Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
File:                     7uWTl_XWr-28jZFmr_67KAAJH5Q.mft (raw, json)
Hash identifier:          SwHttC0iraiAn+fCzrw7wAm3KVWTPuT601Y/MRGJqwI=
Subject key identifier:   03:05:F2:35:55:AF:14:1E:D6:FB:7C:6F:1B:E1:8F:13:D0:E5:6E:54
Authority key identifier: EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
Certificate issuer:       /CN=eee59397f5d6afedbc8d9166affebb2800091f94
Certificate serial:       019F92ED7C7510389CE9C30467ECB1DD2A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
Manifest number:          13F5
Signing time:             Fri 24 Jul 2026 07:01:05 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:05 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:05 +0000
Files and hashes:         1: 7uWTl_XWr-28jZFmr_67KAAJH5Q.crl (hash: oRD2VXahC6K8xiJTIp/ykcxITcTlaY5OCxt3++ZB8xc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:7c:75:10:38:9c:e9:c3:04:67:ec:b1:dd:2a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee59397f5d6afedbc8d9166affebb2800091f94
        Validity
            Not Before: Jul 24 07:01:05 2026 GMT
            Not After : Jul 25 07:01:05 2026 GMT
        Subject: CN=0305f23555af141ed6fb7c6f1be18f13d0e56e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:22:53:38:a0:81:b2:bd:ef:57:71:de:c7:
                    22:7f:5a:a0:fa:32:f2:92:37:69:df:d8:5c:1f:6c:
                    a1:d1:00:cb:89:cc:1a:4a:d1:13:5b:0f:f9:5a:de:
                    c2:4f:40:3d:83:0b:b9:83:00:9a:d2:d4:97:5d:ba:
                    13:5f:83:22:99:a2:b9:f9:8a:9e:f9:bd:82:f0:e6:
                    d8:df:d0:a8:7d:75:e7:c8:8b:d1:84:05:30:1d:7e:
                    c0:ed:21:fd:9c:3e:5b:e7:8d:aa:09:0d:ce:7d:3f:
                    db:7e:54:ce:d9:00:f5:9c:5a:15:c2:d0:7d:ea:bd:
                    5a:77:99:ef:ed:5d:bf:a9:e0:d7:b5:4f:58:eb:ff:
                    07:c9:fa:f3:77:3e:5d:59:86:74:31:92:0e:f0:88:
                    40:36:3f:02:22:50:aa:1d:db:1c:95:2b:b6:bb:59:
                    78:ec:16:2d:f9:19:b7:83:d2:0b:8a:4f:0c:a2:ac:
                    1d:89:74:8a:e2:66:b1:2e:0a:68:f2:56:e8:40:86:
                    70:5b:79:ea:54:97:ef:f5:48:df:29:52:b5:db:ae:
                    52:b4:ad:08:84:cc:7d:8a:15:d9:07:fd:dd:7b:4a:
                    fb:ea:0c:ef:6a:d0:18:74:f2:5f:15:06:70:c1:58:
                    a0:60:87:06:79:77:75:05:1c:82:a5:91:ff:ee:2d:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:05:F2:35:55:AF:14:1E:D6:FB:7C:6F:1B:E1:8F:13:D0:E5:6E:54
            X509v3 Authority Key Identifier:
