Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/701166-8afb-492d-ba5f-215ee6afb302/1/AcQuR8_k4zEj6_9C13NThS7t0qQ.mft
File:                     AcQuR8_k4zEj6_9C13NThS7t0qQ.mft (raw, json)
Hash identifier:          19iwvi11VSH9gMPdMYmHO03r2rHD5LJGrlcKQZvJq68=
Subject key identifier:   7B:DC:DF:63:11:48:79:BD:50:AF:A2:22:EB:FA:39:6F:5C:7A:D0:99
Authority key identifier: 01:C4:2E:47:CF:E4:E3:31:23:EB:FF:42:D7:73:53:85:2E:ED:D2:A4
Certificate issuer:       /CN=01c42e47cfe4e33123ebff42d77353852eedd2a4
Certificate serial:       019F8F1066F4EEC6D90436F4C02005B5B1B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcQuR8_k4zEj6_9C13NThS7t0qQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/701166-8afb-492d-ba5f-215ee6afb302/1/AcQuR8_k4zEj6_9C13NThS7t0qQ.mft
Manifest number:          04
Signing time:             Thu 23 Jul 2026 13:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:44 +0000
Files and hashes:         1: AcQuR8_k4zEj6_9C13NThS7t0qQ.crl (hash: WaTxFzWkw1oyYNaVB73/ZaWlUFuylKVfJRUU7W2phAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/701166-8afb-492d-ba5f-215ee6afb302/1/AcQuR8_k4zEj6_9C13NThS7t0qQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/701166-8afb-492d-ba5f-215ee6afb302/1/AcQuR8_k4zEj6_9C13NThS7t0qQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcQuR8_k4zEj6_9C13NThS7t0qQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:66:f4:ee:c6:d9:04:36:f4:c0:20:05:b5:b1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c42e47cfe4e33123ebff42d77353852eedd2a4
        Validity
            Not Before: Jul 23 13:00:44 2026 GMT
            Not After : Jul 24 13:00:44 2026 GMT
        Subject: CN=7bdcdf63114879bd50afa222ebfa396f5c7ad099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:43:ef:96:98:b5:e1:d1:a2:10:a4:6c:44:
                    e0:3c:72:f4:e0:14:95:9e:6d:40:9e:b0:66:0d:04:
                    8e:15:cc:a5:6b:7c:bb:cf:1f:a5:b3:75:ba:1a:57:
                    8c:3c:54:63:fe:93:32:f9:c6:41:7b:39:3f:5d:3b:
                    5c:ea:b4:82:06:18:54:4e:61:04:ca:17:e9:5b:36:
                    68:b1:63:86:65:ad:de:25:f3:b0:5b:14:9d:c5:df:
                    83:80:d3:b4:d3:17:f4:3e:50:75:b4:c0:db:26:96:
                    a2:6e:50:e2:6a:29:0f:1f:f6:ed:5f:b4:77:fe:86:
                    79:ef:48:51:18:17:2d:0e:4a:0b:ca:84:fb:40:38:
                    d1:ff:e9:f4:35:bc:1d:a7:25:e9:b7:ed:ea:bb:cb:
                    1e:e7:9f:e1:94:63:83:c9:51:55:43:1f:fa:e4:ff:
                    ec:df:d4:9f:31:25:27:9d:94:0b:d2:ef:99:c9:e7:
                    a9:d8:a4:af:65:f8:13:8b:e5:09:f5:75:ea:5a:b3:
                    56:c6:5e:60:41:c8:7c:f8:23:f5:9a:7a:ed:94:bf:
                    e7:94:df:2e:d4:e2:eb:31:38:23:57:d0:8b:46:aa:
                    05:1b:9d:f5:9f:f0:3d:b6:f3:33:b5:27:b6:c2:43:
                    16:41:a6:cd:f7:e2:7a:42:aa:b3:f2:5c:07:60:37:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DC:DF:63:11:48:79:BD:50:AF:A2:22:EB:FA:39:6F:5C:7A:D0:99
            X509v3 Authority Key Identifier:
                keyid:01:C4:2E:47:CF:E4:E3:31:23:EB:FF:42:D7:73:53:85:2E:ED:D2:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcQuR8_k4zEj6_9C13NThS7t0qQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/701166-8afb-492d-ba5f-215ee6afb302/1/AcQuR8_k4zEj6_9C13NThS7t0qQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/701166-8afb-492d-ba5f-215ee6afb302/1/AcQuR8_k4zEj6_9C13NThS7t0qQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:1f:93:7d:93:2e:ce:55:ba:e3:a7:83:82:18:50:09:07:46:
         e3:a4:87:5e:da:f0:2c:00:fb:0d:d9:ff:7c:fb:55:7b:0e:78:
         ef:69:b5:42:53:de:ec:67:44:b7:dc:a7:a7:7d:c1:cf:a9:8a:
         16:a4:f7:11:cc:ac:a1:85:1e:a2:9d:c5:fb:4e:c0:f9:5f:ad:
         a1:d7:f8:c0:bc:fd:81:c3:d7:af:89:c3:7e:25:88:00:bd:d7:
         35:44:ec:0f:af:d9:21:87:d1:b7:0c:ec:11:a8:5a:80:98:4b:
         d4:ba:e4:34:f6:75:38:ac:74:54:02:a9:27:4c:61:b5:ec:1e:
         f6:b9:9f:35:81:b3:24:1c:9f:91:29:42:e9:e9:a6:52:dc:7d:
         17:c2:03:8a:9e:35:4d:f2:3d:63:48:8a:58:03:7a:da:4c:1e:
         31:48:66:50:7d:c4:f1:99:44:3a:31:6e:5e:3f:c2:d9:51:0c:
         1e:92:50:14:d1:9c:2a:a7:73:1f:43:a6:b4:f2:91:c9:95:3e:
         29:38:92:ef:30:1c:36:0d:b2:8f:cb:3a:dc:dd:6d:1a:68:d7:
         c9:c4:9a:75:c3:4b:c2:48:86:ba:16:6a:fb:04:57:ae:98:35:
         3c:82:06:31:e1:9d:fe:bb:6e:ea:7d:f9:0d:09:ba:21:bd:7c:
         aa:3b:36:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:59:23 2026 by rpki-client