Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File:                     1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier:          HbFuaN4Ci1zdbodGT+2fhJmnBeWG+h3bmHcViBoaY9Y=
Subject key identifier:   CC:CC:87:02:E2:C6:98:B9:AE:B3:6E:8C:5D:60:09:85:1D:5D:80:42
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer:       /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial:       019FDB3DD052D4335A4EFFD3C35C9D6CAB46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number:          03F7
Signing time:             Fri 07 Aug 2026 08:01:29 +0000
Manifest this update:     Fri 07 Aug 2026 08:01:29 +0000
Manifest next update:     Sat 08 Aug 2026 08:01:29 +0000
Files and hashes:         1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: Vf9kniJOILxJbCrIsh9w65RM3RYV0aE4cGwa9tABJp0=)
                          2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:db:3d:d0:52:d4:33:5a:4e:ff:d3:c3:5c:9d:6c:ab:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
        Validity
            Not Before: Aug  7 08:01:29 2026 GMT
            Not After : Aug  8 08:01:29 2026 GMT
        Subject: CN=cccc8702e2c698b9aeb36e8c5d6009851d5d8042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:81:93:6b:a0:33:2f:dc:89:76:81:c9:a7:81:
                    09:c7:66:34:83:57:ee:32:a5:80:8d:50:51:03:38:
                    0d:5c:9c:3d:cd:cc:b2:cd:e6:c3:9a:c8:d0:c9:71:
                    32:e5:8e:b3:c1:f2:99:03:45:04:36:08:90:cf:85:
                    ce:08:0b:8b:cb:95:d9:02:11:6c:74:3d:cc:51:16:
                    3b:ec:49:f7:69:76:30:8d:85:9f:b1:0f:b0:27:a1:
                    6c:c7:3e:ab:02:42:f8:e4:18:51:ff:97:7d:7c:fb:
                    56:85:2c:d3:d6:88:ac:e8:f5:60:73:5c:50:da:01:
                    04:b9:52:00:33:fa:fe:13:25:d5:a3:c5:ec:da:83:
                    96:36:f8:e7:e5:18:d7:b9:ee:da:c3:aa:fb:8f:0c:
                    30:80:89:a5:68:9a:6b:da:71:a9:65:9d:6a:4e:e0:
                    16:a9:d6:c0:61:c8:19:d5:7d:03:67:22:a0:73:e2:
                    8d:84:4e:8c:83:d0:2a:2b:f1:d2:28:45:d7:6c:70:
                    77:43:30:b9:fa:a2:bb:d5:4c:60:5f:10:e8:aa:98:
                    4a:4d:96:96:88:8e:17:65:80:5a:17:f3:6d:f1:a2:
                    c5:d5:83:a9:31:87:d3:7e:aa:b1:10:77:23:27:b9:
                    9e:59:f5:70:49:6a:54:b6:28:69:46:2d:cf:bf:24:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CC:87:02:E2:C6:98:B9:AE:B3:6E:8C:5D:60:09:85:1D:5D:80:42
            X509v3 Authority Key Identifier:
                keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:32:f1:db:43:c3:3d:18:5f:85:db:98:bb:34:30:7f:12:2e:
         da:86:39:11:95:67:f9:64:25:70:bf:94:3e:1e:d6:b0:0c:eb:
         c5:8c:b5:79:f7:19:61:03:ac:73:b4:48:83:50:f3:b8:e1:9d:
         b8:57:2c:1e:70:f3:b7:2c:af:2c:d5:4a:4f:ad:ca:36:61:c2:
         78:93:46:50:f8:af:71:02:1a:e8:06:40:d3:c4:1a:0b:93:ce:
         3e:8c:fb:99:c4:e9:7d:f0:3a:26:6d:1d:e2:6e:17:62:d6:35:
         f3:29:17:b0:d0:10:7e:fc:2e:60:28:eb:f6:f4:b9:f0:93:7e:
         5e:f3:84:00:62:76:66:c5:39:f0:56:d8:37:b3:46:c4:e1:8a:
         a8:e2:91:9d:3b:0f:7d:52:e6:94:39:66:35:10:dd:3a:4d:fe:
         cb:2b:c0:aa:f9:d7:52:36:bf:3c:72:af:07:b3:fa:78:d1:7c:
         29:b4:84:4f:e5:dc:c0:54:20:e7:96:da:40:24:9b:92:f1:45:
         8c:35:e4:5b:cc:25:8e:6c:fb:d6:eb:5f:d2:b6:34:d3:35:4c:
         a4:c1:5a:b4:c7:fc:bf:c7:ed:dc:6a:82:ff:08:77:94:9b:5e:
         ea:69:60:f9:3b:0b:b3:15:54:c3:b0:5e:25:e3:9a:ca:7c:2d:
         58:f0:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 11:38:53 2026 by rpki-client