Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File:                     67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier:          8YKN+Z7JpPoATLCh6+iE+2U/tUIcp3T8SEZnhTic0KU=
Subject key identifier:   9E:4C:6F:21:0F:7E:52:3C:F9:28:35:39:26:1A:07:4B:6A:AF:9B:F9
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer:       /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial:       019F90FE92BDC5AF1CC6F2D4204BEDED8628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number:          1129
Signing time:             Thu 23 Jul 2026 22:00:30 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:30 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:30 +0000
Files and hashes:         1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: e4vMepp/mAi+rfdOTnQ+/OZcs6TVHYjdD54VZGeFl+A=)
                          2: caKUs3eqb1C-2Yju8MusRYTam6U.roa (hash: NPWp22I7VFgBs3i27P5Ky/kdDBlPWyPBqWXmEv0PUv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:92:bd:c5:af:1c:c6:f2:d4:20:4b:ed:ed:86:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
        Validity
            Not Before: Jul 23 22:00:30 2026 GMT
            Not After : Jul 24 22:00:30 2026 GMT
        Subject: CN=9e4c6f210f7e523cf9283539261a074b6aaf9bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:60:8d:23:d3:60:66:ac:99:c3:f0:77:4e:9b:
                    47:38:09:ed:79:ad:e5:66:c9:37:45:04:7d:f1:82:
                    11:cc:e9:62:23:a0:76:14:59:df:32:4c:2c:06:66:
                    1f:a7:c0:a3:11:16:96:05:8f:06:05:7a:45:6a:ff:
                    13:0b:33:b6:25:45:c7:53:09:45:3e:6d:81:e1:08:
                    70:b0:7e:bb:42:0f:e4:37:90:6a:6b:14:f2:ae:71:
                    20:9f:b9:5c:36:0e:ee:aa:97:80:27:d0:d3:52:d4:
                    b5:5d:53:e1:50:84:24:81:d9:90:0f:4c:e3:ff:1d:
                    0d:db:2f:e2:88:e0:3e:84:06:3d:ff:7e:21:2a:55:
                    5f:0e:3b:8f:92:86:5a:5c:30:47:0a:88:ad:45:d3:
                    8c:92:51:50:e0:a9:7c:36:c1:24:92:5b:e1:48:7c:
                    48:ea:ed:cc:db:af:f9:4c:56:e8:6e:23:a9:34:8e:
                    b5:4d:88:2c:42:5b:1d:1e:e7:7f:35:20:6a:6b:3e:
                    9b:eb:2e:89:07:eb:ac:c8:1a:a9:15:b8:1f:99:eb:
                    45:d5:60:ad:7b:f1:41:69:6e:0b:66:2e:b4:07:7f:
                    1e:77:15:66:f7:c8:a3:ea:a3:7a:be:12:4e:ca:09:
                    78:ec:63:30:cb:09:48:f0:cc:2a:b8:86:30:5b:d4:
                    69:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4C:6F:21:0F:7E:52:3C:F9:28:35:39:26:1A:07:4B:6A:AF:9B:F9
            X509v3 Authority Key Identifier:
                keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:dd:bd:91:1e:40:95:14:8f:75:7d:10:8b:9a:12:73:1d:af:
         32:0e:58:01:96:11:1c:8c:43:18:10:d5:59:9d:0c:c9:44:b1:
         74:ab:29:e1:68:a4:a7:86:20:7c:ec:5a:4c:d4:ce:4d:95:70:
         b4:25:c0:3f:66:45:04:1a:75:c5:5e:3c:1b:6a:19:61:19:f1:
         86:42:55:f0:35:a2:66:b4:f0:e5:f8:60:aa:a6:c0:df:d7:b3:
         64:8c:bd:75:fe:69:9f:9d:33:9f:07:c7:8b:50:17:42:6a:a9:
         37:64:29:4b:f6:a6:f4:19:56:19:bb:3d:53:43:e5:e5:ee:f6:
         6a:7b:fd:8c:0a:e7:f0:d7:07:95:eb:cc:72:1d:b1:cf:88:99:
         ee:38:70:46:46:94:54:af:fa:32:ce:a8:48:96:76:41:34:44:
         42:9f:fa:76:0b:2e:0c:f7:aa:7d:1e:e4:5c:b8:94:24:c4:2d:
         6d:e0:f5:62:c6:b0:8b:a2:8f:09:85:ff:3b:a1:d6:2b:dd:d6:
         f0:cc:28:d0:3d:50:66:e8:62:2f:5a:e8:80:11:42:ac:16:4e:
         92:8d:a0:97:eb:4e:91:66:55:1c:53:65:4a:9a:99:cb:fa:ac:
         93:27:bb:cf:d3:2e:25:b4:05:d3:d6:5c:96:e1:d1:77:35:79:
         59:4b:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:11 2026 by rpki-client