                keyid:EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:46:b5:63:d3:27:9d:8f:a7:54:0d:ec:ae:6f:86:1c:15:86:
         a9:df:ca:c4:a2:d8:88:5a:5d:6e:b0:34:fe:e1:7b:ba:b9:e5:
         6b:c0:fd:d6:b1:69:b8:9b:3f:19:fa:bb:bc:d0:51:eb:ea:59:
         a7:dc:11:70:33:50:a3:fb:9a:05:71:85:c5:41:6e:f0:1e:d9:
         ab:b0:84:16:83:75:98:ec:de:ff:65:c9:7b:49:bd:f9:fa:c4:
         18:05:7d:7f:6c:b0:4c:b1:92:83:a1:09:05:bd:ba:9c:18:9b:
         0e:98:86:c0:a5:16:4e:30:95:2e:61:d5:8e:92:0f:0e:41:d8:
         62:d7:ef:b6:56:50:4d:06:60:0a:fc:43:8d:c4:a1:8e:9c:a9:
         69:cd:19:24:52:4a:b9:d9:0f:d5:98:03:0c:92:96:c2:ec:5f:
         1c:02:0e:d5:f0:95:a1:d5:c2:e7:f3:40:2f:11:6f:f2:d9:d9:
         4a:8f:4c:1a:4c:49:e7:b2:a9:f2:70:4c:0c:22:c8:14:21:a7:
         71:79:ac:4f:dd:8e:0b:dd:21:67:1f:e7:a2:d1:bd:19:07:53:
         11:6c:7c:1e:4f:3f:6a:ad:63:24:cd:f5:87:41:e2:9b:aa:7f:
         df:52:ba:39:53:31:1f:c1:21:af:02:9c:1f:bc:3a:d6:1d:5a:
         08:6c:aa:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7Xx1EDic6cMEZ+yx3SoxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTU5Mzk3ZjVkNmFmZWRiYzhkOTE2NmFmZmViYjI4MDAw
OTFmOTQwHhcNMjYwNzI0MDcwMTA1WhcNMjYwNzI1MDcwMTA1WjAzMTEwLwYDVQQD
EygwMzA1ZjIzNTU1YWYxNDFlZDZmYjdjNmYxYmUxOGYxM2QwZTU2ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk4iUziggbK971dx3scif1qg+jLy
kjdp39hcH2yh0QDLicwaStETWw/5Wt7CT0A9gwu5gwCa0tSXXboTX4MimaK5+Yqe
+b2C8ObY39CofXXnyIvRhAUwHX7A7SH9nD5b542qCQ3OfT/bflTO2QD1nFoVwtB9
6r1ad5nv7V2/qeDXtU9Y6/8Hyfrzdz5dWYZ0MZIO8IhANj8CIlCqHdsclSu2u1l4
7BYt+Rm3g9ILik8MoqwdiXSK4maxLgpo8lboQIZwW3nqVJfv9UjfKVK1265StK0I
hMx9ihXZB/3de0r76gzvatAYdPJfFQZwwVigYIcGeXd1BRyCpZH/7i3cRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMF8jVVrxQe1vt8bxvhjxPQ5W5UMB8GA1UdIwQY
MBaAFO7lk5f11q/tvI2RZq/+uygACR+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VXVGxfWFdyLTI4alpGbXJfNjdLQUFKSDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yNDg5NmQtZTkwZC00OTAzLWFlNmUt
ZTdkZjk0ZTAyMjM0LzEvN3VXVGxfWFdyLTI4alpGbXJfNjdLQUFKSDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8yNDg5NmQtZTkwZC00OTAzLWFlNmUtZTdkZjk0ZTAyMjM0
LzEvN3VXVGxfWFdyLTI4alpGbXJfNjdLQUFKSDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0a1Y9Mn
nY+nVA3srm+GHBWGqd/KxKLYiFpdbrA0/uF7urnla8D91rFpuJs/Gfq7vNBR6+pZ
p9wRcDNQo/uaBXGFxUFu8B7Zq7CEFoN1mOze/2XJe0m9+frEGAV9f2ywTLGSg6EJ
Bb26nBibDpiGwKUWTjCVLmHVjpIPDkHYYtfvtlZQTQZgCvxDjcShjpypac0ZJFJK
udkP1ZgDDJKWwuxfHAIO1fCVodXC5/NALxFv8tnZSo9MGkxJ57Kp8nBMDCLIFCGn
cXmsT92OC90hZx/notG9GQdTEWx8Hk8/aq1jJM31h0Him6p/31K6OVMxH8EhrwKc
H7w61h1aCGyqtw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:58 2026 by rpki-client