Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File:                     8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier:          CtNPvlaUeZNcQAI7Ag3/FFSQwulAIL4bGlmAkzKvTE0=
Subject key identifier:   62:4E:84:3C:26:5D:EE:8A:2F:E7:9A:BC:E8:A4:87:86:89:25:62:54
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer:       /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial:       019F91DAD0F92CBCE63BACE2B6E828A493AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number:          19C1
Signing time:             Fri 24 Jul 2026 02:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:04 +0000
Files and hashes:         1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: tu2BfUEFdIyu8SgMs1GGKXItI8VnYsNBFFHto6tpLIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:d0:f9:2c:bc:e6:3b:ac:e2:b6:e8:28:a4:93:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
        Validity
            Not Before: Jul 24 02:01:04 2026 GMT
            Not After : Jul 25 02:01:04 2026 GMT
        Subject: CN=624e843c265dee8a2fe79abce8a4878689256254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:07:6f:90:35:d6:f7:1c:f7:b9:2a:84:a2:
                    67:24:c1:91:0d:25:c5:7e:fb:0e:08:b0:87:3d:8e:
                    d9:da:5b:64:fa:4a:da:e7:da:b7:42:39:6e:bb:19:
                    9b:07:53:13:d7:59:18:54:97:e7:5e:c1:33:6b:32:
                    77:ca:d3:0c:75:02:42:2e:cd:16:93:eb:ae:9b:a2:
                    b5:31:bc:78:f2:d8:c5:d5:77:cb:29:7a:8f:2f:34:
                    7c:04:d9:9a:42:46:63:44:bc:13:f1:00:ac:ab:9f:
                    5f:92:73:1f:52:c8:b1:1f:03:c3:44:92:e9:9c:e1:
                    f4:49:e7:aa:71:3f:f5:0b:28:7d:7c:47:85:0d:17:
                    00:5f:75:db:d5:0f:f0:30:fd:75:a9:c1:2d:4f:42:
                    95:1a:70:5e:95:50:c0:fa:b6:c1:09:4c:f8:c9:4d:
                    f1:2a:9b:47:75:80:3b:af:d7:1c:d6:81:19:3f:ad:
                    c2:0c:61:dd:b3:17:3b:7e:a2:3c:15:53:41:be:ed:
                    12:ea:f9:d1:17:1f:d0:67:11:6c:57:82:d7:e0:e1:
                    cb:63:a3:ae:5e:60:05:da:a3:e7:9c:21:5d:92:3e:
                    44:a7:6a:08:64:71:5e:03:1b:65:cc:63:13:58:4f:
                    3b:79:b5:62:24:09:32:87:d0:d7:71:ef:22:eb:65:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4E:84:3C:26:5D:EE:8A:2F:E7:9A:BC:E8:A4:87:86:89:25:62:54
            X509v3 Authority Key Identifier:
                keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:54:ba:dc:73:f9:d3:66:9c:cf:1d:81:87:57:51:0c:fb:07:
         81:20:5b:44:6e:54:2f:69:26:03:f3:aa:e9:ba:e1:8a:b5:80:
         57:72:3e:61:0f:a1:bb:44:fa:16:ab:5e:9a:a6:60:05:29:04:
         0f:4c:80:ee:eb:6c:d1:81:3c:95:00:ca:16:57:21:64:60:b4:
         5c:24:b3:83:39:08:9a:ff:51:13:45:13:ee:43:fc:f8:08:7e:
         db:13:22:31:d9:7a:34:c8:5b:6d:c8:a0:d6:14:c6:ad:5d:f8:
         61:4f:07:2f:72:3d:68:9d:a1:2a:08:aa:dd:c5:cd:5e:1c:87:
         47:a4:db:27:06:6f:2e:de:46:1d:b3:42:ea:ea:1a:9e:00:d1:
         42:d6:df:3e:f7:51:a5:95:3f:e9:f4:83:e4:61:9a:c8:ef:34:
         44:de:dc:a1:bf:c0:6f:3b:a0:49:95:76:e6:39:74:38:7a:f1:
         3d:d9:84:71:84:2d:29:12:91:69:1a:9a:4c:29:1f:a9:06:e3:
         d0:28:ea:cf:f8:b7:42:48:d3:79:10:36:54:ca:72:f6:bc:fd:
         81:2b:7d:99:ab:1a:ba:95:ad:53:cc:b4:28:ef:cf:2c:ce:66:
         38:80:4a:a7:54:2c:2b:2f:2f:58:65:b6:0b:93:cf:33:c4:4e:
         78:e3:ed:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:19 2026 by rpki-client