Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
File:                     7N0ioeDFuwAoDxkz7uz4HNig5rI.mft (raw, json)
Hash identifier:          gUGm7S4sKw1WeLSBwcbxxCIv9xbtLeaKMARjf3cduS8=
Subject key identifier:   62:A5:33:52:91:3A:E4:D6:81:08:7E:21:FD:09:E0:66:F7:74:52:20
Authority key identifier: EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
Certificate issuer:       /CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Certificate serial:       019F94DBE62D207EC5D8B9D5F235805F88B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
Manifest number:          1958
Signing time:             Fri 24 Jul 2026 16:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:06 +0000
Files and hashes:         1: 7N0ioeDFuwAoDxkz7uz4HNig5rI.crl (hash: 6+rxBxXL3uW7Eq5uvp8HBT49QpfXveVuMBN8gAg2LqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:e6:2d:20:7e:c5:d8:b9:d5:f2:35:80:5f:88:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
        Validity
            Not Before: Jul 24 16:01:06 2026 GMT
            Not After : Jul 25 16:01:06 2026 GMT
        Subject: CN=62a53352913ae4d681087e21fd09e066f7745220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:90:5e:75:a6:4e:14:df:fc:19:b3:6f:df:07:
                    90:72:90:0c:53:eb:21:8e:09:e7:cb:ea:a2:f6:0c:
                    89:2b:b6:c0:6f:67:19:6e:b2:7b:9f:ee:17:7e:6c:
                    45:2b:34:04:13:6f:32:e4:32:f7:e4:9f:fd:8e:cc:
                    64:f6:c6:3e:ce:53:d9:16:d5:e3:8b:6b:d8:d1:7e:
                    2e:00:47:04:bd:1d:1b:54:73:09:d4:f0:83:21:8f:
                    fa:96:0d:96:c4:e9:03:99:50:13:48:a2:06:5c:c2:
                    1d:65:af:28:81:bd:e2:5a:ab:9a:42:db:20:fe:d3:
                    6f:43:0a:c1:a7:c3:84:31:50:2e:4c:8f:9d:14:f1:
                    c6:21:33:53:0f:89:84:ad:5a:be:71:7c:32:38:da:
                    90:bd:18:c9:ef:f2:d3:fc:ee:2c:3d:5f:2d:e3:4a:
                    43:5a:92:0b:26:16:26:35:43:59:4b:89:78:69:2d:
                    bd:31:2e:4a:76:7b:93:b4:ca:3c:46:96:62:3a:42:
                    77:c8:ad:e4:07:f3:e1:53:a0:da:b7:41:66:27:1e:
                    d1:05:f0:96:8c:b8:66:2c:58:09:ae:7f:fd:1c:3d:
                    c4:ad:be:f4:a0:6e:9c:07:85:dc:db:6d:3c:d4:71:
                    d6:0c:94:52:ac:78:db:bb:a2:69:c4:74:8f:54:d6:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A5:33:52:91:3A:E4:D6:81:08:7E:21:FD:09:E0:66:F7:74:52:20
            X509v3 Authority Key Identifier:
                keyid:EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:01:08:2b:6f:ff:37:a0:6a:b6:02:fb:22:56:50:2d:7d:
         7a:fe:2e:56:ab:4a:38:74:48:9e:0b:19:00:d8:7b:4c:14:e9:
         d7:14:f5:82:6a:ec:cd:0f:c5:8c:c4:51:0f:33:9a:3a:18:b5:
         66:53:95:8e:ea:9c:4d:9b:5e:86:18:85:ca:57:88:b8:77:31:
         75:ac:d7:70:ed:50:22:d2:96:68:2c:3b:c9:bf:63:c9:af:e3:
         24:96:21:27:14:13:91:06:35:c6:a3:af:0a:f4:fa:f9:db:b6:
         86:a6:06:88:d0:8e:3f:ec:4a:47:a8:29:66:6b:2d:e8:cb:dd:
         f2:30:08:11:9a:f1:df:57:46:e9:9e:8e:28:aa:db:f2:18:ac:
         ec:9a:ea:9e:b8:5b:87:a0:ab:3a:a3:dd:e8:6c:35:08:a9:c7:
         ac:6e:9a:91:f9:a6:1d:b0:0b:1a:83:36:2b:59:ad:42:0e:b8:
         4c:50:77:e4:b8:d1:91:e7:0f:25:25:7a:07:8c:34:74:f7:27:
         13:b3:d4:74:81:04:c3:4a:38:9d:74:04:3b:62:68:60:f7:48:
         6c:b9:4f:9d:05:c0:89:dd:2a:01:dc:6f:03:31:8a:64:7c:ff:
         9d:b7:95:09:4b:1d:a3:e2:01:67:f7:e9:87:f1:1e:d6:c6:2f:
         9e:3a:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:22:14 2026 by rpki-client