Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File:                     CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier:          yAAwt3B0f/xEiJO/Eph+CrR9IDJ3Q5SY7xsYzHf/RgY=
Subject key identifier:   36:7C:A5:47:A2:B8:0D:9D:96:C8:1D:05:A0:73:B9:F3:D7:74:10:7A
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer:       /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial:       019F8FEC966DF9552B2EBC7509D92982D579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number:          19C2
Signing time:             Thu 23 Jul 2026 17:01:14 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:14 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:14 +0000
Files and hashes:         1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: yuaW5uar5pUJfzGhP6WrUK6nKCO48TSF54XsLPeqm5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:96:6d:f9:55:2b:2e:bc:75:09:d9:29:82:d5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
        Validity
            Not Before: Jul 23 17:01:14 2026 GMT
            Not After : Jul 24 17:01:14 2026 GMT
        Subject: CN=367ca547a2b80d9d96c81d05a073b9f3d774107a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:49:14:2b:ec:cc:f7:d2:56:88:38:2c:d3:54:
                    34:00:f4:ac:a0:e1:91:27:4b:e3:2d:fc:35:4e:f6:
                    d3:63:39:bc:cc:82:54:73:d0:6e:24:4b:d1:55:fe:
                    8c:5e:44:6f:c5:72:a1:f2:e9:77:26:df:f9:ba:30:
                    80:69:e2:8d:3f:dc:7e:f2:2a:8f:67:68:3f:f9:46:
                    c4:3f:90:cd:91:c1:67:20:41:61:af:96:12:f9:70:
                    f4:fc:06:25:1d:48:ef:3a:29:44:1c:db:b9:a0:a1:
                    59:25:a0:79:dd:06:df:94:97:a3:34:17:e0:63:13:
                    f1:3d:55:50:8d:45:e2:4b:89:ef:8f:e0:24:9e:e9:
                    ed:ec:e8:81:a4:5b:3c:5b:13:25:a9:12:38:e3:e3:
                    5d:ea:85:2e:36:33:f8:cc:ae:ec:c9:9c:17:9f:c7:
                    f6:88:f5:88:62:c1:0e:97:c7:65:8e:9d:d0:d9:e6:
                    79:1e:6c:f5:6e:b9:3d:5a:8d:2a:93:ea:fd:64:8c:
                    5a:56:2f:71:1e:4f:0e:e8:75:ed:1d:4f:9c:43:68:
                    4f:71:ea:df:0f:a4:ee:7b:64:33:47:3b:08:2b:e5:
                    8d:4f:9c:eb:65:d9:8c:b7:5d:a9:c2:86:d2:1a:c3:
                    bc:87:af:48:db:03:73:da:76:a7:94:46:61:9d:e4:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7C:A5:47:A2:B8:0D:9D:96:C8:1D:05:A0:73:B9:F3:D7:74:10:7A
            X509v3 Authority Key Identifier:
                keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:02:82:67:cb:27:6d:e5:c9:11:a4:b0:5d:d3:8c:ea:ae:9e:
         1d:3d:7a:c7:c8:a2:5f:97:d8:4c:b5:9d:8b:6a:7e:21:79:62:
         d6:c5:04:dc:c6:74:da:3d:c3:50:07:6a:16:30:64:62:60:80:
         e5:18:44:10:8d:4c:bf:67:00:5f:b1:02:58:9f:e7:e5:f6:be:
         c1:72:91:be:7a:f3:5f:f6:63:cc:e7:a1:7f:aa:5a:67:1a:e4:
         b0:eb:44:64:ce:23:68:a3:29:4c:e0:e0:56:9d:56:43:a9:ea:
         e7:2a:53:02:7d:bc:36:ff:b6:d9:9c:92:10:72:e5:87:67:88:
         07:0e:bf:04:7a:2b:7b:ef:c7:ba:a3:5e:5c:2d:23:c5:65:83:
         72:d2:e5:de:a0:29:86:11:cf:2c:c7:09:f1:e2:7e:b9:4e:e1:
         17:7b:2a:80:17:e5:3a:39:7c:1d:69:df:26:1e:91:d3:b4:ce:
         7a:45:98:ac:5b:08:18:ce:9d:a5:d9:cd:6b:db:f3:26:15:96:
         a1:e3:e5:72:a0:ad:ed:6a:24:4e:46:6b:ed:f0:28:23:57:00:
         f6:67:ea:a4:df:ff:e5:a2:83:dc:d5:d9:c5:73:09:86:49:21:
         03:18:e0:fe:41:45:5e:e8:f2:8a:fa:10:d5:2e:e0:2f:b8:e0:
         7e:fa:aa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:48 2026 by rpki-client