Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
File:                     Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json)
Hash identifier:          n8BmgzawpEG6WbF26AS6sJKVvNRh/gRT7wd4LP32g/E=
Subject key identifier:   C8:B8:D6:8D:AA:83:22:F5:64:A6:2D:3A:C8:62:09:D4:35:40:1A:3A
Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Certificate issuer:       /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Certificate serial:       019FA0A8EE1F644AACE2DFB6211E48205DE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
Manifest number:          06EF
Signing time:             Sun 26 Jul 2026 23:00:53 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:53 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:53 +0000
Files and hashes:         1: 2AoCTJhqU5v6MlrbH3hvQy0Uf7Y.roa (hash: G3dIE6sYWPhy161h7oAdaMA3nB4HfJRUXVulVZyCG4Y=)
                          2: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: Jlt+WQ+7fwh5zd96PY/WKHXdp6ntk0t16T4wlwKOA+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:ee:1f:64:4a:ac:e2:df:b6:21:1e:48:20:5d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
        Validity
            Not Before: Jul 26 23:00:53 2026 GMT
            Not After : Jul 27 23:00:53 2026 GMT
        Subject: CN=c8b8d68daa8322f564a62d3ac86209d435401a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:f6:9c:fb:37:8e:b5:86:1b:70:7f:80:b7:
                    80:08:b5:e1:1d:8e:7a:18:90:6c:3c:8c:a2:91:f1:
                    6c:89:59:6d:78:df:63:bb:c3:c7:c4:9c:15:22:b3:
                    1a:54:c1:5b:47:58:09:9e:c1:bb:12:e6:1c:36:55:
                    50:8e:21:0a:98:3e:fe:af:87:41:10:18:c1:b3:1a:
                    7a:53:69:74:b0:92:0f:86:bb:d1:a1:75:79:5e:48:
                    35:87:f4:a8:41:7c:20:43:44:ac:6f:f6:90:8d:ca:
                    4d:6e:31:17:bd:6b:64:14:d3:02:7e:2d:0e:b4:b4:
                    b6:13:30:02:d8:d0:09:9d:9e:68:78:24:73:fe:e0:
                    3b:dd:ab:29:39:22:5f:97:c0:4d:1c:26:92:57:60:
                    b4:02:dc:f4:a4:72:04:37:39:57:c2:98:5d:a8:eb:
                    af:57:b0:59:d8:02:2c:77:c9:88:79:7f:44:f4:c8:
                    44:c2:b4:44:0c:b6:6b:a7:23:22:59:01:a1:96:64:
                    04:10:0e:7e:84:6b:30:b6:78:b9:de:77:38:c5:cc:
                    62:32:4f:26:a0:e6:d9:17:d9:7f:05:af:5a:bb:4b:
                    16:9b:d1:85:19:e4:f1:da:d9:ed:59:31:50:f1:cf:
                    f5:4e:4c:0e:b3:2a:87:03:73:e7:eb:8a:4f:c8:5d:
                    2d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B8:D6:8D:AA:83:22:F5:64:A6:2D:3A:C8:62:09:D4:35:40:1A:3A
            X509v3 Authority Key Identifier:
                keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:4d:76:a1:9a:f8:7d:e3:99:9e:0b:ea:0c:4b:48:e7:80:52:
         14:f6:2f:1b:f7:a8:51:86:e2:16:76:9e:d8:48:78:d8:ea:9a:
         28:4b:24:53:bb:60:52:50:f2:00:8f:13:cb:a0:77:34:31:21:
         0b:23:e1:91:06:98:ba:29:c4:c2:47:c2:d0:37:b8:03:9c:8a:
         3a:1f:04:14:34:d6:97:ca:c9:48:cc:00:74:4a:8d:76:93:4c:
         6b:f8:86:5e:d9:1d:4c:48:fd:ba:51:9a:9c:b1:17:ae:c8:7f:
         d2:e3:74:9c:d2:8d:ed:93:45:5c:31:cc:52:ce:fe:4c:79:1f:
         67:b9:67:33:0b:05:05:d0:7f:76:c9:85:4a:4a:9d:f8:51:b8:
         f7:29:3a:54:f7:1a:41:c5:19:3e:32:fd:56:59:8c:97:4e:ea:
         69:79:74:b7:87:3c:ae:82:35:e6:b5:12:81:1d:34:5e:b6:84:
         ad:58:35:1a:e2:1a:e9:28:33:e6:5d:98:8b:6d:b8:6d:77:1f:
         94:d0:4c:86:90:fe:fc:33:43:57:c6:58:23:8b:a7:c3:26:50:
         8a:0c:0a:85:9c:a6:9f:7e:52:7c:11:0e:2e:b3:7b:1c:11:ce:
         95:f1:ef:c5:e7:c4:33:f4:0f:47:de:e4:bd:94:2b:17:79:68:
         22:3f:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:31 2026 by rpki-client