Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File:                     70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier:          IkcU+JSAAoThoe0Re/CrWgyqW23iq+ZlggfeBcVISBY=
Subject key identifier:   EC:FC:01:31:42:71:A2:35:B0:AC:FB:C6:03:D6:9B:40:6C:B6:70:16
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer:       /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial:       019F9090FFD614EC9F46B7DC524181D411B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number:          0DEF
Signing time:             Thu 23 Jul 2026 20:00:49 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:49 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:49 +0000
Files and hashes:         1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: AvuAbheoLXXzaHRXQkhpK6aXc5a7Fv0HuyExYvMsfMc=)
                          2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:ff:d6:14:ec:9f:46:b7:dc:52:41:81:d4:11:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
        Validity
            Not Before: Jul 23 20:00:49 2026 GMT
            Not After : Jul 24 20:00:49 2026 GMT
        Subject: CN=ecfc01314271a235b0acfbc603d69b406cb67016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b0:38:96:23:86:74:0d:15:ac:3a:c4:06:e2:
                    19:30:4d:cd:97:a6:ec:e4:7a:e7:4e:71:89:3b:08:
                    40:d2:48:da:02:a9:ed:aa:ac:ad:6b:cb:23:4d:32:
                    1a:59:94:09:9e:6f:a6:aa:a2:eb:bf:0a:74:1f:1e:
                    73:d7:c3:74:b3:c8:e8:db:76:1b:8a:54:27:d5:50:
                    04:e6:27:34:28:bb:b8:00:ce:06:19:d1:2a:50:ab:
                    ae:47:53:fb:f9:a9:db:7a:6e:ad:91:a0:56:1c:d4:
                    7f:25:ac:a8:03:2b:d0:a3:4d:31:e0:17:ed:2d:df:
                    c7:61:f4:a4:35:29:ec:1c:52:17:2a:86:a4:30:1b:
                    a2:b5:d7:10:be:cc:dd:9a:96:c3:ac:cc:1e:31:0c:
                    34:e4:87:73:49:6e:7e:5a:32:eb:4d:f5:b3:81:ed:
                    f6:5f:83:ea:44:94:17:6e:13:5b:c0:5e:d2:c4:57:
                    d9:ea:ea:6b:7a:51:c8:19:7d:80:69:03:79:16:05:
                    85:3f:e6:72:76:2e:93:a6:e7:b3:7f:f8:8d:a4:91:
                    6f:7f:f8:e4:9a:cb:12:11:9a:02:57:20:91:a8:d5:
                    f7:0b:a1:ba:72:f7:81:04:25:90:d2:d1:02:1e:15:
                    16:02:d7:7e:fe:4d:03:33:ed:90:29:b0:ed:22:34:
                    c7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FC:01:31:42:71:A2:35:B0:AC:FB:C6:03:D6:9B:40:6C:B6:70:16
            X509v3 Authority Key Identifier:
                keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8f:3c:74:df:8f:c3:ff:9c:f3:97:84:69:fb:97:7e:d8:0e:
         ec:53:97:e4:86:a2:73:e6:c9:0a:a0:0e:8e:4d:3f:73:eb:9d:
         21:1a:1e:97:2a:8d:fd:4c:89:2f:a8:62:a6:89:a2:bf:44:62:
         dc:c9:16:bd:89:f6:37:54:13:c9:65:4d:f7:51:72:f2:29:b4:
         98:5b:41:f7:c5:47:bc:b9:fb:9b:63:73:8e:1e:a9:2b:34:4d:
         df:79:d8:d2:2e:49:09:e3:3e:ec:e7:cc:08:db:55:f8:ad:bd:
         7c:79:9b:12:70:00:9d:be:58:5b:26:29:99:4a:a5:8d:19:65:
         d2:75:c4:43:81:98:99:4a:f1:26:26:d9:07:c2:d5:5a:8a:5b:
         19:42:4d:08:e4:64:f2:40:db:06:7d:e8:a0:5b:d7:7b:6d:c8:
         dc:e9:a0:94:4a:89:67:0e:c4:0a:2e:23:5c:38:ec:2a:f1:6f:
         72:af:a7:a4:93:31:b3:8c:82:eb:22:53:aa:a9:53:6c:c8:03:
         e4:84:d1:a4:7b:7b:7e:52:7f:28:43:fa:4d:70:5c:2f:29:f1:
         b7:d9:d9:45:02:41:70:ef:2e:ca:9b:77:1a:1a:c1:36:5b:f7:
         6d:c5:05:b7:f3:6c:3d:c3:76:3c:9d:32:3c:3e:e7:4e:d2:29:
         bb:1a:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:52 2026 by rpki-client