Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
File:                     U7EFBlwNkTm1_-3DLJAM9ktDEus.mft (raw, json)
Hash identifier:          6ofy7uH56jne0WWxgwbC54W+u+C5w7cvM0J9FYKonXQ=
Subject key identifier:   8C:5D:F6:C1:0F:6A:02:F2:AB:D3:F5:D6:D0:BA:07:48:FA:83:69:5F
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Certificate issuer:       /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial:       019F921167BDD816D85EFDD38131B4B03E95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 03:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:41 +0000
Files and hashes:         1: U7EFBlwNkTm1_-3DLJAM9ktDEus.crl (hash: mi8lhaSXsZSmvqQBvSOBTO+qBkUEI7mmZ/vy1C7tiAw=)
                          2: aVXhAizmDepCVOoLPu585d5UOlQ.roa (hash: YB+GHVOhQos2qu1NUzfo9daXC5WuIe75DyabTVAx7KA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:67:bd:d8:16:d8:5e:fd:d3:81:31:b4:b0:3e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
        Validity
            Not Before: Jul 24 03:00:41 2026 GMT
            Not After : Jul 25 03:00:41 2026 GMT
        Subject: CN=8c5df6c10f6a02f2abd3f5d6d0ba0748fa83695f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:9e:03:0d:48:69:1c:dd:fb:bf:24:af:af:
                    17:11:8a:6b:35:84:e5:46:63:ae:31:94:3a:2c:a1:
                    f1:39:10:f1:8b:9c:7f:53:c0:d0:e5:1b:65:d5:d4:
                    89:b4:24:6f:e6:00:66:46:7d:17:d3:f9:30:73:57:
                    7d:1c:06:59:51:1a:4a:e3:21:6f:a9:2a:bd:08:13:
                    f3:bd:78:55:82:1f:32:6d:2f:eb:c8:ef:d4:78:a8:
                    24:b1:48:35:37:51:a6:49:69:78:18:61:91:7c:67:
                    10:46:76:e3:4f:29:ae:24:38:fb:63:d6:5a:36:df:
                    91:8a:4f:e1:98:73:c8:68:e9:11:e9:99:5e:af:19:
                    cd:20:0e:04:1a:8a:0c:5b:2b:a4:e4:a3:9b:f3:2a:
                    ea:89:a0:ed:5c:f7:90:3e:7f:4f:17:df:f6:bc:10:
                    3d:18:0a:ff:5b:ee:38:12:60:43:6a:38:66:85:62:
                    6d:56:ff:2c:ec:11:11:ef:42:80:b3:dc:8d:26:d5:
                    e0:ea:d6:d1:a9:54:3b:b3:5c:6c:dd:73:a0:a8:0c:
                    4b:3f:c8:90:97:5e:ed:68:2b:3f:8c:5c:95:cc:25:
                    5e:21:5a:38:20:2d:5e:1a:08:cd:20:84:86:e3:7b:
                    3e:6a:0f:6a:da:90:6d:ee:a0:82:09:eb:c9:d3:75:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5D:F6:C1:0F:6A:02:F2:AB:D3:F5:D6:D0:BA:07:48:FA:83:69:5F
            X509v3 Authority Key Identifier:
                keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f8:c8:90:1d:89:55:d5:e6:72:ad:5d:6c:7a:5a:a0:71:ec:
         13:03:a5:61:4f:74:f2:ca:0d:b4:b3:b4:15:8c:96:82:d5:bc:
         c1:b5:55:16:6d:dd:84:4e:8e:8c:13:0d:7d:16:39:4f:e1:74:
         eb:05:46:82:f3:58:d8:48:41:95:a1:ba:3b:c6:40:7f:17:65:
         d7:3b:50:94:e7:40:fa:8d:66:3a:f9:57:b3:7b:b7:7d:33:72:
         f7:a9:8d:77:56:af:b7:12:7d:18:fd:52:77:91:9c:f0:03:56:
         58:be:10:b6:b8:d6:d0:0b:b4:44:4b:6d:94:31:9d:96:3d:ce:
         4e:20:bd:21:cb:69:90:12:aa:31:65:33:08:c3:d0:37:77:f4:
         b0:d5:98:b9:25:fa:26:ab:29:1b:90:5c:81:a6:95:83:95:57:
         4b:c0:8b:7c:5e:6e:9a:48:8d:e4:52:72:fc:5e:b5:8d:9c:9b:
         c0:f3:fa:bc:92:6a:fe:07:3e:02:de:61:2a:83:f6:79:98:af:
         25:49:b3:5b:bb:85:1f:b9:15:36:df:aa:fc:45:49:41:40:5c:
         48:fb:f9:28:a2:f4:f9:ff:6e:4a:d2:00:20:89:ab:63:b4:dc:
         9c:ad:c7:16:45:73:d1:91:59:1b:b9:61:ed:84:56:f5:21:d4:
         a0:5d:37:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:34 2026 by rpki-client