Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
File:                     71j4Vyvdd9mBQRGA4u-aioAsdqw.mft (raw, json)
Hash identifier:          dBl1zawgJ7UcbFLACXiUJpeUhbEjcIps4RKVGzaffMI=
Subject key identifier:   80:6C:0E:44:40:2B:A1:89:AC:11:6F:79:0B:C2:FE:26:52:BA:A7:39
Authority key identifier: EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC
Certificate issuer:       /CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
Certificate serial:       019F905A0C97E14ACBBACD3A562E935E5FB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
Manifest number:          0541
Signing time:             Thu 23 Jul 2026 19:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:48 +0000
Files and hashes:         1: 71j4Vyvdd9mBQRGA4u-aioAsdqw.crl (hash: okyaDFysLgwTZbEp4QG3XWFg/56dSmJeYIwuFKzZ3b0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:0c:97:e1:4a:cb:ba:cd:3a:56:2e:93:5e:5f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
        Validity
            Not Before: Jul 23 19:00:48 2026 GMT
            Not After : Jul 24 19:00:48 2026 GMT
        Subject: CN=806c0e44402ba189ac116f790bc2fe2652baa739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:8d:b2:24:e4:33:0c:8a:2b:4c:d4:f8:1e:
                    b4:eb:0f:de:e6:e0:21:34:8d:3a:40:96:12:7c:1d:
                    9f:45:4f:fc:a7:8b:97:d6:7c:1e:ac:d9:b3:3d:92:
                    d2:f4:17:36:b2:a5:70:b8:41:26:2b:8c:37:42:99:
                    e9:6d:99:0a:da:8e:21:d3:a8:d5:b4:cc:f1:51:65:
                    d0:93:c8:8b:89:05:d1:d9:e5:a7:65:8d:11:73:ee:
                    1e:b5:9a:a9:92:d9:01:b4:1c:04:fa:cd:95:0e:00:
                    7a:bd:ae:5d:f4:69:1d:2d:4a:49:14:c8:0c:69:56:
                    16:d3:d5:88:cc:4d:a2:a0:53:e0:47:96:a2:77:87:
                    06:59:20:c3:16:bd:72:49:6b:5c:71:e2:7b:19:78:
                    b6:d4:2e:b7:ae:c9:e4:ca:f6:94:74:af:49:a9:19:
                    8e:ad:64:d6:1d:0b:6e:ab:6e:f3:11:18:8c:c8:bd:
                    b4:69:c9:81:8b:c0:63:41:0d:16:b5:26:77:99:9f:
                    4a:64:81:1b:ee:46:76:b1:6c:e4:1f:94:f4:73:82:
                    9f:95:be:ce:37:28:3a:1e:57:d7:c5:ee:70:5a:fd:
                    e8:93:78:63:a5:d7:0a:06:66:f7:67:63:65:27:ab:
                    5e:34:1a:19:0c:95:f3:b8:03:7a:b2:b6:5a:e7:14:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6C:0E:44:40:2B:A1:89:AC:11:6F:79:0B:C2:FE:26:52:BA:A7:39
            X509v3 Authority Key Identifier:
                keyid:EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0e:64:c7:34:7e:bd:4f:6a:fe:ae:77:be:18:96:26:91:7e:
         da:80:0c:41:74:27:ac:2a:5e:17:2b:78:ab:06:bc:46:f8:d4:
         7d:b2:38:aa:72:98:57:45:29:1a:17:3b:0c:d5:e7:2d:b6:be:
         75:2c:0f:f6:36:64:8a:fe:0a:de:02:46:92:88:16:75:cd:6a:
         91:f9:30:42:d5:27:76:12:0d:d0:79:ea:4a:3d:65:70:0d:b8:
         d2:81:70:3a:2e:eb:a7:53:c9:73:98:4e:e8:b9:20:2b:3b:50:
         f7:5e:f5:a1:34:7c:6d:5d:32:dc:12:af:1b:f8:87:ff:71:95:
         0f:a3:dd:5e:43:51:c6:69:ff:19:c0:3c:c5:57:62:e3:80:26:
         c9:6f:ca:a2:f4:dc:06:0b:cd:6d:59:e7:df:b8:ee:bb:0f:c5:
         b0:a5:b1:d0:21:e4:aa:95:2b:ba:1a:9d:2d:5d:37:d3:53:10:
         0e:3a:c5:6c:cb:9a:45:34:e9:2b:49:18:7c:2b:fd:ab:85:61:
         b8:cf:10:7a:5e:53:be:1f:4f:7b:54:fa:f8:75:b2:73:9a:95:
         c9:0a:a4:14:b0:80:ec:e7:2d:5f:2e:28:3c:54:fb:3f:83:21:
         94:cf:76:a3:9e:e9:3c:e8:c6:f5:3b:e8:35:9f:ea:1f:80:91:
         ab:26:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:58 2026 by rpki-client