Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
File:                     17ISLEzzCqZTnsnH5ojbh1BqqV0.mft (raw, json)
Hash identifier:          371cd1oXRnEsmEhfrHZC4sqqYTzoowFNTszJZPxHqYQ=
Subject key identifier:   1B:51:9D:39:76:2C:C2:3A:4F:69:D9:AD:02:60:17:37:F4:09:2C:82
Authority key identifier: D7:B2:12:2C:4C:F3:0A:A6:53:9E:C9:C7:E6:88:DB:87:50:6A:A9:5D
Certificate issuer:       /CN=d7b2122c4cf30aa6539ec9c7e688db87506aa95d
Certificate serial:       019F8FEBD089DE9A2C20E2E0BA8973992981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
Manifest number:          0210
Signing time:             Thu 23 Jul 2026 17:00:23 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:23 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:23 +0000
Files and hashes:         1: 17ISLEzzCqZTnsnH5ojbh1BqqV0.crl (hash: T+WdS9DAXtQjL05fvbnUi//MqNpH6+WmjYUXbMzms/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:d0:89:de:9a:2c:20:e2:e0:ba:89:73:99:29:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7b2122c4cf30aa6539ec9c7e688db87506aa95d
        Validity
            Not Before: Jul 23 17:00:23 2026 GMT
            Not After : Jul 24 17:00:23 2026 GMT
        Subject: CN=1b519d39762cc23a4f69d9ad02601737f4092c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:66:a4:f7:3f:3b:47:c2:3f:68:f7:49:27:
                    8f:af:9b:24:ca:65:1b:b3:6b:8a:5f:66:02:7c:b3:
                    ee:24:d5:f9:59:be:48:c9:67:de:c6:88:b9:06:ff:
                    11:77:09:99:00:f1:c3:eb:b8:ae:43:6a:0c:d9:7e:
                    71:0d:24:fa:b5:13:ff:a7:df:c7:bb:b0:fc:85:61:
                    e2:08:18:f0:8b:b1:b0:84:85:f0:4c:28:35:12:2e:
                    9c:cc:a9:e6:60:2e:5f:b3:12:63:b2:d3:35:bd:1e:
                    ac:f7:92:09:d6:29:2c:3f:02:67:a8:29:d4:de:99:
                    72:98:55:70:b6:ca:19:f0:03:b8:36:a8:61:65:a8:
                    0a:e8:f5:ce:c4:b4:6d:36:70:f1:06:ca:3b:ee:a0:
                    6e:c8:ce:8b:b0:19:60:74:fc:aa:78:75:3f:14:5e:
                    ec:49:ac:9b:a4:15:ab:f0:06:0e:4f:4d:ba:a9:a3:
                    d3:db:58:14:23:5e:7a:00:56:38:13:a4:d1:4f:55:
                    a2:e4:03:a1:27:7e:2b:5f:bb:34:94:73:42:ea:f7:
                    4c:b0:f7:9b:5b:a9:44:13:9c:76:49:49:be:9d:a3:
                    2c:d8:14:bf:08:7c:63:3b:2d:fe:ef:6b:d7:19:7c:
                    6f:cc:bc:15:a5:d6:ef:b1:21:82:f4:a5:1e:2e:6f:
                    bd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:51:9D:39:76:2C:C2:3A:4F:69:D9:AD:02:60:17:37:F4:09:2C:82
            X509v3 Authority Key Identifier:
