Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File:                     1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier:          GzIkqsBXggUApE/FYPPAgA4m7vwMf6/LilQnjdhEcC4=
Subject key identifier:   35:FB:12:BD:FC:67:B6:46:89:5B:A8:41:21:39:CB:7F:06:1A:99:19
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer:       /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial:       019F9059E7B4B27622FFEAE437FFC6A27223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number:          13C1
Signing time:             Thu 23 Jul 2026 19:00:38 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:38 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:38 +0000
Files and hashes:         1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: 6OXHwfHq/ZXPSfmZupbUzpGPmE94tr+0w+yFDF/IIco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:e7:b4:b2:76:22:ff:ea:e4:37:ff:c6:a2:72:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91084f454139347933876d52634b41a1dd099db
        Validity
            Not Before: Jul 23 19:00:38 2026 GMT
            Not After : Jul 24 19:00:38 2026 GMT
        Subject: CN=35fb12bdfc67b646895ba8412139cb7f061a9919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:c7:cb:52:a6:c5:ea:22:e8:5f:ae:f3:32:
                    03:82:83:a1:e4:e1:c6:58:dd:27:8a:59:f0:1b:4e:
                    11:78:82:cc:a1:ef:1a:c6:f7:37:b9:02:ed:bb:22:
                    5b:c8:be:a2:e2:dd:71:c2:27:3d:1a:43:e4:d8:93:
                    f1:db:6b:50:48:e9:84:b2:85:78:ff:6b:be:69:ee:
                    c9:33:77:ec:65:20:08:7e:66:c6:e3:f0:54:9d:97:
                    ad:a6:bb:a8:0d:d0:6f:c3:38:96:cb:d8:85:c8:aa:
                    be:a3:61:88:c6:c8:e0:5b:57:06:4a:6e:f5:e3:42:
                    0a:35:b7:63:f0:27:02:17:32:41:26:0d:aa:9b:b7:
                    6c:77:04:74:f4:5b:2b:8d:30:87:e6:88:b2:b3:c1:
                    1f:93:93:36:bf:e0:9a:29:1c:86:e3:ab:d7:d6:99:
                    6b:a2:5e:57:6e:a9:d2:57:c8:0c:74:1b:7d:cc:ed:
                    49:1b:70:f2:fe:d1:8d:0c:38:9a:2d:fb:c3:34:f0:
                    1d:05:f0:80:38:d8:fa:cc:18:9c:09:15:3e:f3:57:
                    7a:32:4c:a5:91:b4:e8:27:cf:8a:b6:8c:ea:ac:2a:
                    ef:fb:c5:99:e6:08:47:68:59:41:43:7d:c5:ed:65:
                    74:98:39:05:32:82:c9:86:e6:3c:3c:6e:90:11:2b:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FB:12:BD:FC:67:B6:46:89:5B:A8:41:21:39:CB:7F:06:1A:99:19
            X509v3 Authority Key Identifier:
                keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:09:d6:77:34:3e:ec:c1:c8:0c:27:a2:5b:82:58:bd:cc:22:
         04:e9:5a:10:da:b0:e7:a6:89:d1:9f:22:03:9d:c6:e1:ef:38:
         ae:83:03:e6:44:11:98:5f:67:48:fc:68:68:ba:1b:50:d5:e6:
         18:16:ab:69:a7:08:b6:54:af:3c:28:28:6d:f2:18:52:91:74:
         00:70:bb:b5:ca:3e:6a:65:9c:48:7e:ef:48:c9:d1:e0:9b:9f:
         b5:57:dd:36:52:63:0a:63:f3:15:30:1b:1a:0c:9a:e0:db:ca:
         5d:2a:fb:85:d3:bc:12:9b:8f:20:52:7b:40:5f:08:74:fc:49:
         9b:b7:55:5e:fb:76:0d:0c:5a:d8:10:a0:52:97:f4:6e:36:52:
         2f:7a:c5:fb:08:bd:b6:22:14:13:77:ef:f9:f3:50:6a:53:e2:
         b2:a1:5a:8c:e3:c3:dc:9e:d6:86:50:59:e5:b8:b1:e7:cf:4a:
         16:78:b8:df:71:be:0b:60:66:78:11:0d:57:71:75:fc:e8:23:
         0e:d6:ad:4b:f7:0f:b8:7c:f3:84:5d:5b:79:6e:52:34:11:9b:
         6a:74:7a:ce:ef:c5:0c:30:27:06:c2:97:38:cb:15:18:21:ea:
         d1:a3:19:c8:96:40:e5:e5:bc:da:d2:41:ba:60:f5:00:6e:60:
         6e:c9:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:57 2026 by rpki-client