Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File:                     1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier:          8FgIjmygqophGXnsd5t34hzIwIl0PSPiO++gepSyYfc=
Subject key identifier:   A8:62:78:F2:5E:C1:53:A3:54:C4:A5:DC:E9:ED:BA:D6:64:56:D5:4D
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer:       /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial:       019F8F10F64AABDD2BAB11C1533D250A7D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number:          12EA
Signing time:             Thu 23 Jul 2026 13:01:21 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:21 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:21 +0000
Files and hashes:         1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: 6ERVjW7P23JqWtsN4NIsALokMemgrHjQPA63YBnX5+U=)
                          2: ze0YKIttxdbb_tzXyBtFJFW9zEs.asa (hash: agef/IONDj13ZajBLv9pJjFF+eXEWrm28J4AErVUvUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:f6:4a:ab:dd:2b:ab:11:c1:53:3d:25:0a:7d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
        Validity
            Not Before: Jul 23 13:01:21 2026 GMT
            Not After : Jul 24 13:01:21 2026 GMT
        Subject: CN=a86278f25ec153a354c4a5dce9edbad66456d54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:2a:07:8b:3a:bf:18:7d:ec:c1:a6:7a:9c:
                    d3:fa:e1:19:45:c3:1e:d1:bd:72:53:35:f6:ce:eb:
                    49:5b:6f:b9:ae:83:21:24:87:2f:af:fb:92:9f:b1:
                    1d:35:c2:f9:11:de:f7:15:1f:7f:17:c0:6c:77:80:
                    d5:a2:60:69:57:19:a5:88:55:42:f8:06:d0:83:e3:
                    ec:c1:84:08:5a:d0:41:1f:1a:59:e6:0e:89:c0:7d:
                    ca:a5:ca:f7:f4:61:dd:ec:27:cf:58:09:67:d4:a7:
                    2a:cf:a0:b7:81:58:a4:be:0b:07:5e:0b:fd:e5:17:
                    fe:b4:e0:24:9f:01:24:b4:b9:b0:96:28:dd:4b:aa:
                    36:c1:c8:f9:fc:a4:6f:c2:e1:64:b9:5a:45:41:45:
                    07:b3:47:0a:f9:26:77:01:a4:cb:73:83:73:66:e8:
                    c6:38:9e:60:a3:72:b8:44:a4:1a:7c:c8:33:55:87:
                    72:d1:b5:c6:58:21:48:64:24:ec:1f:cc:fe:70:47:
                    09:d8:12:e2:8b:be:bf:d4:ab:3a:9e:2a:1e:b0:86:
                    5e:4e:2d:8e:c4:c9:25:2a:2b:90:e5:c3:c5:f5:40:
                    b6:3d:f0:20:0d:93:a2:a5:ff:83:7d:b0:75:c1:c4:
                    d2:45:34:58:42:85:2a:56:43:2b:44:51:0f:ce:59:
                    1b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:62:78:F2:5E:C1:53:A3:54:C4:A5:DC:E9:ED:BA:D6:64:56:D5:4D
            X509v3 Authority Key Identifier:
                keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:86:b1:52:41:7b:02:2b:fc:2b:d1:02:86:98:a7:72:4c:80:
         45:89:d1:1f:6d:2c:a1:40:d6:6e:98:a8:63:42:19:4a:fd:cc:
         ab:59:a2:49:3f:b3:96:61:41:de:ad:12:97:44:18:68:0d:0c:
         29:5f:a1:6f:61:eb:b5:0a:32:42:ed:8a:e7:33:fb:46:f0:37:
         9c:17:c7:d8:5d:1e:b7:ab:f9:24:a9:9d:82:3b:63:1f:e0:8c:
         83:c1:75:71:bf:a5:e9:f6:8a:a9:3e:38:3c:75:cb:74:7c:99:
         97:50:89:e9:b6:4f:c2:69:dc:49:9a:93:ef:30:bd:c3:85:cd:
         96:9b:56:29:09:18:95:ec:00:0c:a6:78:69:40:4d:f0:cd:f9:
         1e:fb:fa:42:32:5f:19:ae:40:12:5d:03:84:71:d6:5b:b7:95:
         56:11:b0:f8:8f:ee:3e:be:b9:de:3a:e3:62:a2:6c:b7:2e:a7:
         65:3e:c8:13:55:6e:1e:d4:a9:fd:6c:fb:15:7a:a1:7a:17:9f:
         44:66:5b:5d:2b:1d:49:c9:0e:17:a4:c0:ee:38:9d:46:98:85:
         ca:de:43:22:27:a4:5e:1f:33:b2:b4:cd:90:b9:28:e0:f4:a1:
         5c:07:32:5e:54:bc:c1:0d:c7:12:79:25:a6:41:c6:7a:34:99:
         79:ae:37:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:09:06 2026 by rpki-client