Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File:                     9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier:          0RTb/nGi4LWXsUKM3slIH2H9FL2iAU5bwuWS+IaggeI=
Subject key identifier:   DB:DC:91:01:74:87:98:85:B9:F8:59:AF:5B:84:22:96:2B:5D:01:57
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer:       /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial:       019F8FECAA6B13CB6C6238C31F46ADFDF998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number:          0CDC
Signing time:             Thu 23 Jul 2026 17:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:19 +0000
Files and hashes:         1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: XxyB2+dhuXqZ9EbJAUlw+CLfROKugnRheQrhqedXyCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:aa:6b:13:cb:6c:62:38:c3:1f:46:ad:fd:f9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
        Validity
            Not Before: Jul 23 17:01:19 2026 GMT
            Not After : Jul 24 17:01:19 2026 GMT
        Subject: CN=dbdc910174879885b9f859af5b8422962b5d0157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:55:ec:cc:44:82:a3:f5:c8:b9:5f:43:ce:
                    9c:ac:5b:83:50:ad:d3:98:96:fd:e6:cb:0b:16:38:
                    ee:ae:d0:18:e1:2a:30:f4:93:85:03:a8:39:4e:ce:
                    1c:a5:8c:d8:c5:eb:e1:5a:36:fa:75:bb:be:fb:ae:
                    80:cf:cd:5e:ee:dc:ca:c8:dd:a9:92:31:31:62:8c:
                    5e:19:25:35:f5:76:6d:9e:a4:87:f9:83:d1:12:90:
                    4f:6c:76:8c:b6:ec:b3:da:98:28:58:35:90:fc:ef:
                    28:97:7b:51:c9:23:6a:71:54:f4:de:a6:72:64:43:
                    b7:0a:e3:98:0c:c8:6e:dc:4d:21:08:86:ba:04:90:
                    c2:69:f6:c6:d9:93:b0:88:c0:eb:fb:df:c8:c4:e1:
                    12:3d:ef:59:d6:da:d3:b7:8d:8b:5f:66:fe:f2:c1:
                    78:2b:e5:b9:c8:9a:8e:c5:bf:cf:0d:77:70:a6:65:
                    26:f8:a0:2c:ff:33:4a:e0:b5:74:f7:4f:95:4f:13:
                    cc:9a:09:a9:5b:7c:bc:f6:6b:c8:d1:0c:1c:41:f4:
                    97:4b:c4:2e:15:ed:b6:33:44:a4:e2:40:eb:92:c3:
                    0e:de:8e:aa:63:fc:21:44:57:93:3e:42:10:44:a0:
                    aa:51:21:12:d7:c1:59:4b:a7:9c:10:18:54:5a:8d:
                    1d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DC:91:01:74:87:98:85:B9:F8:59:AF:5B:84:22:96:2B:5D:01:57
            X509v3 Authority Key Identifier:
                keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:53:36:ea:09:87:ce:78:51:70:64:5b:31:50:69:d7:48:cd:
         d0:f4:2d:c9:e3:39:41:27:02:f7:cf:cd:af:06:72:13:9a:01:
         b4:5d:84:6a:55:bc:6e:77:88:56:0e:a6:31:b3:6c:9c:c3:89:
         a9:b5:36:51:d4:9c:66:27:af:7d:37:d7:85:d0:a0:e2:86:bb:
         f3:24:28:2e:8e:62:3d:82:cd:f9:9e:96:5f:37:a8:3e:41:95:
         2a:16:b0:d7:f4:11:ce:80:6e:0f:71:e0:76:0d:d3:fa:27:e7:
         6c:5b:39:60:96:b9:ea:7d:e0:ee:ba:a1:ff:94:40:4b:cd:4a:
         3a:1c:74:41:18:4d:5a:9f:9e:53:41:8e:af:52:b8:a3:80:6f:
         2d:be:b7:5e:70:95:3a:d7:51:57:c5:71:ab:16:e2:48:fd:f6:
         c9:35:2d:ae:8e:f7:f9:7e:8e:80:af:98:cc:12:3c:f8:94:a7:
         b2:98:4d:64:8a:11:b4:25:9c:6a:85:92:3a:0b:89:10:df:f6:
         90:a2:94:9b:3e:84:b7:17:ce:56:8a:26:27:13:89:72:7f:90:
         54:8f:24:7a:95:65:7c:38:26:e6:46:00:55:da:7b:36:8b:b7:
         9b:92:33:14:cb:c3:40:0e:f6:39:f5:11:c7:09:f6:52:a3:7b:
         95:9e:dd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:23 2026 by rpki-client