Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
File:                     AMe7gqYBJXucgs_3rHkz81E6TUk.mft (raw, json)
Hash identifier:          pcOjTsh2Z48XhUD6oIL1OJdh0dpXH5b8w5Og4RlMnf0=
Subject key identifier:   F9:DB:E3:F2:A1:5D:BE:4C:29:66:2C:3D:9B:7A:56:17:86:76:27:6C
Authority key identifier: 00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
Certificate issuer:       /CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Certificate serial:       019F90FE7C9DA2D47248AD2D66B938B9A2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 22:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:24 +0000
Files and hashes:         1: AMe7gqYBJXucgs_3rHkz81E6TUk.crl (hash: E0dKGpI3tILc5AmvTfsGXajtaABKdwXM3TX3wUc0AjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:7c:9d:a2:d4:72:48:ad:2d:66:b9:38:b9:a2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
        Validity
            Not Before: Jul 23 22:00:24 2026 GMT
            Not After : Jul 24 22:00:24 2026 GMT
        Subject: CN=f9dbe3f2a15dbe4c29662c3d9b7a56178676276c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:e2:86:72:a9:7a:4b:65:8c:31:27:8b:30:
                    a0:41:5b:51:f7:b4:2b:ce:01:b7:19:19:f6:b1:d6:
                    75:5f:87:78:08:05:b5:df:08:32:d5:5f:b0:5a:1e:
                    58:14:e9:23:6d:64:25:9e:ae:a8:ea:34:a8:e9:bc:
                    a1:e9:63:12:14:66:4e:bf:4c:92:93:ad:7f:66:9f:
                    5b:81:39:b7:9b:5c:41:58:17:0e:99:17:dc:97:ec:
                    9e:65:63:5a:db:ad:bd:6c:fe:4e:b2:61:ae:21:dd:
                    9b:38:c4:ce:78:f6:9e:a3:36:fb:cd:11:45:df:38:
                    82:69:56:8f:4a:bb:7b:1d:c3:78:4a:e7:6b:fc:dc:
                    c8:42:ca:86:03:ed:fe:4c:98:88:1e:02:c9:10:38:
                    a4:d7:9e:50:5d:1f:3a:f8:6b:ba:5c:e9:7e:53:5c:
                    54:ec:3e:ae:e6:e0:c0:10:ed:a1:83:35:ee:96:e0:
                    07:d7:b9:ea:5b:b0:f4:a4:e8:23:40:07:06:a1:51:
                    f3:71:02:55:0a:88:ac:5a:43:fc:bd:5d:3c:bd:f0:
                    60:d3:3d:4d:87:e0:fe:98:89:54:72:2a:c0:1e:59:
                    49:cf:90:80:08:63:ae:b3:96:ce:b9:52:1f:bd:2f:
                    3b:cd:43:a8:4c:71:89:4f:95:25:cd:a7:e6:72:b4:
                    0f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DB:E3:F2:A1:5D:BE:4C:29:66:2C:3D:9B:7A:56:17:86:76:27:6C
            X509v3 Authority Key Identifier:
                keyid:00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2f:49:06:94:89:49:ae:e3:8d:b5:c5:14:a1:e7:e8:5e:dc:
         ee:b0:cd:e5:7d:3f:8e:b0:5d:76:47:37:f3:3b:b9:92:d6:9f:
         ef:b6:7a:33:74:3a:98:32:9b:ed:24:c0:b3:bd:75:bd:e4:14:
         c5:e1:f5:75:48:12:66:56:ba:7e:3e:c4:b6:86:ba:cf:9d:a6:
         81:bc:1e:36:be:ed:c3:05:bf:26:3f:f0:8b:20:a8:dc:d6:11:
         0f:af:98:28:ad:67:51:64:c9:4d:ad:68:e2:91:19:28:da:0a:
         28:ae:db:bb:c4:38:f1:26:06:f0:2a:62:7d:b8:7a:37:3a:b8:
         66:96:66:bb:fc:e3:dc:be:dc:25:05:c6:26:cc:95:fd:d2:96:
         7f:e8:e0:d0:ef:ce:6c:64:2e:33:99:3b:60:04:fa:64:d4:39:
         3d:f5:4c:4f:01:46:59:ca:af:57:82:a4:1c:60:c6:29:82:ee:
         48:84:a2:09:37:34:59:8f:f9:fc:07:4e:41:f7:a3:fa:54:5c:
         3b:4d:df:2b:4a:b7:08:a4:0f:81:08:d1:5b:fe:30:92:cd:73:
         4e:92:ae:3d:11:f6:db:88:2d:d6:b9:15:32:85:06:36:c3:e8:
         b9:15:c1:6c:88:61:59:ae:50:91:8b:a7:29:19:7b:fe:7f:54:
         85:0d:18:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:23 2026 by rpki-client