Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File:                     B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier:          mdSxvR8RjqYgkNxLoZM3vFsASAg9eK6Uz/LuLcsUH28=
Subject key identifier:   3B:82:73:36:95:AA:57:F8:D0:06:C5:31:5F:93:5F:56:21:68:96:ED
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer:       /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial:       019F860CCFBE123204AC362A4A82984DEEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number:          1631
Signing time:             Tue 21 Jul 2026 19:00:14 +0000
Manifest this update:     Tue 21 Jul 2026 19:00:14 +0000
Manifest next update:     Wed 22 Jul 2026 19:00:14 +0000
Files and hashes:         1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: 1Yt0/LGELs/BifhulcqlDbIYWQ5zT1X1Yk1QqM5HvQ4=)
                          2: UCT9k6BaPPeSMXxJ43Eo6nZzYW0.roa (hash: H/J8BuCj54OjW0xk7YjG+ivFyPL962N+uW8FPOndTZI=)
                          3: _TmmkOapg5NWp5skKiNnYl4USlg.roa (hash: Ulpzhuvm7D4wY1P9Md05o4W8SIvbcVV+X0rM6EDxDjc=)
                          4: ryiFWbpMuqXbHhTaiUR9Bmksn3I.roa (hash: 4enRDEIE99ZnVUOrH1uVQZLMyVdi+VhTW5RGUgkPXEs=)
                          5: szJDTDjk11lPCTowxUuTkr1LOjA.roa (hash: tZ3E5yp9ifwL77hdiUkOobqFo6CYXkARUapRpbadEZc=)
                          6: tVIvfnxeNd5Q4fCCoef2VPaercM.roa (hash: UsZ5qTmb76xuEbD3sjS7Uzqq6fgKmtSM905Jk8/9DNA=)
                          7: wRtbNPKwzn29lLHL-XgfTc7v1-E.roa (hash: HKr7T3FnocuYvThL/hQV2CDARcO253MaFTxSFktB4b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 19:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:0c:cf:be:12:32:04:ac:36:2a:4a:82:98:4d:ee:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
        Validity
            Not Before: Jul 21 19:00:14 2026 GMT
            Not After : Jul 22 19:00:14 2026 GMT
        Subject: CN=3b82733695aa57f8d006c5315f935f56216896ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:7e:cb:3a:15:cb:8d:2b:b1:d7:a3:9a:f9:
                    85:e8:13:13:53:50:d8:30:af:59:66:62:45:a4:14:
                    fc:4a:5c:1d:01:91:48:5b:7c:c1:ec:78:e7:8c:33:
                    fa:4e:0c:65:74:b5:ca:a6:47:63:f3:af:51:58:6e:
                    b4:8e:b9:56:2d:17:f6:fd:b3:5a:16:60:7b:9a:e0:
                    fa:b0:ac:0e:69:7f:a6:2c:1c:05:85:50:8f:7d:72:
                    c0:3a:ef:2f:da:fb:86:21:dc:bf:28:d5:5e:3f:7c:
                    2b:62:47:87:70:35:bf:52:1e:93:c4:b8:b0:b1:23:
                    d4:c3:84:07:aa:a2:df:2e:9e:85:7b:7b:d0:3f:0e:
                    30:0f:b1:5c:39:af:97:5b:0e:c0:97:51:0d:52:9b:
                    9c:b9:f5:80:dd:c6:fa:83:d4:0c:76:d9:97:5c:04:
                    81:a4:0d:b8:5d:f8:46:b0:9d:ef:b6:99:d4:15:6d:
                    a0:85:c5:c2:c6:99:5a:25:29:54:42:eb:2f:5c:71:
                    e0:54:73:bf:c5:e3:32:40:3d:12:81:20:d7:b3:bb:
                    4f:92:c8:95:26:82:f9:78:ac:74:32:67:78:4d:27:
                    3c:46:6d:98:97:59:9d:a0:1d:4b:39:3e:58:be:17:
                    5e:78:0a:db:96:cc:7b:70:cc:ae:fa:18:40:5a:41:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:82:73:36:95:AA:57:F8:D0:06:C5:31:5F:93:5F:56:21:68:96:ED
            X509v3 Authority Key Identifier:
                keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:d8:cb:b7:ab:95:0b:0c:b6:cb:4e:cb:f2:98:e8:e1:23:
         e7:fd:93:a8:58:fa:34:a7:99:d3:2f:79:54:f5:ad:d1:ff:b1:
         71:31:cf:e9:27:30:72:54:22:cf:9e:db:bb:26:57:84:73:f5:
         b8:5a:37:0b:a3:6e:ea:53:ca:2b:26:3e:25:1a:b0:9a:f4:ae:
         b1:e3:ee:36:41:c0:87:f4:a8:03:3f:5c:d2:ab:80:6b:e8:eb:
         e7:83:e1:82:c4:22:1b:80:e9:e9:0e:9b:80:78:79:12:1b:3a:
         dc:ad:d2:8d:99:e9:b2:1b:a5:a2:9d:57:4e:cc:e8:13:4e:26:
         1a:18:f4:a9:d7:0c:fc:e5:59:7a:b9:2b:71:86:ce:9b:b6:3c:
         ff:2c:6d:14:93:8c:c3:2b:d8:61:37:e9:6c:43:f8:4d:8a:9b:
         73:4b:10:6f:51:76:72:64:84:82:fd:34:78:a2:c7:60:5d:83:
         aa:c8:f4:39:8b:8c:e1:73:8d:92:39:8a:ba:f9:35:48:49:51:
         bc:0f:34:4d:cd:98:39:86:1a:8f:38:87:2d:c2:d5:d2:65:b8:
         af:52:6c:be:3a:57:cd:64:3a:83:b7:bf:8b:4f:54:f7:e7:57:
         22:c2:73:d4:57:f5:f3:07:71:52:d0:5e:0f:e3:36:8d:33:21:
         86:d0:a9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:04:05 2026 by rpki-client