Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File:                     1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier:          JX5rWskkTU0xZfbvkTJv9StGwlO8jZ+aECO5DVSFBeA=
Subject key identifier:   ED:16:B3:82:06:E9:1A:8B:82:AE:7B:E7:57:00:F1:13:81:48:A1:FF
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer:       /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial:       019F8F1017069B5289D756CC7B1915083D49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number:          19C1
Signing time:             Thu 23 Jul 2026 13:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:24 +0000
Files and hashes:         1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: qgTVO0MgcdzCrgbnCU5QBh4EHnu87B99FuW3/n5DkPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:17:06:9b:52:89:d7:56:cc:7b:19:15:08:3d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
        Validity
            Not Before: Jul 23 13:00:24 2026 GMT
            Not After : Jul 24 13:00:24 2026 GMT
        Subject: CN=ed16b38206e91a8b82ae7be75700f1138148a1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:f4:af:98:d4:1e:68:c3:32:f9:32:71:4c:
                    69:4d:16:d4:89:8a:9a:54:4a:38:01:99:c1:4a:80:
                    76:c5:fa:7e:c8:bd:af:18:76:f0:5d:ed:b7:07:f9:
                    22:d4:0d:c1:db:26:53:40:43:61:84:76:91:da:a3:
                    05:a5:5a:c5:fe:51:4f:15:8b:bb:45:ae:2b:04:30:
                    33:89:61:7b:fd:fc:73:aa:e4:0e:2c:63:42:26:4f:
                    dd:29:b7:0c:bb:a6:40:bb:13:5a:7b:98:63:aa:42:
                    40:90:d2:12:c9:37:40:e3:2b:84:e4:1c:ad:9d:91:
                    aa:7d:b3:8a:e4:63:78:06:df:52:f1:08:44:c3:fd:
                    dd:14:28:44:3e:1c:89:b1:49:ed:48:e4:51:4e:6c:
                    c1:22:9e:2b:32:a0:90:f7:82:b7:02:fd:fe:58:60:
                    16:52:3f:e6:a4:89:df:4a:ee:18:e4:48:b9:d7:12:
                    32:3d:eb:78:d3:f7:2c:4b:c0:13:84:79:0e:00:40:
                    30:33:69:25:6e:7d:55:88:c2:2f:a1:9c:3f:35:37:
                    3a:76:55:a8:a5:c6:ea:67:8f:3e:d2:30:b4:33:a9:
                    31:43:02:c9:fb:4e:b1:35:08:bc:08:a2:b5:26:aa:
                    f1:c0:33:1e:64:02:73:ea:e7:45:df:08:3d:01:7a:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:16:B3:82:06:E9:1A:8B:82:AE:7B:E7:57:00:F1:13:81:48:A1:FF
            X509v3 Authority Key Identifier:
                keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d5:98:8d:74:00:15:63:c6:12:58:2a:b9:5c:34:56:3d:a5:
         d2:e6:0c:05:59:32:7e:44:9a:8b:c5:26:f2:1d:f7:48:79:5b:
         aa:32:58:3d:24:2d:91:e2:75:b8:e4:14:10:0b:43:18:b1:40:
         b3:35:bf:ae:5b:58:be:c3:01:fa:64:03:ec:65:c4:e8:69:ff:
         bb:34:a4:2e:87:b7:6a:4a:ac:16:ac:d3:4b:9e:d7:9d:21:f4:
         1c:59:11:23:bb:1f:d4:6d:db:28:8a:d5:14:dd:4c:b2:a4:dd:
         54:e7:6b:4f:6e:fb:8d:89:63:3f:81:e4:52:a4:e2:7a:f3:52:
         2e:c8:8d:31:8b:9c:7b:3a:a2:c7:16:8c:80:df:9c:18:e8:11:
         ea:2b:de:d5:60:09:54:4f:5b:de:2c:5a:e5:41:ed:57:c4:bd:
         fb:a2:5e:8d:a6:fe:2a:e4:08:5d:ed:df:4e:c1:7d:76:e5:1b:
         bb:b5:7e:cc:0e:6a:4d:f8:2c:74:ef:fd:82:2d:1b:9d:e7:2f:
         96:40:13:3d:a8:86:67:d9:9b:28:1f:4f:66:e4:b7:d0:f3:80:
         5b:a6:7e:fd:88:ee:66:d9:89:09:47:64:93:9c:47:b1:4d:cc:
         b2:85:bb:cf:3d:d3:9f:8b:c3:92:17:2f:c0:f2:a9:2e:10:82:
         e6:d1:a3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:05 2026 by rpki-client