Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File:                     7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier:          C2VIna/73NekTQobX5eBxKq0Ebuk1+9EjnLZc0XuIR4=
Subject key identifier:   DB:0E:3B:2E:2A:4E:98:B3:11:A3:66:81:AC:9F:38:B3:2B:1F:AF:FC
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer:       /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial:       019F935C270D45CFD1E9A2AACF1F4123B5DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number:          121E
Signing time:             Fri 24 Jul 2026 09:01:57 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:57 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:57 +0000
Files and hashes:         1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: Byc0/fthnQYyxHZN5D6OMjUxUufTDMYp7JatInx8eb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5c:27:0d:45:cf:d1:e9:a2:aa:cf:1f:41:23:b5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
        Validity
            Not Before: Jul 24 09:01:57 2026 GMT
            Not After : Jul 25 09:01:57 2026 GMT
        Subject: CN=db0e3b2e2a4e98b311a36681ac9f38b32b1faffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:08:f8:53:0d:45:c9:fa:ae:06:9e:5d:9b:
                    5d:0c:e5:e0:e0:fe:c9:cb:c2:f1:7f:1b:74:37:b1:
                    12:d6:e2:09:7b:b5:ae:81:98:12:23:dd:23:47:d9:
                    00:c4:45:cc:f5:74:2b:b4:7d:01:43:87:b1:d0:eb:
                    1c:f8:6a:5b:7d:06:79:7c:95:c5:c0:d1:e1:6f:1e:
                    5f:92:29:4c:d0:37:9e:10:4d:39:92:cc:f8:85:e4:
                    6a:e7:03:4e:92:3e:4a:0d:b2:71:71:14:d8:5d:1c:
                    c7:5b:94:86:0b:ac:d6:de:b0:f6:78:85:b5:0f:54:
                    eb:a1:5f:73:99:fa:d2:e3:41:e1:16:38:44:15:3c:
                    fc:49:f7:df:00:34:f0:9d:37:18:8b:55:6f:a5:3e:
                    32:16:35:76:d4:5a:39:d2:ba:2b:48:ce:d9:e5:dd:
                    4e:cf:a1:20:a6:b6:06:c4:0b:f0:a7:57:0c:e7:39:
                    eb:31:81:af:61:be:00:95:7d:c7:54:56:0e:e5:03:
                    57:aa:bf:b1:68:eb:96:90:4d:6a:b6:f2:71:39:27:
                    29:18:64:c7:3a:2f:8b:33:ce:d1:f9:0f:03:95:a5:
                    17:3b:d0:d7:0d:de:fe:2d:6c:8a:06:d1:81:e1:7a:
                    c7:13:80:58:a7:3a:fe:23:61:8f:6f:45:86:df:2c:
                    6b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0E:3B:2E:2A:4E:98:B3:11:A3:66:81:AC:9F:38:B3:2B:1F:AF:FC
            X509v3 Authority Key Identifier:
                keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c9:f2:23:62:4e:70:e8:83:b7:03:a2:bb:b5:58:e3:9d:cb:
         6f:c2:4c:14:7b:f9:34:3e:c4:82:53:79:88:b9:15:58:41:d3:
         5a:f7:e3:58:26:2f:3b:0e:7c:5b:a3:66:0c:0d:5b:e5:1a:45:
         9f:93:56:5a:f3:e2:bf:05:9d:22:9f:c4:98:a8:f5:d3:b8:9c:
         24:47:d8:65:3f:48:67:c3:c4:ae:9f:fb:69:cd:6b:cb:f5:46:
         66:8e:f3:af:eb:fc:ce:e9:5c:c4:16:1a:e7:75:5b:4f:a6:87:
         a4:9f:e3:e0:e9:dc:77:45:7a:0a:fa:2e:8b:1f:74:06:0c:b5:
         69:fe:63:32:71:51:2f:61:9d:9e:14:aa:a4:b3:63:28:67:b6:
         18:90:ba:0f:af:c7:d3:84:56:78:5c:d4:04:e8:2c:ab:7f:b5:
         32:8a:88:9b:e5:b9:17:60:2a:b6:fd:6f:67:be:55:a7:97:92:
         32:5f:ea:ae:2c:91:35:fc:8a:dd:ff:35:be:04:ca:9f:c0:82:
         f1:3f:33:c8:28:de:15:02:70:d5:d0:bb:ff:b4:1b:92:35:8f:
         06:22:46:25:57:7f:45:6a:6c:b4:dd:b7:1f:c2:9a:1b:70:93:
         8f:43:6d:f4:44:7a:99:29:5a:90:21:d4:f0:89:55:b2:7c:d3:
         9e:4d:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:54 2026 by rpki-client