Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
File:                     v1axbhD6Re7KFoexaJ_CHxgR53U.mft (raw, json)
Hash identifier:          V9FnMJ3JT8VYlaJYhEnDJm+Jp+IpfNHpLGQAHV2TDzs=
Subject key identifier:   7B:43:13:F3:6C:4E:92:4C:BA:87:1D:D0:D0:E0:2A:B1:C5:F3:85:D1
Authority key identifier: BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
Certificate issuer:       /CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
Certificate serial:       019F841E7A06806CB8B132452A5EC90669FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
Manifest number:          01F0
Signing time:             Tue 21 Jul 2026 10:00:17 +0000
Manifest this update:     Tue 21 Jul 2026 10:00:17 +0000
Manifest next update:     Wed 22 Jul 2026 10:00:17 +0000
Files and hashes:         1: pdd46O_7-gqSCVYzyxen2RSC1dU.roa (hash: GncF/pont0DY3uOfDhLzl1X5Kar3INu8dZi3iu5gRVM=)
                          2: v1axbhD6Re7KFoexaJ_CHxgR53U.crl (hash: 3NLqOkcBm6ObtVZlhzufvOWuEfF1i6Fx6NhhZ5lQYtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:1e:7a:06:80:6c:b8:b1:32:45:2a:5e:c9:06:69:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
        Validity
            Not Before: Jul 21 10:00:17 2026 GMT
            Not After : Jul 22 10:00:17 2026 GMT
        Subject: CN=7b4313f36c4e924cba871dd0d0e02ab1c5f385d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:c6:7f:7f:ff:99:a2:47:1c:a2:13:45:5d:
                    61:86:e9:c8:f1:30:b5:b5:10:fa:86:d6:d1:2f:37:
                    23:f7:3a:62:ae:83:2f:c3:8b:77:ae:7a:b5:5d:37:
                    29:ef:a8:3b:b2:48:56:8c:17:f3:21:cd:c5:d0:5d:
                    32:7c:83:7b:0c:78:9f:1c:bc:7c:38:be:f9:dc:59:
                    98:56:63:35:93:98:8b:6a:a2:bb:4a:fd:c4:13:4a:
                    9f:a4:8b:11:5f:53:c0:14:52:0a:21:8f:dc:4f:d8:
                    31:df:0b:98:6e:a4:e4:c6:2a:64:66:22:30:06:33:
                    22:a8:90:de:77:61:f8:bf:d8:ef:98:32:10:cd:f7:
                    90:57:cf:25:39:64:1d:35:e6:86:7e:0c:fa:0b:7b:
                    09:e4:09:d0:46:d5:e2:ad:6f:6d:1f:a4:11:5d:89:
                    09:53:9f:af:59:e4:74:f0:4e:c7:ea:e4:3a:2b:1f:
                    5f:f3:5a:b4:93:da:5f:eb:53:6d:0a:ee:0b:1e:87:
                    ec:9a:08:6e:49:fa:2f:de:c1:02:ea:d8:4a:3c:3b:
                    6f:40:fe:cb:83:b8:31:ef:40:0b:58:da:07:04:21:
                    ca:24:99:b5:6e:cf:c0:b3:cd:4f:a2:88:96:0a:c1:
                    96:51:23:21:64:32:13:4b:aa:ba:d7:2f:c5:72:b6:
                    c8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:43:13:F3:6C:4E:92:4C:BA:87:1D:D0:D0:E0:2A:B1:C5:F3:85:D1
            X509v3 Authority Key Identifier:
                keyid:BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5b:d1:f3:cd:2b:45:59:5e:be:b2:c2:5c:e5:38:5c:98:95:
         53:d6:cf:bf:25:bf:03:95:2c:57:8a:de:70:a2:c3:84:38:39:
         98:53:57:6e:6e:93:cf:bc:e7:05:c6:e3:cd:8e:fb:e0:41:ea:
         23:40:35:eb:0b:40:b6:94:97:8f:50:77:4a:7d:57:e7:bf:68:
         2a:97:33:1d:7b:79:ce:69:f1:38:3e:34:d9:af:9f:47:4e:fa:
         76:03:46:b5:19:2a:fb:e1:fc:51:ba:03:75:b1:57:0c:e3:3e:
         16:b3:5b:b1:55:24:c0:7d:86:67:02:be:ec:98:30:65:2b:ef:
         8b:51:56:53:9b:d0:e1:8b:01:b2:3c:a7:49:18:31:3a:03:ef:
         db:62:3b:45:d9:d1:27:db:ab:52:a3:3b:3d:f2:ce:8f:b5:aa:
         a7:7b:7b:22:dd:f6:04:ea:24:58:c1:2b:b5:74:48:bf:7f:75:
         a8:00:f9:c7:1f:c8:33:ec:fd:3a:2c:b9:16:53:89:62:f0:38:
         52:04:4a:86:6a:6b:0e:f8:32:62:6d:b0:3c:aa:91:b4:de:f7:
         54:2c:6d:85:12:2f:1b:36:da:9f:13:af:5d:f1:f8:fb:eb:fc:
         21:93:76:d9:1a:9b:03:cc:98:85:b6:78:b0:39:b4:56:47:53:
         f1:e4:ca:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:26:44 2026 by rpki-client