Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft
File:                     7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft (raw, json)
Hash identifier:          3xtvzRsp6vnF3yvlTkmDZ6LmQGBMfd7m4bGDgLNaBaI=
Subject key identifier:   47:2A:1E:27:92:05:93:4E:0F:2C:15:F4:44:BB:C3:D0:EF:B5:C1:C9
Authority key identifier: EC:82:C3:0F:96:4F:F2:AF:D0:CF:08:F3:8C:8B:27:4D:F2:27:14:F8
Certificate issuer:       /CN=ec82c30f964ff2afd0cf08f38c8b274df22714f8
Certificate serial:       019F91DB308A979CF1B39D2DE5A6C934250B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft
Manifest number:          0504
Signing time:             Fri 24 Jul 2026 02:01:28 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:28 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:28 +0000
Files and hashes:         1: 7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl (hash: 94MBqcwNf0/SjM8QKAQnIkvrEGGQcVPYhb182cUCink=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:30:8a:97:9c:f1:b3:9d:2d:e5:a6:c9:34:25:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec82c30f964ff2afd0cf08f38c8b274df22714f8
        Validity
            Not Before: Jul 24 02:01:28 2026 GMT
            Not After : Jul 25 02:01:28 2026 GMT
        Subject: CN=472a1e279205934e0f2c15f444bbc3d0efb5c1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:1c:07:50:0b:03:a6:25:8a:98:1a:75:e9:
                    d4:f6:ed:5a:90:a8:36:ae:4f:76:92:b7:a6:6e:e0:
                    f5:c3:de:d1:ea:49:8e:c2:f3:e7:dc:c5:61:2a:5c:
                    20:db:8e:56:05:31:bd:01:38:59:c6:c7:96:d4:d0:
                    c5:be:a5:e7:c3:e8:76:b2:40:b3:09:04:d6:71:4c:
                    e5:69:41:85:98:5a:f9:1a:dd:a9:0b:b6:3b:c1:50:
                    2a:a4:ec:e7:36:b8:7d:2b:d4:7b:b1:30:36:16:b2:
                    fa:be:3b:d3:a2:ac:ca:30:f7:75:f6:7f:43:54:d5:
                    8d:3f:b1:27:69:c0:3b:bf:06:12:58:dc:bf:fe:48:
                    f5:76:21:78:18:95:04:35:70:fd:2f:6b:67:e4:fc:
                    e4:64:bc:ef:b1:fb:dd:a1:60:86:3d:24:68:f3:75:
                    80:46:9f:31:99:12:eb:71:0d:3d:ee:95:c0:8c:d2:
                    7c:61:3e:5f:1b:44:53:50:f7:b5:12:29:4d:50:c0:
                    6f:ef:43:3d:dc:1b:5d:51:e1:39:c3:b8:cf:3c:80:
                    95:de:b4:8c:1f:a2:95:ff:f5:64:f9:e0:0b:f4:43:
                    cb:32:72:0e:af:3b:7a:e3:aa:4f:e9:77:2b:bf:81:
                    8d:04:fa:2d:85:66:50:cf:7d:b2:f7:48:20:52:20:
                    a6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2A:1E:27:92:05:93:4E:0F:2C:15:F4:44:BB:C3:D0:EF:B5:C1:C9
            X509v3 Authority Key Identifier:
                keyid:EC:82:C3:0F:96:4F:F2:AF:D0:CF:08:F3:8C:8B:27:4D:F2:27:14:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7b:0c:a5:0c:26:df:4a:97:09:dc:5e:54:9c:b0:1e:4b:67:
         a7:96:ca:c8:7e:e8:8b:4f:88:96:25:e7:c7:50:63:0b:60:cc:
         0f:6a:58:64:b2:96:8b:e7:66:69:98:e4:b0:cf:c5:ca:35:3e:
         cb:51:93:92:3b:10:97:3b:c9:9b:a6:9a:98:34:80:75:0d:e0:
         93:99:de:6a:e5:ab:52:03:b3:03:1e:ab:5f:dc:24:d5:35:b9:
         53:6f:ee:a8:72:ce:37:a4:f4:0a:32:e4:1f:13:65:42:db:dc:
         45:b4:61:b0:4d:fe:30:90:cb:9d:a1:e9:d4:d6:f8:57:ce:52:
         0d:3a:42:7d:37:94:be:d9:5c:55:41:98:ee:9a:e8:d9:d7:02:
         04:e4:cd:5a:dd:84:cd:05:a0:d5:64:86:51:3d:c3:79:dc:bb:
         55:3b:ac:43:e7:90:20:59:76:ff:55:07:e9:06:59:3d:63:2f:
         65:38:4d:45:eb:e1:d0:65:c3:59:f9:6e:5b:7f:5d:62:a4:29:
         bc:64:f9:50:02:c9:be:49:f0:0e:a2:0f:00:1e:be:c5:fa:43:
         70:d0:e9:4a:8f:10:32:41:0a:b2:bc:f0:e7:04:be:53:85:5e:
         fa:a8:f6:53:c3:09:20:64:bb:f7:c1:11:e1:bc:b2:c4:69:c4:
         9c:1b:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:14 2026 by rpki-client