Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/793RSeyjCv887XUwdqStWiweZFE.mft
File:                     793RSeyjCv887XUwdqStWiweZFE.mft (raw, json)
Hash identifier:          DLdXMgqqwLRit01FP6QlRHXzgpzKSNtbKatelqJ/dhg=
Subject key identifier:   D2:DA:E4:28:82:77:EE:DA:B9:65:D3:FB:BB:BA:C1:7E:91:70:A4:C9
Authority key identifier: EF:DD:D1:49:EC:A3:0A:FF:3C:ED:75:30:76:A4:AD:5A:2C:1E:64:51
Certificate issuer:       /CN=efddd149eca30aff3ced753076a4ad5a2c1e6451
Certificate serial:       019F9090A309EEC9CAD13143849E2BFF9DB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/793RSeyjCv887XUwdqStWiweZFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/793RSeyjCv887XUwdqStWiweZFE.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 20:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:25 +0000
Files and hashes:         1: 793RSeyjCv887XUwdqStWiweZFE.crl (hash: gDvbpol64MqBhyy6sfvy63hYWn5BDc+/twPLNPEiVL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/793RSeyjCv887XUwdqStWiweZFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/793RSeyjCv887XUwdqStWiweZFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/793RSeyjCv887XUwdqStWiweZFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:a3:09:ee:c9:ca:d1:31:43:84:9e:2b:ff:9d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efddd149eca30aff3ced753076a4ad5a2c1e6451
        Validity
            Not Before: Jul 23 20:00:25 2026 GMT
            Not After : Jul 24 20:00:25 2026 GMT
        Subject: CN=d2dae4288277eedab965d3fbbbbac17e9170a4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7f:25:fc:6e:9b:50:fa:af:9b:49:89:0c:2c:
                    cd:ea:2c:55:4f:c2:fc:07:5f:c6:1b:09:fe:88:59:
                    fe:a5:13:97:5f:e1:51:2e:ae:7a:63:ea:c9:a9:5c:
                    df:11:53:30:ef:12:84:54:2a:f7:91:58:44:2c:1f:
                    be:4f:35:15:97:1f:68:10:e5:fc:ff:1b:27:06:02:
                    ba:f4:0e:05:a6:fd:84:02:ad:69:66:73:c9:47:f1:
                    68:fe:8b:db:59:0b:cc:93:2a:e1:62:03:91:fb:b3:
                    db:9a:f5:4f:c2:71:1d:c0:12:02:4f:3e:39:cb:60:
                    c9:4f:03:35:31:59:77:cf:56:fa:04:14:07:03:15:
                    97:6a:36:ac:72:50:1c:dc:51:17:c0:0b:5f:c5:65:
                    ff:e8:32:1c:02:7f:cf:fe:df:e9:2c:28:99:34:66:
                    87:98:c1:a4:9f:33:ea:ec:2b:3a:f2:52:52:30:05:
                    e0:92:a1:d2:a6:d5:5d:6f:d2:e0:f3:24:53:f3:2a:
                    e8:09:f6:5c:c1:20:ee:80:7f:01:a6:14:2c:31:bd:
                    42:36:ae:f7:5f:3f:6e:d8:d0:fb:1c:34:93:e4:07:
                    50:5d:85:92:6e:a0:4c:79:51:54:87:b8:d8:e5:58:
                    15:be:27:f1:a4:33:b8:e4:ba:8b:2f:d6:f5:d7:0f:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DA:E4:28:82:77:EE:DA:B9:65:D3:FB:BB:BA:C1:7E:91:70:A4:C9
            X509v3 Authority Key Identifier:
                keyid:EF:DD:D1:49:EC:A3:0A:FF:3C:ED:75:30:76:A4:AD:5A:2C:1E:64:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793RSeyjCv887XUwdqStWiweZFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/793RSeyjCv887XUwdqStWiweZFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/793RSeyjCv887XUwdqStWiweZFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:78:66:5f:1a:c6:f9:eb:80:a8:a3:bd:d3:99:a5:32:1e:6f:
         3c:a7:b5:87:d8:53:67:5d:42:5e:c8:b1:71:15:54:0b:d7:44:
         43:fa:d8:e2:db:73:b1:1c:b3:df:7d:49:fd:f5:74:d8:9d:7c:
         ab:da:d3:bc:4f:11:5f:46:19:aa:d3:37:04:fe:a7:64:c8:90:
         00:e9:5c:ae:ff:d3:44:b4:f8:60:6d:1a:67:41:01:85:47:ae:
         b8:8c:2b:95:3c:86:5a:38:b5:b9:c4:57:26:27:5f:05:c2:83:
         03:26:05:87:be:ff:25:88:29:8e:2a:27:58:56:ce:88:55:4b:
         7b:fa:75:69:c1:a2:ce:e3:e1:70:21:93:32:94:f8:03:a7:11:
         f8:9a:99:c1:b6:66:e0:f6:7d:07:43:91:7a:e6:c7:3d:d5:86:
         27:46:54:67:4b:a3:1d:77:14:65:10:9e:b9:78:13:3f:a4:f0:
         94:e9:3a:ed:c6:6d:1c:d6:53:43:49:2b:41:2d:a9:61:b6:46:
         9f:27:83:f3:08:db:fe:a8:59:53:fe:9f:5a:d2:42:ff:a4:c6:
         81:b1:67:ec:4a:55:09:73:f8:77:af:12:20:6d:f6:89:68:3f:
         46:1b:1c:3f:7d:57:79:46:83:08:c8:28:a5:4e:89:a7:71:7a:
         44:85:27:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:25 2026 by rpki-client