                keyid:D7:B2:12:2C:4C:F3:0A:A6:53:9E:C9:C7:E6:88:DB:87:50:6A:A9:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9f:93:37:b9:6b:30:27:fb:ec:59:a1:10:cc:82:86:79:4c:
         26:c0:79:81:3a:ae:ea:bd:8c:ba:eb:4b:07:45:c2:7b:bd:82:
         b0:24:6c:69:e2:67:14:06:99:b5:c2:0b:38:af:ac:88:f9:85:
         dd:89:3f:11:9c:c0:cc:db:13:1b:dd:d0:14:54:ea:5b:f8:46:
         36:d7:38:dd:23:90:d8:83:d0:ae:e0:df:93:b0:b5:9f:f3:74:
         a5:3a:5b:ee:67:8c:af:8f:22:02:f2:ec:cf:53:e5:db:a7:41:
         b4:99:1b:fd:d9:5c:26:cf:86:f9:d5:50:20:36:a4:cd:a0:98:
         cd:8c:a8:27:f1:c2:b5:45:92:4e:35:81:71:26:a6:ae:83:16:
         83:32:2e:07:e1:45:12:55:93:fd:5c:f1:b6:81:cf:1e:c1:60:
         7a:df:0c:e1:e6:35:4b:2e:2b:7f:85:54:bf:44:52:f5:fe:39:
         6e:9f:c8:c7:25:74:62:f0:ee:0c:d7:76:6d:ea:79:c3:87:fb:
         5b:fb:12:e1:de:af:d5:b6:f7:3b:97:6a:80:1e:df:cd:c1:28:
         62:92:e2:32:8d:40:44:68:ca:62:88:bb:59:84:db:be:fe:e7:
         bf:fd:ed:b6:24:72:ee:11:c8:87:88:44:83:96:c4:8c:48:6c:
         52:7e:d4:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P69CJ3posIOLguolzmSmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YjIxMjJjNGNmMzBhYTY1MzllYzljN2U2ODhkYjg3NTA2
YWE5NWQwHhcNMjYwNzIzMTcwMDIzWhcNMjYwNzI0MTcwMDIzWjAzMTEwLwYDVQQD
EygxYjUxOWQzOTc2MmNjMjNhNGY2OWQ5YWQwMjYwMTczN2Y0MDkyYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaxmpPc/O0fCP2j3SSePr5skymUb
s2uKX2YCfLPuJNX5Wb5IyWfexoi5Bv8RdwmZAPHD67iuQ2oM2X5xDST6tRP/p9/H
u7D8hWHiCBjwi7GwhIXwTCg1Ei6czKnmYC5fsxJjstM1vR6s95IJ1iksPwJnqCnU
3plymFVwtsoZ8AO4NqhhZagK6PXOxLRtNnDxBso77qBuyM6LsBlgdPyqeHU/FF7s
SaybpBWr8AYOT026qaPT21gUI156AFY4E6TRT1Wi5AOhJ34rX7s0lHNC6vdMsPeb
W6lEE5x2SUm+naMs2BS/CHxjOy3+72vXGXxvzLwVpdbvsSGC9KUeLm+9BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtRnTl2LMI6T2nZrQJgFzf0CSyCMB8GA1UdIwQY
MBaAFNeyEixM8wqmU57Jx+aI24dQaqldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTdJU0xFenpDcVpUbnNuSDVvamJoMUJxcVYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81OTljZTEtZDU5OC00MDllLWIxMzMt
Yzk0ZDlkNmEyMDdiLzEvMTdJU0xFenpDcVpUbnNuSDVvamJoMUJxcVYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81OTljZTEtZDU5OC00MDllLWIxMzMtYzk0ZDlkNmEyMDdi
LzEvMTdJU0xFenpDcVpUbnNuSDVvamJoMUJxcVYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5+TN7lr
MCf77FmhEMyChnlMJsB5gTqu6r2MuutLB0XCe72CsCRsaeJnFAaZtcILOK+siPmF
3Yk/EZzAzNsTG93QFFTqW/hGNtc43SOQ2IPQruDfk7C1n/N0pTpb7meMr48iAvLs
z1Pl26dBtJkb/dlcJs+G+dVQIDakzaCYzYyoJ/HCtUWSTjWBcSamroMWgzIuB+FF
ElWT/VzxtoHPHsFget8M4eY1Sy4rf4VUv0RS9f45bp/IxyV0YvDuDNd2bep5w4f7
W/sS4d6v1bb3O5dqgB7fzcEoYpLiMo1ARGjKYoi7WYTbvv7nv/3ttiRy7hHIh4hE
g5bEjEhsUn7U/g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:20 2026 by rpki-client