Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File:                     fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier:          Pf32emDPvsg0SdNx5JGVG2Pk0yXQFvEFI4WWIBAGhGo=
Subject key identifier:   A1:CF:52:AB:69:6F:49:66:98:B5:FC:9D:60:A0:A7:F5:8C:B5:13:4C
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer:       /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial:       019FA3AA5D3D8608964525550BBD03936104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number:          06AE
Signing time:             Mon 27 Jul 2026 13:01:18 +0000
Manifest this update:     Mon 27 Jul 2026 13:01:18 +0000
Manifest next update:     Tue 28 Jul 2026 13:01:18 +0000
Files and hashes:         1: d3XCpcyn0uAgmWptpHQjYP7UPLA.roa (hash: ou/aEB+Ce2n+pbDK9cilwO6M3zpwbvFU2gW96y63Kxw=)
                          2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: mIle8OnfiZ0LYVktYCPWbGd+wAaAaoiGfU28A+P1rWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:aa:5d:3d:86:08:96:45:25:55:0b:bd:03:93:61:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
        Validity
            Not Before: Jul 27 13:01:18 2026 GMT
            Not After : Jul 28 13:01:18 2026 GMT
        Subject: CN=a1cf52ab696f496698b5fc9d60a0a7f58cb5134c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:bb:61:6d:aa:f3:6d:69:6c:45:f8:fa:b6:
                    d5:ce:4b:c5:55:6b:31:e3:c9:c0:01:ba:07:ba:f4:
                    ac:87:08:dc:ac:78:bb:39:2b:54:5d:65:f7:a8:6f:
                    16:1d:e6:72:09:3f:42:b5:d6:a1:96:43:00:b2:57:
                    72:21:aa:21:b9:13:46:a6:d3:2e:89:37:7b:6b:aa:
                    5c:11:59:50:55:a8:b1:75:f1:cb:cc:58:9f:cd:00:
                    77:be:9b:28:de:35:4b:27:11:47:e2:62:fb:f3:81:
                    53:dc:d5:f6:c8:67:3a:6e:a2:9d:56:b9:9a:9d:ab:
                    e1:ef:56:dd:0d:fb:84:98:0f:6a:94:6e:5f:5b:3d:
                    5c:01:f9:e4:20:87:70:e0:a7:19:14:17:f1:1f:bd:
                    86:55:25:8b:e0:d4:4a:22:df:f5:c4:f9:47:16:84:
                    ce:1a:82:78:d7:fc:19:d6:79:e6:70:76:85:51:d4:
                    d2:5c:31:ea:b6:b1:6c:d4:71:de:aa:dd:30:c8:c4:
                    9b:3d:ef:26:7d:0d:6a:e8:0f:78:4e:a9:ac:a8:c1:
                    04:39:78:a0:ff:5a:e0:27:9a:ab:1a:73:3c:75:20:
                    49:6d:50:8e:ea:e8:3c:4e:bf:39:6f:62:73:ae:75:
                    3b:ed:f3:78:1e:ff:4e:3e:9e:f8:99:ac:00:56:aa:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CF:52:AB:69:6F:49:66:98:B5:FC:9D:60:A0:A7:F5:8C:B5:13:4C
            X509v3 Authority Key Identifier:
                keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fa:73:e6:fd:33:a3:cd:1d:59:8e:98:55:a4:67:77:d5:22:
         3b:45:0e:ee:63:6c:39:5f:19:19:0f:fd:98:70:12:c0:81:7a:
         d1:8d:13:52:3a:fd:cb:0b:72:e6:1a:8d:ef:6b:a0:73:35:fc:
         11:e6:c1:2e:4b:2f:f2:46:12:f3:26:41:2a:b9:fb:b3:6e:ee:
         6f:81:e6:c1:56:fd:b6:2c:c0:59:79:3d:3e:63:33:b5:e7:e1:
         43:b9:dc:22:a0:fc:e3:e4:3d:29:2f:9c:89:ee:a2:f7:73:2a:
         6d:a7:35:cd:e2:cc:ff:8c:ca:75:a1:a0:c9:a1:81:a0:7a:28:
         3f:d7:f5:d4:8b:bc:0f:97:43:1a:60:e9:f0:6d:74:06:98:54:
         e3:32:51:a4:c4:c6:0c:ad:03:23:0c:f9:bf:54:be:77:6a:81:
         a7:1b:d1:28:e2:f3:91:bc:4c:f4:21:5b:12:d2:a5:c3:1c:59:
         33:e9:f8:b3:54:2b:87:41:41:06:81:61:40:84:9d:37:b6:6e:
         d2:09:45:1a:2d:52:85:5e:ff:06:63:7f:70:45:9d:00:4b:30:
         f9:49:1d:ee:46:6e:a2:e4:02:be:cc:0b:12:37:54:64:88:b5:
         9a:dc:ab:f3:37:a6:af:23:ab:ed:7e:ea:10:34:7b:e9:d8:28:
         c0:a4:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:51:26 2026 by rpki-client