Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File:                     Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier:          3BJbfrbA6cU6oB+mXaW4tqHQDaOqtktZHbJrnrIXFC0=
Subject key identifier:   33:6A:1F:F7:0D:F5:79:93:DB:A7:44:82:D3:0C:1A:FA:0C:10:B4:45
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer:       /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial:       019F8FB5BFA5906D578B027B61A00648C417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number:          0B0E
Signing time:             Thu 23 Jul 2026 16:01:20 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:20 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:20 +0000
Files and hashes:         1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: izhbmoNsz3l5J0eADIobYZI7lYbon4yoPNupbbBQxJ4=)
                          2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
                          3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
                          4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:bf:a5:90:6d:57:8b:02:7b:61:a0:06:48:c4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
        Validity
            Not Before: Jul 23 16:01:20 2026 GMT
            Not After : Jul 24 16:01:20 2026 GMT
        Subject: CN=336a1ff70df57993dba74482d30c1afa0c10b445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:ab:7d:fd:4e:e1:5b:bf:32:44:41:32:a1:
                    d8:fc:2c:c9:7c:89:d6:7f:5a:61:78:bc:c4:c1:db:
                    65:db:65:84:d4:d0:0d:2a:d4:01:f5:60:08:43:18:
                    9f:e4:e3:50:ea:65:1f:3b:1c:d4:7c:ef:12:a0:87:
                    66:c0:32:5e:55:2f:90:f1:99:06:fb:c5:49:09:bb:
                    ba:61:88:b4:a6:7a:b9:4d:f2:00:47:8f:a4:38:f2:
                    8a:cf:5e:ba:cc:ca:c4:1d:e4:a3:8a:4e:d7:6c:cd:
                    0b:06:db:85:71:76:8b:10:05:92:5d:17:b3:00:4c:
                    f9:7f:41:06:98:bb:2e:37:3c:22:2e:c9:df:68:2b:
                    02:34:59:a1:a1:d6:29:28:64:17:a0:e8:61:a7:18:
                    02:b6:1b:bb:1e:d6:6d:74:9c:ad:d1:d8:57:f4:4a:
                    b3:29:43:a9:09:63:c9:8a:95:b7:88:3d:64:4e:cd:
                    84:22:32:4c:fe:b9:33:01:ec:3d:fd:b2:84:a5:ad:
                    9f:de:2c:04:b1:e4:67:f2:45:60:f9:e6:f1:07:85:
                    3b:2f:39:98:02:30:fa:b7:d8:68:80:45:f5:4c:c5:
                    92:25:52:8e:17:39:b9:c2:38:c1:cc:74:8a:82:2b:
                    d9:32:35:b4:a7:65:ba:f8:fb:b6:b2:52:9f:8f:c4:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6A:1F:F7:0D:F5:79:93:DB:A7:44:82:D3:0C:1A:FA:0C:10:B4:45
            X509v3 Authority Key Identifier:
                keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f8:87:f6:5b:eb:cd:53:da:50:73:fb:5a:53:59:79:ac:c4:
         b5:6c:05:92:7a:8b:9f:3e:c8:1e:45:bd:a9:fe:bf:73:20:75:
         5f:e9:82:d7:d1:4e:76:0f:23:5f:4c:5b:13:70:05:ae:ca:16:
         59:a6:83:0d:06:a4:a3:b4:5d:40:9a:e0:c7:df:5b:fa:5f:c1:
         ca:58:d4:cc:44:39:d2:41:b8:72:06:ee:87:3d:66:62:b5:ba:
         88:f3:6a:20:a3:75:fc:a6:24:10:6d:ae:b9:92:1f:12:f0:00:
         cd:3c:cb:48:d3:34:81:3e:30:57:5e:37:bc:e0:fa:fc:83:40:
         a4:2d:a4:2d:d9:30:5f:9b:14:40:88:f0:c1:07:af:d9:ad:ab:
         ae:dc:9a:f8:cb:12:cc:a4:e8:72:07:cc:da:58:e5:de:01:fe:
         7f:f7:7a:f2:e8:00:32:72:73:26:98:89:2b:eb:43:5f:b3:c5:
         6e:58:a8:60:99:51:a2:eb:b1:f3:02:1b:77:f0:11:e6:75:03:
         7d:1b:db:8f:4e:fe:5b:ea:03:d6:6f:0a:36:76:9a:f4:d6:80:
         47:49:9f:f9:de:14:e7:46:f8:d1:99:fc:b8:98:6d:9d:70:76:
         4e:04:6d:ef:f3:71:4d:40:46:89:de:cc:ec:dc:73:94:50:16:
         91:e3:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:15:59 2026 by rpki-client