXKTHLTyjKT7Rs.roa (hash: /jAuQCxC5qXXEGyOBRWBeLTs2UBCn/Kok1gqE38op4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:27:f3:a5:d4:cb:7d:93:20:5c:a0:f7:17:9e:79:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
        Validity
            Not Before: Jul 26 16:00:23 2026 GMT
            Not After : Jul 27 16:00:23 2026 GMT
        Subject: CN=3fd71382b0dc2f765219dd652497db8c6a6a7e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:df:cb:7c:7e:5d:2d:aa:cd:0d:cd:0b:4b:
                    12:e3:b9:f9:6a:b9:13:31:8a:8d:09:b2:62:8f:03:
                    84:b0:98:65:46:cf:59:06:1e:7f:d9:0d:c6:2a:6f:
                    65:99:98:dc:b4:b4:08:90:7c:52:7f:2f:52:ec:35:
                    37:4a:0b:77:20:8f:cd:de:d6:33:08:41:db:31:8f:
                    3a:f8:19:7e:cb:2a:f0:2a:69:a5:42:c5:ae:69:99:
                    89:6c:93:cf:2a:ab:97:78:3d:a2:95:9f:b7:47:d3:
                    4d:74:ef:ed:93:15:fc:56:1a:06:c7:ad:cc:5a:d7:
                    c0:ef:05:2d:79:6e:e5:a3:5c:22:5d:f0:cf:94:71:
                    6a:d7:a0:72:ef:69:49:2b:c8:1a:e5:e4:55:2c:e9:
                    ea:df:a1:0f:d4:5f:f0:c7:03:50:c6:5d:bd:ba:ba:
                    57:0c:12:f9:47:01:ee:48:cf:a7:a3:ea:e0:df:9e:
                    a9:7b:69:88:11:5e:2f:74:b1:f0:e7:4d:b7:78:8e:
                    f7:86:95:45:54:98:af:41:94:1f:b3:92:e3:b1:fc:
                    0f:76:ee:bd:9d:63:d4:78:54:4a:a5:38:26:18:c2:
                    9a:41:b4:a9:ff:bb:39:0e:fc:9b:34:78:1c:e5:c8:
                    20:00:89:9a:0b:ea:79:7e:6e:35:97:ef:7d:1b:46:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D7:13:82:B0:DC:2F:76:52:19:DD:65:24:97:DB:8C:6A:6A:7E:13
            X509v3 Authority Key Identifier:
                keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:85:db:b0:ed:b2:80:b3:fa:e9:1f:96:bd:6a:72:a8:00:57:
         31:8f:00:66:7e:fd:6f:18:3b:25:fc:02:21:0a:c2:17:7b:40:
         4f:a1:f9:ca:31:ac:bd:d8:88:6b:97:52:bb:43:5f:8e:6b:83:
         86:fa:19:45:2c:d1:af:ca:ac:ca:34:73:24:00:11:92:ea:c2:
         b7:5b:53:13:42:72:27:62:25:2b:06:3c:eb:84:30:02:29:2a:
         fa:16:7a:c2:41:64:ab:a6:f0:24:8f:0e:95:0b:5a:a3:14:87:
         f1:f6:e8:5c:12:3c:fe:e4:c2:f2:e6:78:59:6c:82:b9:fd:52:
         ba:de:f3:87:17:8a:46:5c:01:67:b8:09:e0:c3:48:e6:da:34:
         7d:c5:4d:7b:80:35:23:7c:a2:1f:e8:b1:c8:23:ae:bc:f7:71:
         cd:b0:06:2f:f4:54:58:83:55:82:fb:f5:ab:5e:76:c0:a4:73:
         b5:52:ee:e1:9a:1c:53:88:89:c9:c8:ac:f5:1a:b3:60:80:5a:
         38:2e:39:2c:e5:2f:5d:5f:7a:03:17:5a:df:a3:73:d1:21:05:
         89:2f:09:c7:d6:b0:e4:cc:ba:b3:4c:39:d8:12:a6:85:d0:ce:
         81:dc:56:fb:0a:89:b5:06:30:00:07:c0:ff:6d:63:eb:56:6e:
         a4:dc:56:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:09:39 2026 by rpki-client