Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
File:                     1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json)
Hash identifier:          9ucfu0+LA0vjCz9/NjIeN5G2v0WIGe1oJ2DV7uHrjA8=
Subject key identifier:   06:7C:9C:63:F2:2D:A9:27:EE:51:4A:22:F4:FE:A3:CA:44:A7:CB:CE
Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
Certificate issuer:       /CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Certificate serial:       019F916C4E6EF137655602442F2A7B12891C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
Manifest number:          1342
Signing time:             Fri 24 Jul 2026 00:00:21 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:21 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:21 +0000
Files and hashes:         1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: psKAekG2q/mP+OF8yK8O0JPfBU1n2OqQrPgnlKMzRFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:4e:6e:f1:37:65:56:02:44:2f:2a:7b:12:89:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca
        Validity
            Not Before: Jul 24 00:00:21 2026 GMT
            Not After : Jul 25 00:00:21 2026 GMT
        Subject: CN=067c9c63f22da927ee514a22f4fea3ca44a7cbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:da:7c:57:30:44:27:6e:8e:58:d0:ec:c1:
                    eb:64:12:81:f6:b9:78:47:d0:21:99:aa:a8:17:22:
                    f6:b1:da:e7:a1:a5:d1:b1:52:75:09:74:f8:3e:0a:
                    74:a5:9c:f6:2b:db:5c:95:c6:ed:26:a9:28:61:3b:
                    1a:ee:7d:85:c4:74:d2:90:14:45:e0:98:a7:c9:d6:
                    06:1d:34:01:7f:cb:fd:1a:bf:68:f6:96:23:c2:27:
                    bf:8f:22:18:b3:19:6f:4b:9d:78:fe:69:8e:dd:a4:
                    cc:6c:97:bf:5e:56:a5:6e:c3:3c:13:5f:81:d7:24:
                    83:d0:05:fb:0e:57:08:7b:ec:2a:38:a4:06:21:a4:
                    93:b9:7d:7e:e6:08:73:b2:93:4c:9b:1b:ae:4e:82:
                    5a:50:ba:d9:58:2a:0e:5b:cd:d7:b0:87:a5:b0:59:
                    8c:95:51:cf:81:36:91:a1:68:a6:17:66:d5:c6:d8:
                    9b:42:7b:f3:57:5f:6a:aa:c2:bf:ec:82:17:21:be:
                    9a:6a:ae:e3:c6:8f:3c:21:16:5e:ca:53:ac:14:55:
                    d0:af:71:2c:1c:91:ba:66:be:fa:e8:4b:ce:e1:71:
                    24:d3:d6:25:ac:6c:a1:af:b2:cf:c5:aa:96:5c:cc:
                    8a:4e:9b:33:2e:a5:4c:52:18:83:fa:c4:39:02:ea:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7C:9C:63:F2:2D:A9:27:EE:51:4A:22:F4:FE:A3:CA:44:A7:CB:CE
            X509v3 Authority Key Identifier:
                keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:72:9c:79:cd:bb:cf:50:ef:d1:8e:ab:80:da:ec:7b:3a:6e:
         5b:bd:71:df:69:d5:fa:8b:81:42:74:ff:89:22:60:8e:c4:2e:
         26:89:6f:bf:73:f9:9c:f7:03:8a:62:84:2b:12:7b:01:5c:17:
         11:65:3b:c6:b3:cc:fc:b2:15:8f:57:2c:50:7b:23:46:6d:7e:
         82:a3:2c:2d:8d:9a:23:58:88:1a:3b:12:53:bb:55:9a:a0:76:
         95:89:91:4c:89:d7:49:a6:46:a1:67:28:28:07:c0:21:1c:9e:
         06:9a:33:15:73:a8:8a:64:36:35:cb:fb:7c:c3:5c:1b:7e:3f:
         48:23:68:79:c1:e1:24:32:a1:d4:5e:ed:8f:aa:9c:fe:c7:5b:
         76:98:e0:72:6b:31:ac:88:83:5e:6e:1a:55:62:2a:27:ae:d6:
         3d:2a:ed:72:31:a1:34:7e:79:ad:cf:95:cf:95:39:13:e5:08:
         e0:ee:6e:d3:07:8b:0c:70:8c:8f:b5:a0:c2:b9:11:14:77:be:
         40:7e:6a:cf:91:df:22:32:7e:28:37:f4:79:7c:0a:14:6d:33:
         aa:5f:f2:40:59:9a:35:c4:9a:09:72:50:26:94:c0:d7:e7:1b:
         ae:1f:d1:91:34:a6:79:ee:4b:fb:97:03:4f:ba:d7:8e:65:24:
         4f:05:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:38 2026 by rpki-client