Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
File:                     Ad0iu63J75fJwaOGG21rTE3dhoc.mft (raw, json)
Hash identifier:          LSP3OLk+6IGH70dGx8duMZHBVHHEhhmk6F2uvem2B7o=
Subject key identifier:   C1:AE:90:5E:E7:C7:0C:10:D2:00:1F:33:FF:D8:77:80:06:54:AF:6A
Authority key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
Certificate issuer:       /CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Certificate serial:       019F92EDBDD509882E686A3DA0A304ABFA13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
Manifest number:          13B8
Signing time:             Fri 24 Jul 2026 07:01:21 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:21 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:21 +0000
Files and hashes:         1: Ad0iu63J75fJwaOGG21rTE3dhoc.crl (hash: 2+hiJg76JArGk7IW5GdukQJmklCINaoF/0PgsuM8AsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:bd:d5:09:88:2e:68:6a:3d:a0:a3:04:ab:fa:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
        Validity
            Not Before: Jul 24 07:01:21 2026 GMT
            Not After : Jul 25 07:01:21 2026 GMT
        Subject: CN=c1ae905ee7c70c10d2001f33ffd877800654af6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:0b:8e:d8:c8:2a:6c:4b:71:3c:ed:63:e4:
                    98:9d:f9:91:6a:ea:d0:61:ee:eb:cc:72:58:7c:48:
                    b6:13:cb:36:f4:d9:0b:ac:c8:e6:9d:b0:4d:97:8c:
                    e2:0c:9a:10:40:5a:ee:f1:88:ae:cf:2a:38:7b:aa:
                    c3:28:f4:98:b1:34:69:ed:88:ab:63:3d:27:05:d9:
                    fe:f7:6f:37:90:07:a4:d2:dc:9a:7c:9b:ff:13:3a:
                    a7:42:da:74:f0:97:9f:0a:04:83:0c:dd:af:a4:a1:
                    d5:af:a5:94:53:4f:6e:68:31:36:3b:bc:f1:d5:49:
                    f2:ac:0a:63:e6:62:ef:85:b3:81:51:10:b3:1d:55:
                    14:2d:7e:ff:b0:5b:42:e9:5a:c8:d5:51:ab:66:f3:
                    7a:af:a7:7e:ee:4d:89:00:7e:3c:7a:a6:1c:54:cc:
                    c7:87:07:2d:b7:26:21:6c:fc:01:d8:45:25:74:37:
                    63:87:72:f4:50:db:32:75:af:60:e8:c2:39:77:0a:
                    d7:5b:b6:e3:59:a6:3a:2f:bf:29:f9:38:e2:8f:cd:
                    8d:b5:52:e2:15:04:12:b9:23:dc:61:76:2d:86:ad:
                    e2:a1:2e:c8:ab:81:4f:cb:98:68:66:10:d3:40:98:
                    af:89:b2:d7:1e:13:69:1a:e3:71:3c:a0:75:46:d8:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AE:90:5E:E7:C7:0C:10:D2:00:1F:33:FF:D8:77:80:06:54:AF:6A
            X509v3 Authority Key Identifier:
                keyid:01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ef:b2:8f:4a:a9:4e:2e:73:c0:ee:4f:a3:89:fb:07:09:0a:
         fc:44:33:e1:fb:b2:b3:63:95:c3:c1:af:0a:ef:00:f8:8c:6a:
         58:c9:35:d9:ae:70:57:cd:e6:43:da:10:aa:28:dd:e8:db:6a:
         0b:7e:ad:8b:a6:c7:90:77:8f:54:41:a5:3d:33:8c:9b:0f:f0:
         98:2a:a8:41:b9:78:85:de:b4:0b:62:c7:72:ab:3e:a9:db:29:
         8c:5a:7f:e7:8f:b1:67:a8:4d:3d:6c:27:b9:6b:4d:0d:6c:09:
         1a:ec:c4:7b:3c:7d:16:b5:38:81:af:a1:9d:26:ef:7f:ca:fa:
         f3:1e:bb:d4:5f:c0:c3:06:f7:8f:08:d8:a9:3b:79:31:9f:4d:
         50:27:a0:b7:83:e4:80:02:0c:12:03:e4:ae:5b:ba:6d:dd:68:
         0e:00:73:ed:dd:42:84:6b:a9:0b:80:71:aa:18:74:c4:cd:74:
         4f:0e:ec:8f:13:92:13:a3:f7:a9:fc:39:44:d6:f7:f3:63:0e:
         b6:4c:37:f9:71:d9:42:21:75:64:f6:90:4e:35:d1:f8:f4:d2:
         63:ab:9b:69:b8:dc:63:59:2d:e5:e9:a8:b4:60:36:27:e8:d8:
         c8:af:8d:2b:0b:00:5a:4d:8e:c0:2f:80:a3:0b:cd:7b:f4:59:
         14:22:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:10:33 2026 by rpki-client