Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File:                     P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier:          QcZ7pFR3wydnpovCUvy95Z4aoUa/ivbb2E8pl02n6ss=
Subject key identifier:   03:AC:1E:05:C7:8E:F6:B9:D5:A8:19:38:4A:5B:CA:7B:0E:08:03:96
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer:       /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial:       019FDF88F3B9311080BD5FEED49576C769AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number:          0FDB
Signing time:             Sat 08 Aug 2026 04:02:02 +0000
Manifest this update:     Sat 08 Aug 2026 04:02:02 +0000
Manifest next update:     Sun 09 Aug 2026 04:02:02 +0000
Files and hashes:         1: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: bO+/Kz4hqwabHsopZ39uxmBdGGGmptcIkGnQZr3vmz0=)
                          2: SaGiZjjt90SX7-BzKCTX7bYUJCE.roa (hash: shQxuuEzemQfoeUgl6rxwi+Wbc4ekvnlLIFK68Q9YjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 22:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:df:88:f3:b9:31:10:80:bd:5f:ee:d4:95:76:c7:69:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
        Validity
            Not Before: Aug  8 04:02:02 2026 GMT
            Not After : Aug  9 04:02:02 2026 GMT
        Subject: CN=03ac1e05c78ef6b9d5a819384a5bca7b0e080396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:4f:57:cc:01:2f:90:1d:f7:f5:34:c3:9f:
                    bc:47:ef:62:f7:46:d8:90:f3:69:16:66:d2:49:3b:
                    72:03:a4:e0:59:6e:03:86:db:22:b7:a3:f0:aa:0f:
                    63:df:11:64:e4:c4:3c:9a:b5:e8:f0:6a:a1:75:f9:
                    dd:85:fa:c3:d0:aa:2e:89:54:be:4f:3c:d4:40:56:
                    b8:51:d7:51:0a:13:3d:bb:cf:37:63:15:3e:79:2d:
                    a1:15:9f:74:c5:be:7d:27:80:ef:c3:0c:50:86:34:
                    02:8c:fb:fa:2c:71:1d:b5:1d:4a:58:41:41:de:fe:
                    a0:30:c6:4f:12:67:fc:77:65:76:7e:51:05:1c:61:
                    97:38:54:e4:78:f0:7c:ee:99:4e:85:0a:9a:a3:06:
                    e3:b8:7f:7b:18:07:6d:26:11:64:46:5d:6d:e0:10:
                    85:42:4d:09:a6:05:4d:91:b0:a1:e2:aa:f2:76:37:
                    ee:bb:c5:af:38:b8:cc:94:e5:d2:23:0b:6a:24:42:
                    6a:64:37:99:35:af:f4:27:ad:19:8e:bf:74:65:e0:
                    08:59:8c:6f:e8:65:fe:4e:03:a9:c2:93:ec:b7:2e:
                    74:2b:25:8b:d7:9d:f2:8b:16:74:eb:2e:75:08:26:
                    f2:eb:84:06:bf:c0:e6:7e:57:4f:99:56:f1:17:2d:
                    93:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AC:1E:05:C7:8E:F6:B9:D5:A8:19:38:4A:5B:CA:7B:0E:08:03:96
            X509v3 Authority Key Identifier:
                keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:df:f1:77:fb:94:fd:7f:64:19:a0:85:b1:09:dc:76:3d:30:
         7e:ff:1f:25:0d:92:db:87:dc:0d:a4:c4:31:bd:1e:17:e7:7b:
         54:87:60:19:9f:9b:6e:fa:41:8d:99:34:4b:4d:aa:4a:a7:69:
         44:a3:a1:90:d5:e7:7f:57:69:7a:c1:80:66:a4:6a:01:24:2e:
         bc:55:7b:ae:a1:cc:c0:48:2c:b5:92:33:18:c3:93:fb:b4:2f:
         13:ee:ef:00:c9:5f:a3:41:a1:a4:86:a2:1f:9d:0a:6c:e7:c7:
         1d:30:7c:a8:86:c5:a3:88:c6:80:96:af:a7:89:13:ad:5a:f1:
         a0:f1:d7:cd:f6:12:80:12:03:15:36:07:a4:e7:09:ab:3c:f8:
         64:25:c0:4e:63:15:0b:ef:3a:5e:f1:1b:5e:8c:87:20:d8:67:
         3c:26:b6:70:c1:f3:d9:cc:f9:67:33:ce:3e:f9:74:52:ca:65:
         d0:d6:52:d7:a0:64:6d:5e:43:39:f9:fa:f7:68:bc:d7:1e:d2:
         e8:4b:e7:24:17:39:11:48:f6:58:45:f9:b9:70:06:55:68:5a:
         fd:65:45:09:c5:ad:da:b6:d0:e2:22:b9:d6:42:98:20:b4:07:
         01:49:dd:c7:84:83:22:00:7c:71:0f:ec:46:c5:97:bf:0b:f8:
         b2:f4:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:18:59 2026 by rpki-client