Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File:                     7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier:          HrEXR10cijXCNKAD3gi2Z2oGJpXwqLVx9tNqh4Tskoo=
Subject key identifier:   1A:31:24:FC:B5:C6:CC:70:6D:C0:24:5A:57:8E:67:C5:F0:59:B9:D4
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer:       /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial:       019F9059CAE0F1790579B2A8C85B16FC5FB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number:          1725
Signing time:             Thu 23 Jul 2026 19:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:31 +0000
Files and hashes:         1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: HSNl4W8/QDRaNJpdMhkOW1xtJe5cPaBO+UMfJDq0m94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:ca:e0:f1:79:05:79:b2:a8:c8:5b:16:fc:5f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
        Validity
            Not Before: Jul 23 19:00:31 2026 GMT
            Not After : Jul 24 19:00:31 2026 GMT
        Subject: CN=1a3124fcb5c6cc706dc0245a578e67c5f059b9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:2d:45:99:3d:3b:e6:75:1f:89:42:c0:b0:
                    16:01:7b:ee:e7:06:10:e6:6d:27:32:0d:2d:f1:77:
                    cb:f3:cc:e0:c3:d5:7b:3a:8b:30:d5:73:21:1a:ec:
                    96:8a:0a:e8:a2:9d:8c:9d:81:66:ad:25:3f:89:9c:
                    64:ef:d4:78:e5:74:b3:81:aa:d7:cd:dc:e5:f4:bf:
                    7c:eb:4b:72:24:40:4b:c4:46:31:93:4f:2f:05:26:
                    6d:10:f0:0d:f0:59:3d:cc:be:f2:5f:7e:a5:eb:55:
                    a7:94:2a:31:09:f6:91:fe:8a:4c:ed:78:9d:f0:a3:
                    3d:53:f7:0b:6b:8a:05:4a:9f:cc:21:06:9b:cb:21:
                    8a:bc:f5:c4:45:33:3e:b5:ac:46:7a:7b:2e:6b:7c:
                    69:78:77:71:26:36:9d:9e:85:24:6a:cc:4f:b0:a4:
                    55:fb:42:f2:04:9f:24:5a:40:19:91:8c:f5:8b:20:
                    84:1a:27:95:59:88:c9:c3:7e:f9:7e:29:8e:3a:68:
                    77:d1:f1:4c:01:2d:ba:f0:31:b2:01:96:7c:7e:59:
                    8c:94:34:16:ff:ee:f2:ad:e9:d5:fe:54:26:f9:6e:
                    56:e3:90:76:72:b2:51:7a:ee:7b:ed:b4:f1:ce:c1:
                    c2:5c:d2:98:27:55:38:1d:e0:c9:c2:47:8e:c8:a8:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:31:24:FC:B5:C6:CC:70:6D:C0:24:5A:57:8E:67:C5:F0:59:B9:D4
            X509v3 Authority Key Identifier:
                keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:60:e0:fe:ce:13:87:e6:a0:9c:5b:ec:03:03:1b:b9:f6:8a:
         0e:09:d0:89:24:86:1f:87:5c:10:f2:33:d2:7a:aa:e7:f3:c5:
         5b:b9:6f:4a:e3:78:53:d7:49:e2:39:e9:d5:3d:41:da:4b:2a:
         3d:ce:b4:24:1f:03:29:c9:51:4c:61:4b:66:be:94:ec:c0:5b:
         dc:2c:42:41:28:91:47:f8:dd:90:3d:69:83:ac:ad:af:cf:b5:
         01:af:0c:46:2b:be:27:eb:1e:0d:79:8b:25:d1:1d:a1:bd:4c:
         8b:d5:ca:ad:d2:23:06:9c:cb:73:31:93:fd:93:85:35:b4:b4:
         a7:0b:d1:17:08:ec:23:f4:41:21:51:a3:ec:36:21:06:d8:a3:
         22:23:5c:81:08:12:75:76:21:97:59:0f:cc:15:f8:54:66:7c:
         b4:fd:18:1e:b2:fa:d5:19:e0:6c:2c:6c:1c:12:a4:9e:27:46:
         f8:ae:b7:cf:5e:b7:8d:7e:fb:33:94:b0:56:b4:dd:a5:f6:eb:
         92:5a:2f:c5:d4:c2:8d:79:05:94:2a:80:8d:a7:94:ff:50:8a:
         cb:25:a8:f7:22:9d:4a:1e:43:98:31:87:6d:ec:2f:71:90:7d:
         d8:7c:5f:5e:f0:da:39:5e:a1:f1:c2:43:93:67:a1:24:68:7e:
         56:88:8c:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWcrg8XkFebKoyFsW/F+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmQ4ZWFhYjVhZWFjM2NlOTQxZmUxMjU4NTliMzJhMzUy
NTEzNDQwHhcNMjYwNzIzMTkwMDMxWhcNMjYwNzI0MTkwMDMxWjAzMTEwLwYDVQQD
EygxYTMxMjRmY2I1YzZjYzcwNmRjMDI0NWE1NzhlNjdjNWYwNTliOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2ktRZk9O+Z1H4lCwLAWAXvu5wYQ
5m0nMg0t8XfL88zgw9V7Oosw1XMhGuyWigroop2MnYFmrSU/iZxk79R45XSzgarX
zdzl9L9860tyJEBLxEYxk08vBSZtEPAN8Fk9zL7yX36l61WnlCoxCfaR/opM7Xid
8KM9U/cLa4oFSp/MIQabyyGKvPXERTM+taxGensua3xpeHdxJjadnoUkasxPsKRV
+0LyBJ8kWkAZkYz1iyCEGieVWYjJw375fimOOmh30fFMAS268DGyAZZ8flmMlDQW
/+7yrenV/lQm+W5W45B2crJReu577bTxzsHCXNKYJ1U4HeDJwkeOyKh/8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoxJPy1xsxwbcAkWleOZ8XwWbnUMB8GA1UdIwQY
MBaAFOz9jqq1rqw86UH+ElhZsyo1JRNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMt
ZDRiOTBiNmY0NjU5LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMtZDRiOTBiNmY0NjU5
LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2Dg/s4T
h+agnFvsAwMbufaKDgnQiSSGH4dcEPIz0nqq5/PFW7lvSuN4U9dJ4jnp1T1B2ksq
Pc60JB8DKclRTGFLZr6U7MBb3CxCQSiRR/jdkD1pg6ytr8+1Aa8MRiu+J+seDXmL
JdEdob1Mi9XKrdIjBpzLczGT/ZOFNbS0pwvRFwjsI/RBIVGj7DYhBtijIiNcgQgS
dXYhl1kPzBX4VGZ8tP0YHrL61RngbCxsHBKknidG+K63z163jX77M5SwVrTdpfbr
klovxdTCjXkFlCqAjaeU/1CKyyWo9yKdSh5DmDGHbewvcZB92HxfXvDaOV6h8cJD
k2ehJGh+VoiMuw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:44 2026 by rpki-client