Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File:                     9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier:          aX9zm4+E1aXxRz0q0YL0POQOYdyH9QZKR1jcrPk78PE=
Subject key identifier:   C5:14:B1:F3:6D:66:B9:F2:2A:03:0D:C3:97:66:F7:4B:8F:F3:40:25
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer:       /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial:       019F8F7E40376BB163FFDA8746FC10108AB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number:          19C2
Signing time:             Thu 23 Jul 2026 15:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:43 +0000
Files and hashes:         1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: 2LbqC/o6hJ+0HNs6HjCkC4ELDJBt5lz05ZMLHgxP8GQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:40:37:6b:b1:63:ff:da:87:46:fc:10:10:8a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
        Validity
            Not Before: Jul 23 15:00:43 2026 GMT
            Not After : Jul 24 15:00:43 2026 GMT
        Subject: CN=c514b1f36d66b9f22a030dc39766f74b8ff34025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:fe:ff:55:58:6a:73:d4:e8:0a:90:36:d2:
                    6a:89:82:8f:38:d4:a3:88:f8:5a:2f:3d:4a:7b:83:
                    a1:94:a8:b9:b6:cd:13:14:81:78:4d:30:5b:22:82:
                    54:3b:f0:03:10:2b:32:64:4f:7e:e8:05:a9:ab:2f:
                    df:e6:69:b5:15:55:9d:d8:4b:bc:35:28:37:e8:bd:
                    65:48:fe:5a:6e:e9:50:fb:ea:5e:bf:81:1c:33:5f:
                    45:09:80:16:cd:7b:a2:74:83:6a:4d:6c:c2:38:c3:
                    63:be:a0:3f:a4:34:ad:f1:bd:15:53:2f:4a:c2:c1:
                    e8:a4:76:7a:3b:75:e8:84:37:b6:4b:05:e5:12:76:
                    6e:c8:39:4f:2a:04:b0:05:f8:74:b2:a4:19:21:9e:
                    f9:cf:55:45:68:41:f6:82:a1:ca:70:6c:66:0c:53:
                    e7:6e:f4:a2:e5:bb:38:48:05:49:82:69:14:79:4d:
                    74:e6:14:71:fd:a1:5c:a0:d9:76:b1:60:ef:f4:c1:
                    77:0c:08:f8:4e:72:47:9f:66:61:14:90:fc:f8:a3:
                    e8:59:9a:c6:a1:5d:08:08:55:80:79:d8:89:1d:e2:
                    8b:f9:4f:53:08:30:a7:4a:80:2f:32:8f:4e:2f:7f:
                    52:98:5d:93:9f:e9:fc:d9:b2:7d:7a:4d:54:70:17:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:14:B1:F3:6D:66:B9:F2:2A:03:0D:C3:97:66:F7:4B:8F:F3:40:25
            X509v3 Authority Key Identifier:
                keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:52:44:4f:f4:99:a6:71:d7:6d:24:da:9a:3b:9d:25:10:e8:
         c1:d9:4a:94:b5:6f:a4:b9:1b:0f:8b:27:5a:18:e1:7d:8f:6d:
         65:f3:11:4d:f6:b6:18:30:85:4f:fe:29:6c:f5:b9:e7:29:c9:
         40:75:cd:06:39:38:a7:1c:6c:c0:53:7a:30:65:6d:0b:b4:03:
         09:ab:3b:64:0b:63:4a:b7:e1:bb:3a:1d:ad:36:06:2f:fa:99:
         4b:ab:d4:69:7c:39:a6:7d:45:3e:d9:87:2a:2f:1e:6a:ad:f9:
         77:6b:c4:f1:1f:68:56:6b:21:fe:1f:76:a8:ba:dc:2d:b5:17:
         d6:5a:55:43:ad:e3:74:ac:48:bf:b7:33:28:ea:48:1a:36:6c:
         63:a0:b8:27:05:9e:f1:2e:40:a9:f8:4d:7f:d3:91:c7:cf:cc:
         56:53:5b:07:fc:cd:ac:f9:6c:f4:73:8d:cf:54:7c:a9:5e:6e:
         05:31:23:90:be:ca:a6:7f:35:16:5b:75:85:9d:6c:35:8d:b9:
         92:88:65:81:fa:88:e3:bf:ae:c1:95:6e:61:2d:ee:c3:08:57:
         92:f8:5d:1d:7a:bc:0e:b7:48:90:12:ba:89:c0:b8:80:4b:dd:
         58:f8:23:06:40:bf:74:e7:47:13:d1:e7:e4:ee:fc:49:39:70:
         77:f3:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:29:16 2026 by rpki-client