Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File:                     0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier:          dRTYZ6+MtVNnd+W5mHBuUD/BDObcElVI44u6VhiRb/E=
Subject key identifier:   D2:01:75:65:E5:5F:68:BE:AD:6D:73:E1:C4:53:D4:0E:56:FE:2A:63
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer:       /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial:       019F91A4551A3601CD5277D057F14155EFAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number:          056D
Signing time:             Fri 24 Jul 2026 01:01:33 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:33 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:33 +0000
Files and hashes:         1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: GYCg5I/ewg5JLiIT4HFJRtTAZT4+PdMfO8bxrTJv7Fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:55:1a:36:01:cd:52:77:d0:57:f1:41:55:ef:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
        Validity
            Not Before: Jul 24 01:01:33 2026 GMT
            Not After : Jul 25 01:01:33 2026 GMT
        Subject: CN=d2017565e55f68bead6d73e1c453d40e56fe2a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e4:b5:fd:a6:65:5b:7b:68:c3:f3:91:cb:1c:
                    0d:c1:ab:fc:56:c9:a1:9c:45:ae:f7:eb:f1:e1:83:
                    66:1b:57:f5:5a:dd:7e:3d:0d:ae:52:1b:9b:7b:dc:
                    10:39:15:14:dc:40:a4:e9:0c:27:f6:c7:80:a3:0e:
                    71:17:b4:04:4f:3a:b0:1a:50:d5:25:7f:a0:07:d2:
                    d7:70:54:08:bc:4c:63:11:b9:2b:04:d2:15:32:8a:
                    45:f3:9d:22:09:d2:1d:83:3b:fe:dc:67:9d:2a:8d:
                    8e:ce:21:04:5f:20:b9:c1:a5:a5:46:ad:cb:83:9a:
                    22:26:e8:cb:96:c1:ad:01:ae:48:44:4f:e4:e1:49:
                    6c:d0:04:66:63:d4:a2:15:3e:44:83:a6:2b:8c:b4:
                    eb:be:fa:7a:17:75:3f:0d:15:31:41:f3:5c:a1:d3:
                    a6:33:19:14:8b:6e:1c:10:2d:65:3c:7b:e0:96:1a:
                    5e:37:14:79:91:2c:be:a6:3d:3d:56:99:7e:64:7a:
                    80:11:ca:65:e0:2b:5e:1e:bc:87:60:33:c1:57:86:
                    6f:d3:3c:b3:d6:56:b0:72:dc:49:cc:af:57:67:c9:
                    f4:86:2a:2e:64:0b:10:c6:2a:3b:fd:f3:93:66:32:
                    a2:a5:70:76:c4:16:78:c9:01:ab:64:e5:75:25:ed:
                    54:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:01:75:65:E5:5F:68:BE:AD:6D:73:E1:C4:53:D4:0E:56:FE:2A:63
            X509v3 Authority Key Identifier:
                keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ea:4d:21:d5:f1:66:45:3f:7c:24:d9:87:99:20:da:58:34:
         d2:7c:1e:50:99:4f:0d:d4:e2:5d:9a:66:92:a2:79:f9:b2:cd:
         99:0c:5f:c6:41:64:dc:70:7a:1b:e6:e8:36:1e:6c:50:b0:b6:
         3c:6d:eb:1a:29:3b:be:9e:8d:29:77:4e:06:ca:a5:36:14:c4:
         51:8c:cd:4a:bf:ad:a5:d5:fc:96:cb:b4:e2:e6:f1:b1:43:27:
         47:0c:84:80:18:7e:f4:5f:aa:34:6e:81:36:db:25:0a:96:41:
         41:0e:bd:cb:0a:3e:e0:e7:67:50:b3:92:37:07:0f:6e:7f:9b:
         be:c7:bc:03:bf:3a:f7:27:46:1c:c8:6d:1d:0d:4a:4c:4d:50:
         ac:b0:ec:d4:f2:f1:24:9e:06:2e:0d:9f:bb:8b:7f:87:91:18:
         8b:d3:f2:20:2d:8f:30:cf:24:9c:ac:e1:b9:ca:ef:e8:9f:ae:
         6f:37:dc:ec:e7:7c:2b:50:e8:f8:54:08:95:08:46:1d:ec:9e:
         21:99:98:52:75:62:c7:9c:a8:bd:07:19:fc:a6:ac:33:8a:9a:
         32:d9:78:49:52:56:76:c7:b0:60:78:06:28:c6:b7:a2:ad:c8:
         c9:7f:a8:d1:0c:1e:1a:6b:33:16:a2:62:33:23:18:a9:4d:42:
         ed:e2:f3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:32 2026 by rpki-client