Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File:                     FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier:          fT0vlpKyjp04YBH6zUBI65V/KbY+U9UbEsw1uc94i4M=
Subject key identifier:   7E:0C:8E:1F:92:B6:D1:85:D6:B4:CA:B9:41:2E:D7:FF:D0:16:7D:E1
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer:       /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial:       019FA372EFC519B88D3F99638D2913974F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number:          1515
Signing time:             Mon 27 Jul 2026 12:00:46 +0000
Manifest this update:     Mon 27 Jul 2026 12:00:46 +0000
Manifest next update:     Tue 28 Jul 2026 12:00:46 +0000
Files and hashes:         1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: anuFTp3GbCj360lzD//8qFxaNTLBoPwrEN2LMNKqiM0=)
                          2: HW9BEyLLal7OfEp_A46sqT8pKZI.roa (hash: 6gY+Oh6ZWBmv2AAZJTbOLnfk6tGnOt3EIE4RNOngnwE=)
                          3: xHXYIM9aAisCY-mM5efUJdAUuEs.roa (hash: u+GmdL8eno8aJmCmvMCfKfQZ1GhLAd0ROGdlLYM/mfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:72:ef:c5:19:b8:8d:3f:99:63:8d:29:13:97:4f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
        Validity
            Not Before: Jul 27 12:00:46 2026 GMT
            Not After : Jul 28 12:00:46 2026 GMT
        Subject: CN=7e0c8e1f92b6d185d6b4cab9412ed7ffd0167de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:92:a9:8a:23:1a:04:e4:f9:78:78:25:d6:
                    56:fc:38:06:a7:94:0c:f3:a5:f3:f2:52:f1:bc:5e:
                    33:c4:90:c2:c0:61:2c:7a:37:c8:6e:90:15:ba:9c:
                    21:80:50:9d:f7:8b:0b:78:fd:69:e5:06:ee:02:98:
                    82:b1:60:6a:ed:1d:6c:5e:16:3d:21:1c:dd:2f:f9:
                    45:ed:5b:54:8a:63:24:37:79:e6:4a:66:0c:d6:8a:
                    98:33:78:54:54:55:a6:05:78:aa:80:a7:9d:e9:e5:
                    23:49:78:c7:68:a3:c2:eb:4b:11:6d:c0:d8:c1:80:
                    84:77:0d:74:93:90:b6:68:7e:3b:50:cc:01:d6:6b:
                    9e:69:52:af:15:39:eb:88:07:7d:6f:57:3d:7d:38:
                    3d:c3:1a:f8:6b:b3:10:0a:57:bd:d0:2c:66:4b:61:
                    ad:85:37:92:42:da:b2:6d:d2:0c:ba:c2:55:f0:06:
                    a8:f5:72:db:73:e0:7a:7e:75:14:30:97:c9:f0:8b:
                    da:66:87:f7:f8:bf:75:5a:68:65:78:00:34:fa:aa:
                    8d:fb:86:32:c0:9b:21:87:fe:5a:90:b0:0f:70:e5:
                    cc:1a:78:c2:bd:f0:73:06:a0:74:1e:22:f7:d4:e6:
                    8e:5d:86:65:c1:c2:21:92:ae:21:57:dc:9a:13:71:
                    0a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0C:8E:1F:92:B6:D1:85:D6:B4:CA:B9:41:2E:D7:FF:D0:16:7D:E1
            X509v3 Authority Key Identifier:
                keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e7:79:ec:31:9e:e6:85:9d:15:da:1c:6c:d7:4d:a8:d0:9b:
         0b:19:f3:14:91:72:27:09:f8:db:71:7d:9a:eb:d7:a5:07:87:
         15:98:eb:7d:fe:b0:aa:4b:4d:14:a0:99:9e:0d:80:f7:4b:38:
         ac:1e:71:3f:f8:fb:f0:96:b1:c6:75:19:d2:72:2f:f7:cf:e8:
         c7:a1:91:42:9a:8c:59:65:17:f8:aa:09:a1:e0:d8:b1:fb:1e:
         2f:3f:16:ac:9f:bc:98:40:e4:d7:d2:5e:24:00:fd:62:46:95:
         47:17:5a:49:4e:fa:72:ab:93:1a:ba:85:f3:5a:c7:dd:61:8d:
         c5:5a:29:35:50:46:10:4c:66:e6:ea:3f:fe:4b:c2:88:b0:97:
         d2:ab:61:64:5f:a1:ff:dc:63:13:c0:76:ee:6b:d8:ff:bb:7d:
         55:0f:58:9f:08:ae:77:21:6f:0f:f4:5a:55:b0:b8:b0:6d:65:
         d5:2b:41:99:8e:21:21:e4:30:1a:10:99:18:02:9f:a2:cb:bc:
         53:6f:ec:de:8e:aa:ea:bb:dc:18:e8:a5:4a:b3:70:32:2d:23:
         0b:b9:de:b0:85:f2:8e:f3:57:54:45:71:3c:6c:f5:d8:5d:54:
         03:e6:1d:4c:6b:62:13:4e:ed:41:75:2c:e1:1f:0a:e9:1d:38:
         86:35:75:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:50:18 2026 by rpki-client