Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File:                     FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier:          duO+7GVRD535pbio2xRshvBnUFPZTWO1dwOSwExsb2E=
Subject key identifier:   C4:75:05:08:30:50:1C:DE:33:9C:69:97:DD:29:35:E3:5F:1F:EF:83
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer:       /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial:       019FB49E24FEF031D0EBC268EEACDE87EB33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number:          06E0
Signing time:             Thu 30 Jul 2026 20:01:30 +0000
Manifest this update:     Thu 30 Jul 2026 20:01:30 +0000
Manifest next update:     Fri 31 Jul 2026 20:01:30 +0000
Files and hashes:         1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: fKxiqxFfezS5IBpQjz2MYKTBdSIKmuAUdPE+EkyxBgs=)
                          2: Zrn84WYyrZEtX6PAfEnPVWtayZU.roa (hash: jSh/SHE78mPArHOipqPD4fmSLw8Ki+Bi/6/NXvqBAjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 31 Jul 2026 20:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b4:9e:24:fe:f0:31:d0:eb:c2:68:ee:ac:de:87:eb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
        Validity
            Not Before: Jul 30 20:01:30 2026 GMT
            Not After : Jul 31 20:01:30 2026 GMT
        Subject: CN=c475050830501cde339c6997dd2935e35f1fef83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:ae:c5:96:59:d2:ce:a7:24:ae:1a:a2:93:
                    15:82:ff:31:d9:60:26:d4:ac:71:ec:e3:f0:15:ce:
                    81:62:20:08:c3:0c:5f:cf:d1:42:bd:56:99:16:fa:
                    63:2d:55:d4:62:63:b5:e6:eb:9f:3c:69:88:90:b2:
                    4c:51:69:96:99:35:74:c6:3e:c5:f4:7f:bb:5b:fd:
                    86:c7:ff:38:f8:b8:18:71:62:d4:46:c0:7a:57:1e:
                    5f:18:a2:b5:11:9a:f7:5f:37:92:a6:ad:55:07:71:
                    7d:b4:fb:62:a2:71:1b:5c:ac:1d:94:90:36:19:fe:
                    49:17:3e:96:76:07:12:e4:9d:6f:d2:37:b1:09:31:
                    e7:2b:be:70:36:1e:47:d6:85:3c:fc:0d:e0:25:f7:
                    ff:8d:d8:94:33:9b:05:64:fd:07:a9:c9:18:9e:f6:
                    88:7c:ba:0b:2d:ce:89:17:c0:d5:34:2e:87:b9:b6:
                    b8:f9:03:47:81:36:6d:98:bb:0b:5e:2d:a7:56:20:
                    9c:33:b3:6f:ba:63:c8:f8:c6:30:4d:ad:96:c2:8a:
                    ce:14:ea:87:7c:84:c4:9b:ad:c7:65:03:fa:3e:64:
                    6d:28:a4:e1:1d:6c:72:53:c9:9f:46:e4:5d:cf:d3:
                    59:1e:6f:14:30:ef:62:89:58:b3:e6:9f:1f:26:29:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:75:05:08:30:50:1C:DE:33:9C:69:97:DD:29:35:E3:5F:1F:EF:83
            X509v3 Authority Key Identifier:
                keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f2:fe:e6:7b:46:c0:2e:81:bf:f5:55:7d:d0:c4:39:4a:83:
         54:f1:ec:29:03:be:7a:22:ac:c5:d0:ff:d7:cb:52:1e:06:12:
         3a:20:46:9a:22:a6:2a:45:4d:68:8b:a7:53:dd:41:01:ef:09:
         05:8e:5c:4e:2c:7c:b2:76:9d:50:4e:99:bd:09:32:6f:f6:da:
         8d:c5:e0:5a:96:37:ca:51:aa:42:31:db:6a:34:79:f9:d5:6d:
         d6:8c:ed:01:b8:4f:2a:a8:83:0e:76:fd:5c:81:83:6e:ac:2b:
         4a:89:8c:49:bc:64:43:96:c0:1d:8f:08:0d:0a:35:fb:07:98:
         7d:15:15:84:fe:c0:35:00:f4:6b:83:26:e0:23:bf:35:77:0d:
         27:b3:ce:28:34:68:2a:e1:a8:c9:84:a3:64:1f:0e:1a:c1:9d:
         8a:57:d9:05:26:e7:33:2c:d6:c7:97:53:d4:94:b2:f4:18:73:
         9a:2c:ba:66:56:fb:d2:c6:62:f0:00:48:68:d0:b1:80:84:79:
         74:3e:a3:e4:7b:b7:aa:be:68:ee:db:58:3b:99:6e:37:42:a4:
         5b:33:cc:55:50:3e:b1:ba:17:4a:6e:e4:78:d6:41:e9:3f:b8:
         5d:77:8f:8e:60:51:08:8c:6b:63:48:98:75:02:a0:01:8f:40:
         60:f1:a3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 01:31:36 2026 by rpki-client