Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
File:                     56uLgItVmzffK-5YgugcjBUvW9c.mft (raw, json)
Hash identifier:          h9eAFyW+RV77k3PZe6DnFpuSvycGQ/KlM0sCvdB5w7M=
Subject key identifier:   D0:17:1E:E8:5D:A3:46:34:C8:6D:31:9D:C3:E4:D6:68:B5:32:1C:05
Authority key identifier: E7:AB:8B:80:8B:55:9B:37:DF:2B:EE:58:82:E8:1C:8C:15:2F:5B:D7
Certificate issuer:       /CN=e7ab8b808b559b37df2bee5882e81c8c152f5bd7
Certificate serial:       019F8F7E57CB79A637324833526ADA874013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
Manifest number:          017B
Signing time:             Thu 23 Jul 2026 15:00:49 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:49 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:49 +0000
Files and hashes:         1: 56uLgItVmzffK-5YgugcjBUvW9c.crl (hash: 4JVkZsakrtdqMoxRGYs8gw0Z+88BJT2eciBCB6YMLjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:57:cb:79:a6:37:32:48:33:52:6a:da:87:40:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ab8b808b559b37df2bee5882e81c8c152f5bd7
        Validity
            Not Before: Jul 23 15:00:49 2026 GMT
            Not After : Jul 24 15:00:49 2026 GMT
        Subject: CN=d0171ee85da34634c86d319dc3e4d668b5321c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:ba:87:b6:e8:ac:b0:b2:75:29:eb:c5:9d:
                    89:28:6f:7a:68:d2:78:43:7e:b8:00:0a:99:d5:c5:
                    6e:c5:7a:4b:10:79:58:a1:b1:5f:eb:80:39:b7:f6:
                    95:40:d1:b2:f5:53:2a:84:a2:f8:a9:22:3b:6a:3e:
                    1f:94:70:f7:8f:44:15:9a:d9:24:85:d3:34:dc:fe:
                    4f:be:2a:37:80:35:b7:bd:93:11:0a:9d:42:8d:c3:
                    9a:f6:38:a9:a3:4d:d2:dc:e5:0a:0f:af:8b:16:db:
                    4e:27:fe:1b:d4:0d:8e:6c:f3:6f:5d:87:c8:cf:fc:
                    8d:cc:ca:5b:91:b2:b8:b7:55:ed:60:ea:60:52:80:
                    a0:67:cb:aa:b4:d0:83:3a:3b:8e:27:26:4a:8e:51:
                    dc:88:36:fb:c0:1a:2d:07:ad:1e:5f:54:d6:c9:ef:
                    07:14:f5:2e:59:02:93:74:4a:ea:ba:a4:5f:52:11:
                    32:0e:df:b6:cc:ff:37:ab:11:5e:90:d3:fc:80:3f:
                    39:db:84:bb:c4:d6:7e:0f:ec:c5:f7:05:6a:a2:a2:
                    2b:01:86:d9:7c:f5:20:44:62:10:a9:b9:04:cf:36:
                    77:90:fe:39:48:c2:5d:7b:f2:b9:a2:e9:3f:32:91:
                    f9:4d:4a:9d:0c:f2:fb:8f:95:47:bb:c1:c3:86:d5:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:17:1E:E8:5D:A3:46:34:C8:6D:31:9D:C3:E4:D6:68:B5:32:1C:05
            X509v3 Authority Key Identifier:
                keyid:E7:AB:8B:80:8B:55:9B:37:DF:2B:EE:58:82:E8:1C:8C:15:2F:5B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:07:d5:ed:62:7b:8b:7b:10:79:59:9d:8c:ca:6f:e6:65:54:
         01:cb:99:ff:d5:02:46:f5:6b:48:e2:0d:aa:ab:5b:4f:09:f9:
         67:6b:12:cc:0c:62:ca:3a:58:18:32:47:9a:c5:37:aa:f5:69:
         cd:1d:95:df:c9:95:d5:ba:91:e6:c9:32:e4:ad:a7:fc:ee:ff:
         11:df:c7:ee:1a:fa:c0:2c:2c:05:49:5c:48:04:74:7a:df:0b:
         44:c3:9a:dc:28:ef:6c:de:62:2b:cf:8b:b9:11:f6:d1:15:6d:
         69:c0:22:45:f4:a4:cd:bd:b3:f4:5c:72:90:25:36:0c:9a:bb:
         18:b8:e5:27:a4:36:09:37:15:84:45:c7:af:ab:a1:9f:2d:2b:
         2a:3a:6c:9e:4b:a5:33:61:f8:f1:85:5b:21:f4:22:7e:71:87:
         c7:4e:fc:0f:8a:d2:20:4e:21:93:d3:b4:dd:53:4e:c6:2c:e1:
         b3:e0:ba:96:aa:74:6e:5e:5b:ea:61:b0:3b:19:0a:bd:b4:bd:
         40:32:cf:bd:01:3b:b3:ef:f6:90:11:c9:04:8d:4e:41:d6:c8:
         a6:40:29:85:f6:19:1d:8d:ca:fc:e6:7b:bb:7b:04:78:8c:e8:
         c9:d9:a8:ac:ae:ef:d4:54:2f:62:9f:04:6a:12:29:08:8a:00:
         07:cf:49:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:13 2026 by rpki-client