Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File:                     58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier:          GJ7fTMkqxbzemnk1aywbcoZR7mtzmxI6uce14vC2pyI=
Subject key identifier:   21:E1:88:23:BC:B7:22:D8:33:8F:F0:DC:F5:38:17:CE:20:3E:DC:E8
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer:       /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial:       019F905A054592A9AF097EED9B7C50A5C508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number:          0D08
Signing time:             Thu 23 Jul 2026 19:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:46 +0000
Files and hashes:         1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: 0EZ8NYLVEtJGN5MuKefT8VoEJXxUYJqFB5xQUULtj2E=)
                          2: kjD9MNfC0BPcwkyPzs0CEhSag-I.roa (hash: e8QlVBviEv2pFqVxAanGI81u7if0cNyxjU/3EXVOJq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:05:45:92:a9:af:09:7e:ed:9b:7c:50:a5:c5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
        Validity
            Not Before: Jul 23 19:00:46 2026 GMT
            Not After : Jul 24 19:00:46 2026 GMT
        Subject: CN=21e18823bcb722d8338ff0dcf53817ce203edce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:2b:9c:56:0e:8d:73:62:96:62:a5:2e:b9:
                    19:fd:8b:17:cf:ac:a3:23:6e:a4:72:ef:55:8c:19:
                    1e:df:84:7c:63:27:ee:1c:15:ad:44:a2:04:0f:b6:
                    55:3e:ac:f6:92:53:67:75:5a:ce:73:e0:fc:c7:69:
                    cc:30:2e:ac:72:5a:bd:bc:af:b6:31:43:d3:16:c3:
                    55:4a:d4:07:84:43:4a:2a:12:b3:7a:b2:a1:b1:18:
                    17:52:b7:74:1f:f5:2a:dd:8f:31:59:c7:7b:53:c9:
                    c5:01:a7:8e:0e:ef:c5:82:d4:29:2a:ef:ce:5d:41:
                    ed:83:c0:b4:15:ec:27:19:cd:33:87:ca:f8:a6:56:
                    39:a3:77:29:dc:8a:98:23:08:23:7f:7e:13:ea:aa:
                    6d:45:ec:f1:03:94:70:bb:12:3e:7c:32:16:97:02:
                    98:67:78:52:19:cb:7c:4d:11:3e:87:cc:39:76:e4:
                    9c:76:3d:2a:65:c0:bb:ef:fb:97:ac:52:d3:c9:30:
                    0e:42:17:54:5e:43:e9:89:51:70:2d:20:2b:3b:9d:
                    86:2b:54:59:90:30:59:dd:87:8e:b6:39:98:a0:73:
                    7c:e0:d2:6a:ee:01:3f:5a:0d:c1:43:fb:64:bd:b2:
                    08:53:a1:06:ee:47:e5:ff:41:56:94:53:db:ca:fe:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E1:88:23:BC:B7:22:D8:33:8F:F0:DC:F5:38:17:CE:20:3E:DC:E8
            X509v3 Authority Key Identifier:
                keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fc:56:60:7b:1c:78:5c:c5:f5:1e:fa:5a:22:de:69:07:37:
         33:14:89:94:12:a2:60:71:ea:78:5f:ec:53:17:03:9a:3a:a1:
         eb:3e:53:cc:7c:c1:f8:2c:60:3d:c4:c5:26:ba:90:95:b6:35:
         09:16:b7:aa:16:d9:b9:08:c3:5b:c7:a4:f2:79:f4:b3:23:1b:
         38:dd:46:9d:0f:5e:c5:67:d5:1a:f2:d6:a9:8e:b3:87:b3:5b:
         c3:85:d1:44:ca:f8:ec:7f:6e:06:2d:74:fb:c3:61:e5:c1:fd:
         0b:c0:14:a7:8f:aa:a1:22:af:3e:62:bc:86:45:90:49:1b:ca:
         09:6f:05:30:8e:23:f6:7a:96:37:7f:30:3c:e7:88:24:95:47:
         e1:9e:c8:a7:1b:07:62:35:6d:c0:09:4b:64:65:7d:67:14:48:
         c6:85:a3:f9:dd:76:05:d0:9e:c6:7d:e0:1c:67:9e:3f:3b:e1:
         4a:53:ab:5f:a2:ff:9a:53:61:99:83:5d:a4:85:cf:89:77:45:
         34:86:2d:7b:8f:a4:18:6a:f5:71:58:f9:e0:95:6e:2c:68:54:
         e5:86:c4:05:4c:7e:31:21:e0:21:6b:af:ed:55:b1:ae:db:be:
         fe:3e:4b:b6:1e:c6:6c:64:72:b3:a0:17:43:22:42:b6:b7:47:
         6e:84:6f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:35:34 2026 by rpki-client