Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
File:                     CeVm4OteXiEQflX8lg-x7iGHRHQ.mft (raw, json)
Hash identifier:          +8kEDQCT9DR+H2UKd460xdtu2PZurYKG10gy+PWKp3Y=
Subject key identifier:   A2:2B:65:08:E5:C1:9A:9B:99:09:48:82:72:C4:E1:D2:08:DD:8D:66
Authority key identifier: 09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74
Certificate issuer:       /CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
Certificate serial:       019F90FEC3102EEF15AC09BFA604045E35DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
Manifest number:          180D
Signing time:             Thu 23 Jul 2026 22:00:42 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:42 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:42 +0000
Files and hashes:         1: CeVm4OteXiEQflX8lg-x7iGHRHQ.crl (hash: J27B17acSzqfLjLkvlfAYfyTImxMbIvJSfUs5vtMpRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:c3:10:2e:ef:15:ac:09:bf:a6:04:04:5e:35:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
        Validity
            Not Before: Jul 23 22:00:42 2026 GMT
            Not After : Jul 24 22:00:42 2026 GMT
        Subject: CN=a22b6508e5c19a9b9909488272c4e1d208dd8d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:b8:31:3c:5d:0c:0c:72:a0:4f:1f:e3:7f:
                    bc:2b:94:bc:a6:b5:54:98:d9:8b:47:d2:93:43:e8:
                    f6:50:ae:4f:71:9f:ae:bc:57:16:6c:6e:0d:1f:d1:
                    36:8b:ab:9f:c3:1f:fe:d2:47:06:34:47:5e:95:8a:
                    47:69:33:40:47:a1:8a:17:59:69:17:70:44:65:05:
                    a6:c6:6e:e3:8c:32:fe:38:e2:6a:1b:c5:9a:1a:46:
                    63:34:33:b3:25:0c:b1:33:99:4c:02:b4:49:0e:65:
                    fe:94:c5:02:fe:f2:0b:1c:09:94:a2:e7:13:03:e6:
                    a5:c8:01:ab:de:ab:f4:93:73:69:2b:ab:f4:01:e2:
                    d8:19:a1:6b:18:5b:8b:e3:26:24:45:0c:02:6d:1f:
                    a2:9b:3e:fe:f7:55:4d:36:5f:f2:00:11:47:fe:3c:
                    b2:9b:ce:b4:c1:b8:b8:e0:7f:9d:10:ad:d5:46:df:
                    ae:33:45:f5:ea:8c:bf:90:55:15:51:e6:94:21:74:
                    ff:2f:eb:b8:64:57:94:3a:07:7d:01:5e:b5:41:2e:
                    90:e7:44:e8:72:ad:28:f6:1b:f7:1f:76:a2:58:2c:
                    a7:40:ec:00:9b:27:6f:17:85:95:a8:29:67:0f:85:
                    62:6f:59:44:59:cc:e6:d4:bc:1b:e6:07:81:30:9e:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2B:65:08:E5:C1:9A:9B:99:09:48:82:72:C4:E1:D2:08:DD:8D:66
            X509v3 Authority Key Identifier:
                keyid:09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:9b:e1:ac:93:5f:23:3c:d6:c8:d2:67:84:27:74:ae:ef:
         40:5c:8f:4e:6d:70:6a:ad:79:4b:c7:ac:31:06:fc:86:49:54:
         80:e0:00:54:59:fa:7b:05:f1:6a:9a:75:d9:25:5c:10:a7:fc:
         2a:4b:77:bf:c9:3a:75:00:ce:9a:4a:ef:30:4e:99:77:64:8e:
         e0:de:db:8e:6c:aa:97:aa:d0:b6:32:59:1a:b6:bb:6d:50:5e:
         89:cf:d5:95:7d:36:82:70:8d:47:63:46:c1:90:ba:86:34:c3:
         4b:29:64:ff:c1:37:47:84:a6:3a:cc:b4:8d:ef:eb:d7:cc:69:
         22:56:38:df:e6:1e:36:7e:2a:a8:a9:c4:26:28:1d:de:98:b5:
         1b:13:1f:59:a5:cc:5f:36:3b:9b:1f:37:27:37:36:82:d1:9e:
         51:72:71:47:66:81:05:5f:3b:6a:a8:ac:60:90:c1:00:98:bb:
         37:07:c0:2c:57:dc:7a:4e:5d:49:a4:a9:2c:92:85:c5:10:90:
         7f:75:f9:98:90:1d:5a:87:71:0c:ca:bc:57:33:c8:f1:f6:62:
         31:20:c1:ca:f2:7d:63:84:31:db:62:4a:f0:cb:56:a0:b8:77:
         8a:ea:7d:41:ef:0f:8c:25:68:03:52:eb:a6:bc:29:23:79:f8:
         33:56:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:29 2026 by rpki-client