Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
File:                     fsGdR6J46MXxy7L88r0LJnajZew.mft (raw, json)
Hash identifier:          ol0OcoIye3MjJRjn6hsc16tWvmrW1q7ce4slV0JjDIc=
Subject key identifier:   09:56:C1:1F:56:4F:9E:96:BD:62:20:DA:59:79:B4:3F:1E:7D:65:BD
Authority key identifier: 7E:C1:9D:47:A2:78:E8:C5:F1:CB:B2:FC:F2:BD:0B:26:76:A3:65:EC
Certificate issuer:       /CN=7ec19d47a278e8c5f1cbb2fcf2bd0b2676a365ec
Certificate serial:       019FA2CED6809588A3279135BDDC5FBE4001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
Manifest number:          49
Signing time:             Mon 27 Jul 2026 09:01:32 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:32 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:32 +0000
Files and hashes:         1: fsGdR6J46MXxy7L88r0LJnajZew.crl (hash: mX7VsoW90cVE6ol4I84cu1814z1HUo+BLildlc4AYE0=)
                          2: lJwPx_YfXagzrWfCaDbeHMh9VSU.roa (hash: lpKb9Ke9ORsiJSWDSA7lflKj6VXsYAISsmKT3+p+SJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:d6:80:95:88:a3:27:91:35:bd:dc:5f:be:40:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec19d47a278e8c5f1cbb2fcf2bd0b2676a365ec
        Validity
            Not Before: Jul 27 09:01:32 2026 GMT
            Not After : Jul 28 09:01:32 2026 GMT
        Subject: CN=0956c11f564f9e96bd6220da5979b43f1e7d65bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:d8:ed:2b:66:69:77:ba:fe:aa:f7:7b:c2:
                    2b:59:a7:44:8f:3b:45:24:bd:48:0e:e5:3c:c5:66:
                    60:10:cb:8e:44:3b:85:ef:d6:32:37:bb:85:8b:76:
                    7a:0b:54:a8:ad:d1:db:49:9c:2a:20:8d:bc:54:c5:
                    9a:f7:ae:4c:1c:b9:fd:09:6e:a9:db:6d:bd:f1:00:
                    b8:93:14:fb:59:4c:62:1a:c8:08:d6:07:cf:26:ec:
                    20:ca:4c:16:32:b1:ff:4d:97:37:bd:51:94:76:5b:
                    6d:f1:ae:cb:e6:0a:0e:17:b7:d3:ac:f4:ef:28:dc:
                    59:02:87:19:6c:32:20:99:1b:28:54:ef:90:b0:38:
                    f3:e0:fb:d2:e7:2a:e4:87:49:88:ba:78:7d:8c:e6:
                    f5:2e:a6:26:7f:49:05:b4:d5:26:b3:38:b7:aa:94:
                    dc:41:2c:cd:25:16:c8:11:c8:22:ee:f1:b5:c4:b5:
                    9e:4b:33:cb:ba:12:ea:2b:65:f3:9d:aa:6b:70:21:
                    51:3d:b0:ba:a2:e4:ed:05:0f:bb:c1:19:1b:ca:4f:
                    79:c2:26:75:2c:95:71:63:af:89:10:dd:db:4e:4f:
                    84:bf:9f:9b:5f:88:9c:70:e0:c1:bc:9e:12:a1:44:
                    62:b0:93:a5:e9:35:12:f1:80:e9:07:80:fe:93:3a:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:56:C1:1F:56:4F:9E:96:BD:62:20:DA:59:79:B4:3F:1E:7D:65:BD
            X509v3 Authority Key Identifier:
                keyid:7E:C1:9D:47:A2:78:E8:C5:F1:CB:B2:FC:F2:BD:0B:26:76:A3:65:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:04:23:0b:c5:41:84:e9:d6:00:7f:7c:12:92:fa:8e:af:cd:
         6d:d9:f6:d6:f0:2e:9f:b5:1a:71:a9:e3:24:e7:b6:a2:3f:c0:
         cd:88:e0:e4:2e:9f:45:02:5b:51:5f:e3:30:80:ad:4b:86:19:
         6f:41:33:56:48:60:42:33:6f:9e:71:3d:8e:88:68:11:2f:5b:
         9b:ab:ae:44:0b:ed:c2:36:ae:03:ea:aa:61:08:d4:5e:05:58:
         fb:13:d1:4c:86:69:b3:47:d9:4a:7e:aa:ef:22:aa:46:71:d0:
         db:0f:f6:94:a0:f8:16:e4:fd:78:7f:ac:15:1b:1e:62:43:b8:
         06:dc:ea:59:b7:76:9b:95:54:a3:d9:52:51:66:e3:91:17:00:
         ad:6d:e8:5f:ef:2e:04:72:f0:52:ad:ac:90:d2:dd:85:43:5d:
         c0:cf:3d:99:e0:49:35:f2:29:45:5c:de:d5:5b:6a:82:ed:e0:
         2b:c0:a4:93:6b:19:bc:02:93:eb:1b:20:b3:60:e3:0f:94:69:
         0a:39:35:3f:10:83:2f:07:83:a2:6b:17:30:12:53:2b:88:b7:
         c5:ce:83:22:17:7a:31:62:ac:a6:b4:6b:3b:b7:03:de:58:1b:
         40:40:e9:d3:88:21:76:25:b3:99:ff:5b:ee:cd:d3:94:98:11:
         13:d8:4f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:42:51 2026 by rpki-client