Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
File:                     4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json)
Hash identifier:          gYWuKcBGdGQlJYvdMVzEzNjxcjq0kHGpL1rzK1N7FMM=
Subject key identifier:   74:71:9C:67:6D:DB:7C:A7:C9:C7:DF:C7:A6:63:5C:EF:4A:3B:AF:65
Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
Certificate issuer:       /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Certificate serial:       019F905A86168AF828F38C40468B5F21D5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
Manifest number:          083F
Signing time:             Thu 23 Jul 2026 19:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:19 +0000
Files and hashes:         1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: Jod2deQD9Aj5t4M5a729UHULIZtHJXDf1lau3iMiCo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:86:16:8a:f8:28:f3:8c:40:46:8b:5f:21:d5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
        Validity
            Not Before: Jul 23 19:01:19 2026 GMT
            Not After : Jul 24 19:01:19 2026 GMT
        Subject: CN=74719c676ddb7ca7c9c7dfc7a6635cef4a3baf65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:72:d7:36:74:5a:4d:31:9d:80:30:05:5c:
                    73:bd:2a:0d:8a:ee:f1:85:99:d5:8a:06:be:4f:49:
                    10:00:33:25:98:09:4f:90:7e:83:01:d2:1f:cb:d1:
                    d2:10:2f:21:5a:c7:68:8e:aa:9a:1d:af:72:9c:2f:
                    b1:d5:4b:4d:d7:41:7f:be:8a:ba:86:71:89:bb:0d:
                    44:86:84:64:1d:5f:ed:ca:0c:b2:f7:f9:8b:96:85:
                    22:64:21:da:e0:5e:55:37:3f:88:25:af:7c:e4:bd:
                    ef:ae:62:a4:e1:55:b3:60:1b:df:14:15:14:a0:a3:
                    86:58:b5:d3:1e:7c:29:87:90:45:b2:53:d1:f4:c3:
                    10:98:25:de:7e:1b:1e:85:34:ca:b4:cb:d8:cc:d6:
                    ab:ab:2b:8a:a0:7e:7e:ea:14:c3:bf:f8:6e:fe:35:
                    8f:db:4e:5e:d1:b5:39:d7:f0:0f:5f:f5:bb:dd:ab:
                    c9:7e:e2:3e:d8:d2:54:28:b8:e9:95:bc:8e:14:5b:
                    b8:39:59:0c:51:0a:3b:c4:27:30:2e:e1:1e:77:3c:
                    2b:6a:80:38:a0:62:4f:9c:52:e2:23:55:db:b8:a5:
                    c4:ae:30:70:58:bf:e9:f3:46:80:08:e2:79:7b:ed:
                    c2:19:78:7a:0e:81:55:81:bd:ad:61:ea:66:16:3b:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:71:9C:67:6D:DB:7C:A7:C9:C7:DF:C7:A6:63:5C:EF:4A:3B:AF:65
            X509v3 Authority Key Identifier:
                keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:48:56:5f:6d:b2:cc:e6:46:f6:56:3f:92:8a:5c:a1:51:cc:
         32:3f:a2:47:fd:b3:96:03:3b:db:06:d8:22:db:7f:8e:76:47:
         23:2d:d2:71:2e:f3:0c:f0:1b:25:af:45:d0:66:b8:0a:b8:9a:
         c7:f4:f2:45:7a:46:7e:f3:87:f6:c7:bb:f7:f9:c3:3d:fd:52:
         ff:01:02:21:af:c1:3e:a1:8c:c0:4d:87:31:60:9c:0a:66:d8:
         af:76:08:0d:8c:aa:d2:03:95:83:41:23:8c:5c:7f:b7:18:97:
         59:aa:b9:86:5d:70:74:d8:c4:cc:8e:28:02:da:e6:a5:49:6d:
         dd:7d:a2:ca:e7:a6:01:71:81:36:ed:73:f7:6c:bc:90:97:89:
         b2:57:11:68:d3:ae:c2:7b:76:6f:c1:b9:d9:d7:af:2d:49:75:
         bb:24:0f:fd:cc:81:53:14:a9:37:15:e7:30:40:b7:71:39:ac:
         f9:e8:7d:c3:66:a8:99:4f:59:60:27:1d:ac:da:72:e1:a5:8c:
         35:85:74:32:20:7b:a0:2f:5c:e9:80:fb:b9:72:2e:3a:8d:eb:
         3c:95:3d:2b:40:7e:09:b2:78:ae:7c:29:ee:45:4e:67:f3:a5:
         e2:85:58:b6:06:94:35:3a:d2:5e:92:af:62:ca:df:0b:60:11:
         3f:8a:97:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:24 2026 by rpki-client