Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
File:                     sVS0YRuM6ChydbxHppr6N4tBQL8.mft (raw, json)
Hash identifier:          XLrpk5/FzfGtsrOWQ6UmSRc2zXhyNUXrvCEfxATKsUw=
Subject key identifier:   50:E6:58:0D:7C:44:AE:A5:A4:6F:63:88:5B:F6:92:C0:3A:1F:56:15
Authority key identifier: B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
Certificate issuer:       /CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Certificate serial:       019F9EBAB8628EEADEE6D81607AFECBAC0E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
Manifest number:          0650
Signing time:             Sun 26 Jul 2026 14:01:04 +0000
Manifest this update:     Sun 26 Jul 2026 14:01:04 +0000
Manifest next update:     Mon 27 Jul 2026 14:01:04 +0000
Files and hashes:         1: ZgmGF0xyruYag3oLwVeIssRnGzA.roa (hash: ZGrhqDqWep/rissiscgLJfcqAEbcRvWxXS2En1y9Bvw=)
                          2: sVS0YRuM6ChydbxHppr6N4tBQL8.crl (hash: hQ0qElEguIfVYTzjxGADPqApFcGRmtYl32deqVDJfHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:ba:b8:62:8e:ea:de:e6:d8:16:07:af:ec:ba:c0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b154b4611b8ce8287275bc47a69afa378b4140bf
        Validity
            Not Before: Jul 26 14:01:04 2026 GMT
            Not After : Jul 27 14:01:04 2026 GMT
        Subject: CN=50e6580d7c44aea5a46f63885bf692c03a1f5615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:c1:8c:74:ac:ca:25:86:a4:9b:5d:07:90:
                    2c:93:d0:61:d1:e8:cc:54:b1:2a:7d:ae:ba:97:7f:
                    c1:bb:5e:c5:7a:19:cb:eb:86:14:fd:61:c8:c0:06:
                    2e:e6:85:01:4f:4b:ae:9f:31:29:14:54:6f:d9:8a:
                    0f:7a:29:80:61:6e:29:69:f2:ef:a4:47:37:67:c5:
                    cc:97:cb:7b:ae:c5:4d:88:67:49:a7:ce:da:39:eb:
                    fc:9f:70:b4:82:f6:95:a8:1e:ad:7a:f2:28:b7:89:
                    cf:0f:5e:27:01:4f:25:93:d6:a5:db:9d:bb:0e:df:
                    be:88:3a:26:1b:c4:3d:f8:58:7f:18:dc:b6:42:32:
                    e7:b1:ec:db:ab:81:75:9c:83:94:0a:96:b4:19:61:
                    42:05:9c:52:b1:12:33:17:ec:33:f2:88:6f:d9:36:
                    57:ff:83:be:53:ac:5e:d1:d8:90:85:e5:aa:7f:03:
                    97:c1:78:1d:63:89:fc:c4:53:b4:cd:49:9c:d5:c6:
                    5d:41:17:8a:93:50:9c:06:fa:66:83:52:a1:0b:af:
                    c4:c1:cf:ab:b7:0b:10:84:c0:fa:01:db:4c:9f:e6:
                    fc:5b:17:24:f0:c0:5e:59:a8:24:2e:fe:dd:99:0a:
                    aa:b2:ef:d5:fe:90:6e:c7:cb:ed:56:e0:34:29:38:
                    95:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E6:58:0D:7C:44:AE:A5:A4:6F:63:88:5B:F6:92:C0:3A:1F:56:15
            X509v3 Authority Key Identifier:
                keyid:B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:66:69:d7:b6:0a:fb:f7:5f:d7:f3:9b:6b:dc:99:90:a4:5e:
         2d:b1:43:e1:86:40:a6:50:8e:3d:7e:07:bf:0f:03:9f:f2:59:
         0e:75:9f:36:44:e1:59:4b:0e:a7:73:b1:10:89:94:78:13:b4:
         6a:2e:f6:7f:28:37:1f:2d:ad:58:cd:23:a0:14:a6:15:3c:5c:
         78:36:23:43:5c:3d:6a:b7:a2:01:7f:9f:73:44:3c:60:ce:62:
         fa:e7:a8:c6:6e:6f:d1:5d:3e:ae:06:0e:e0:63:f8:ea:4b:6a:
         2a:15:83:72:b4:5f:3e:10:ab:bd:6f:c2:36:9c:08:cc:ff:df:
         46:fe:99:ef:35:a3:31:6c:dc:f0:5b:9c:d6:87:c1:80:b0:6c:
         7d:d5:b9:da:7c:7a:9d:b2:22:ed:26:88:7c:63:eb:50:67:47:
         d7:e3:3f:ef:a9:0d:25:ba:94:ae:14:47:7d:10:dc:28:fe:38:
         04:d6:5f:45:83:bd:6e:a2:79:ed:2e:18:87:a7:da:5f:d3:15:
         35:b4:3d:27:2f:c4:a7:27:5a:52:ec:c9:a9:40:9f:b3:64:21:
         9e:55:a8:98:fe:47:1f:d3:67:81:bd:fb:00:2a:e3:a4:56:ad:
         53:ec:8d:27:06:89:ba:2b:d6:1c:f0:54:1f:63:b5:b7:9b:7f:
         f2:43:20:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:42:36 2026 by rpki-client