Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
File:                     CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft (raw, json)
Hash identifier:          nekJMxMWUIqLzVSeKQzvyQszBCQu3Abg6i654Fpahlc=
Subject key identifier:   B8:50:17:23:99:D8:3D:58:AB:96:14:98:52:FD:C5:1F:5D:84:0B:34
Authority key identifier: 0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
Certificate issuer:       /CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Certificate serial:       019F8F7E3A38644CB8ABA8972548DE1DE273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 15:00:41 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:41 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:41 +0000
Files and hashes:         1: CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl (hash: SdrPy4StFCl7HZFxIfHNVuqQjyAGPDs+l6LSExUzGmQ=)
                          2: qrwmnr0OEc9nAnaMZvs0-umIs9w.roa (hash: PZB6TM1PU5xxv8QQowAJ7WYR8h3/v/M9wazTIxePSNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:3a:38:64:4c:b8:ab:a8:97:25:48:de:1d:e2:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
        Validity
            Not Before: Jul 23 15:00:41 2026 GMT
            Not After : Jul 24 15:00:41 2026 GMT
        Subject: CN=b850172399d83d58ab96149852fdc51f5d840b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:8c:e6:66:1a:1d:3b:ca:ba:19:b6:02:a5:
                    1b:4f:f2:65:af:9d:90:62:67:34:dd:48:5f:a3:03:
                    ac:be:9e:f8:4b:21:12:d8:e4:c0:29:59:d3:39:be:
                    8b:a2:2a:e4:79:5c:4e:0b:67:9b:63:e9:d0:43:e1:
                    dc:89:e6:18:ec:e7:85:eb:fc:e0:2d:cf:07:d7:07:
                    45:21:fa:4e:40:12:1d:1e:06:e4:56:60:19:5a:3c:
                    5b:22:09:b4:4e:0c:11:64:13:19:ab:8a:8e:c8:86:
                    5b:df:0f:d6:fc:71:a9:32:0b:cc:b7:ad:21:5c:6c:
                    12:9b:4a:98:44:96:57:e4:65:99:82:7c:97:e9:e0:
                    83:30:95:c2:d1:f2:d4:81:35:1d:2b:e2:b7:5c:cd:
                    5e:a9:b0:d2:e0:8a:8a:b8:49:8f:76:eb:c3:64:73:
                    10:ef:77:06:79:d3:a1:0d:21:40:9f:b5:1e:dd:83:
                    1c:23:b0:fc:48:c0:bf:b9:76:64:f1:99:34:26:d9:
                    37:4b:21:e0:c2:e0:d7:d6:7d:f3:a9:5f:8d:b6:45:
                    e7:aa:d9:07:57:74:c1:53:b4:75:41:77:42:94:86:
                    7d:9d:34:70:b5:51:05:b1:2d:90:a4:f9:0a:5f:cd:
                    4e:69:27:f0:b1:f8:43:ab:b7:d6:ef:bd:5b:e1:e6:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:50:17:23:99:D8:3D:58:AB:96:14:98:52:FD:C5:1F:5D:84:0B:34
            X509v3 Authority Key Identifier:
                keyid:0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:5c:0c:59:6f:fa:97:7b:db:7b:4e:22:cd:29:c9:d0:34:
         9b:d3:80:75:35:a7:b9:94:ae:52:df:94:c1:d6:cb:11:68:e6:
         4b:31:b3:73:ff:72:9d:c2:a7:6b:e8:49:94:35:8f:ce:c7:a2:
         ea:6e:a8:7b:99:f8:67:ff:4e:c9:11:0f:2b:71:4a:43:02:16:
         a3:d2:1f:b5:6b:7f:53:73:1f:ff:ba:51:fd:0f:34:64:31:9f:
         b4:ea:61:36:df:ce:20:6d:50:9f:a7:33:4e:6d:f3:5f:d3:ee:
         f6:a4:55:bc:a6:ac:46:76:a6:e0:c3:6f:12:8f:1f:97:7c:d4:
         43:7e:13:5b:a1:cd:71:3e:d7:d4:0e:05:cc:f9:1a:c3:ce:07:
         44:cb:8f:8d:f7:d9:5f:4f:b9:89:22:62:64:34:ab:9d:4c:2b:
         20:15:47:b8:44:7a:cd:16:b3:f8:6d:ee:fa:cd:36:a8:3e:82:
         b9:e9:81:82:a4:6d:25:cb:25:e7:ad:40:b2:4b:5a:c2:05:66:
         7c:7c:59:e3:32:48:d1:8f:83:88:41:a7:09:78:ac:0f:13:14:
         50:f7:9e:a2:bf:16:f5:92:ca:d0:f2:83:d8:f3:ec:dd:2f:8a:
         71:da:a0:8f:ee:93:a0:8e:1c:df:32:a0:dd:84:c5:88:4e:a3:
         41:8c:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:19 2026 by rpki-client