Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File:                     g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier:          jGq/nklf7+Ansz00wUvwc41hvfoT334WjKbOK7CEags=
Subject key identifier:   F5:CB:0E:7B:FD:4A:62:0F:9B:89:AF:B3:09:BF:6A:94:73:87:C7:3B
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer:       /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial:       019EFB3A47F80588B6410D01C9BF4282D01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number:          0FE7
Signing time:             Wed 24 Jun 2026 20:02:40 +0000
Manifest this update:     Wed 24 Jun 2026 20:02:40 +0000
Manifest next update:     Thu 25 Jun 2026 20:02:40 +0000
Files and hashes:         1: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: /jl2jzzaIJ9sX92h7NODiqW/3VqgGDSylFH4atLup/I=)
                          2: wimRgdCrrR4TvVjD45kak059z3k.roa (hash: a5C05EHm2JJFNFLb2g2uTQzLs6i6/Ga5rEL4Ya3/5kA=)
                          3: xkBGMTnH9dIUv5aeR6a2PC8pSMI.roa (hash: n4jn6g+/sKr9SjKht58rDpi14/4dvnS/2o8klkQ9iBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 14:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:3a:47:f8:05:88:b6:41:0d:01:c9:bf:42:82:d0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
        Validity
            Not Before: Jun 24 20:02:40 2026 GMT
            Not After : Jun 25 20:02:40 2026 GMT
        Subject: CN=f5cb0e7bfd4a620f9b89afb309bf6a947387c73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ee:cd:4f:1c:1b:59:4b:41:1c:d7:be:c3:9e:
                    73:18:61:53:31:6c:02:96:5e:d9:ba:23:6d:e8:33:
                    45:98:f1:fc:b8:0a:ff:70:e3:10:b7:f8:2e:82:22:
                    6d:9c:13:2c:5c:8c:c5:1b:6e:16:74:6a:01:45:02:
                    40:b8:b1:7d:b3:88:6e:ed:8e:c2:9b:91:7d:f8:38:
                    bf:7c:2a:a2:b7:be:af:91:d6:ac:da:bb:a1:03:cb:
                    45:de:b1:ae:52:12:12:76:0b:63:4c:8c:32:23:48:
                    09:74:ce:98:ac:17:83:2f:86:5e:e4:fb:fe:45:5f:
                    2e:5e:c4:93:f2:05:0e:93:5e:70:5e:8b:a7:9f:6c:
                    23:15:63:3f:47:b5:1f:f5:95:72:03:46:20:a4:bd:
                    0b:e3:df:2f:c5:88:7e:c8:93:e8:74:ce:1c:23:fe:
                    43:ee:67:63:0b:04:ed:d8:af:f3:34:ae:cf:ed:72:
                    07:85:0b:45:91:11:11:44:4d:72:27:f6:63:fd:0f:
                    1a:3b:ae:3d:23:a9:ee:11:01:a1:89:63:25:8c:6b:
                    ee:02:33:55:93:3a:79:41:df:0f:76:83:cb:31:d5:
                    74:58:94:0d:00:ab:b9:68:28:df:ea:df:8f:6f:92:
                    2d:55:d0:21:8c:0b:82:65:2b:ff:ce:e4:7f:05:1e:
                    a7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CB:0E:7B:FD:4A:62:0F:9B:89:AF:B3:09:BF:6A:94:73:87:C7:3B
            X509v3 Authority Key Identifier:
                keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2c:b0:4e:fb:40:28:7b:bc:c6:91:57:3f:92:0c:fc:84:71:
         c8:b9:4d:85:d4:0d:bf:e3:5d:e9:ee:5b:48:ef:d7:50:ec:70:
         ce:91:5b:89:1a:a5:6b:82:48:82:9a:0c:9e:e3:1b:d1:5c:a1:
         b3:ea:36:8b:c0:7e:ad:ba:db:96:8a:24:27:fd:72:5f:7c:4f:
         34:be:8e:4f:5c:d2:8f:cb:c9:5a:ea:20:c8:4b:09:3d:0d:b4:
         16:50:3c:ba:dd:33:66:8e:2c:97:bc:aa:44:30:78:23:57:33:
         a3:4e:3b:ef:0e:58:b2:9b:2b:95:65:71:da:e3:1d:54:51:5b:
         7b:d2:10:a3:89:3a:21:d4:47:af:0f:24:0e:85:44:04:9c:a2:
         30:13:92:90:dd:bf:8c:ab:ca:a8:64:2e:71:b1:d8:28:75:91:
         c1:e0:b8:71:4d:10:8e:c2:f4:fe:83:65:43:87:32:8c:d1:5c:
         d3:57:e9:f2:5b:d7:6f:b2:ae:48:97:a5:04:2b:b8:2d:bd:9b:
         ba:d6:6d:45:b8:9b:5c:37:90:6c:60:ab:e7:45:59:64:5a:88:
         15:a7:82:ab:e6:76:14:21:e4:b5:09:40:fd:40:65:84:09:a1:
         e6:8a:13:5a:03:e9:f9:30:0b:a4:81:e4:95:01:2a:e1:04:a5:
         f4:b7:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:18:30 2026 by rpki-client