Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
File:                     7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft (raw, json)
Hash identifier:          amzgVNJamFlqAHylyBVDwsvMXQj9/DmwFh8u1chYTJ0=
Subject key identifier:   DC:C2:C8:97:A7:72:E4:53:8E:88:AA:09:84:57:0E:88:5E:1A:0C:D7
Authority key identifier: EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B
Certificate issuer:       /CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
Certificate serial:       019F8F7E47C4BD2926FCF616704EC23C298E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
Manifest number:          19C3
Signing time:             Thu 23 Jul 2026 15:00:45 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:45 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:45 +0000
Files and hashes:         1: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl (hash: 9+o464M/oNfp34tu1FHieir/5jnTkVYIBsjEe2ZkDoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:47:c4:bd:29:26:fc:f6:16:70:4e:c2:3c:29:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
        Validity
            Not Before: Jul 23 15:00:45 2026 GMT
            Not After : Jul 24 15:00:45 2026 GMT
        Subject: CN=dcc2c897a772e4538e88aa0984570e885e1a0cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:47:86:69:e4:88:72:3a:19:41:77:42:6f:
                    d5:7a:8f:71:54:76:05:e7:56:6a:77:92:08:a0:86:
                    a1:e6:29:5e:04:f9:10:9a:35:0e:11:df:2d:13:d7:
                    15:09:fa:62:aa:25:5f:11:47:fb:3d:19:b1:de:f8:
                    73:2e:02:c7:a7:0f:14:6f:60:9e:24:77:48:2e:bc:
                    4a:3a:32:86:17:59:82:3f:a3:9f:fb:ac:ef:c0:a4:
                    38:94:28:f5:54:51:c1:de:ec:fb:9a:51:7f:ed:ca:
                    55:52:7c:06:f9:59:47:54:42:92:be:84:cf:3f:d1:
                    24:f0:51:ee:3a:e6:ca:8d:44:8e:14:40:94:a9:57:
                    f3:19:d6:58:0d:f3:4e:52:f9:7a:f0:58:65:7b:c4:
                    06:1b:e8:a5:d0:f2:37:21:29:ed:6b:b4:6f:b6:88:
                    82:99:4d:79:a8:62:fa:9b:9e:ae:41:04:cc:8f:c5:
                    76:b8:8c:2c:35:0e:dd:7b:40:08:f1:83:e8:88:b7:
                    32:f8:a2:8e:38:57:14:db:09:70:a5:02:4a:ae:6a:
                    9c:a1:25:07:d7:eb:11:79:43:b3:63:ea:3c:18:62:
                    24:24:f6:f9:99:cf:bd:a8:f9:9c:fd:2d:a9:85:a4:
                    b3:5d:24:04:53:f2:65:69:c4:b7:2a:71:85:0e:0e:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C2:C8:97:A7:72:E4:53:8E:88:AA:09:84:57:0E:88:5E:1A:0C:D7
            X509v3 Authority Key Identifier:
                keyid:EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:15:e8:d7:76:e2:04:ce:cc:b5:a0:8c:f4:28:05:46:20:0d:
         d5:d6:88:f5:92:a3:ef:96:f1:2c:b6:8a:24:f4:2a:8c:b3:4a:
         e9:ad:3c:34:75:1b:93:7f:57:bf:ef:1a:b9:4d:52:5c:78:33:
         fe:fd:c8:62:16:f2:8f:f2:a7:25:99:ee:a8:fa:e4:d2:49:92:
         f9:6e:cf:bf:e9:39:e2:b3:0d:79:7d:d2:1e:d2:38:b4:40:be:
         b6:e2:60:c1:cd:83:2e:62:72:cb:b0:f0:72:f6:31:0e:b7:86:
         68:40:82:e5:4c:50:7d:d5:18:9a:39:ac:c0:f7:5e:ac:b3:d6:
         4b:d2:96:75:dd:f9:0c:40:2f:70:90:e8:c7:b3:15:c3:a5:2e:
         17:64:e0:9c:5e:69:f3:bc:27:e2:6a:14:ae:5e:4e:ec:98:30:
         b1:6d:8c:39:d7:98:9f:01:73:35:b0:1d:4d:c9:5b:ac:9c:a5:
         92:3f:98:46:7c:6b:02:dc:bf:26:24:92:07:f1:ca:66:bf:98:
         8e:73:c4:24:bc:3d:df:0c:84:9a:58:b9:be:34:ac:cb:6a:5b:
         dc:ed:c0:c3:79:87:29:5c:96:76:6e:20:de:7b:04:99:a3:1d:
         3e:30:bb:74:34:53:cd:de:d0:c2:d0:3a:8a:e8:14:dd:97:c4:
         57:18:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:56 2026 by rpki-client