Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
File:                     7UV_lpwP7DW5JtD3KkfdRLizAPU.mft (raw, json)
Hash identifier:          f06AndikCzuhDkJG2npL7r1QuS8DzdYj47wZWdieP+M=
Subject key identifier:   55:C3:0D:70:35:AF:40:46:4D:F3:59:3E:86:F2:7C:93:BD:F7:01:E3
Authority key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
Certificate issuer:       /CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Certificate serial:       019F90FF370723F0AA22CA5FBBCFE3F8C844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 22:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:12 +0000
Files and hashes:         1: 7UV_lpwP7DW5JtD3KkfdRLizAPU.crl (hash: 0ssp05S7EdSs/16DDx+TFlFWoSFY779SQ/MUGSitijA=)
                          2: kp3XcltFj2ImgK1gmThwB5Z5ALI.roa (hash: iZZ4tNwYuV01qlmFMVC72STH5TgwevyCIeA37xL2VKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:37:07:23:f0:aa:22:ca:5f:bb:cf:e3:f8:c8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
        Validity
            Not Before: Jul 23 22:01:12 2026 GMT
            Not After : Jul 24 22:01:12 2026 GMT
        Subject: CN=55c30d7035af40464df3593e86f27c93bdf701e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fd:c8:51:6c:3a:0d:4a:fb:57:34:48:76:2d:
                    bc:e1:e7:0c:4a:4f:44:06:a0:bd:70:5b:fb:82:1b:
                    44:63:77:44:3c:93:f2:cb:a6:de:21:fb:be:02:8b:
                    9c:98:e3:38:b4:2a:5c:cc:f1:db:aa:ce:f9:ed:35:
                    3a:18:f6:70:fb:3b:2d:5e:5d:18:da:23:66:f6:43:
                    ca:0b:42:d2:d3:1c:e5:aa:ad:73:7c:95:64:56:bf:
                    47:93:d6:67:0c:9b:34:43:4c:6a:80:52:8e:1b:57:
                    5d:6d:23:da:ac:f2:1f:b6:03:fc:5b:0d:5a:e4:17:
                    c0:9a:33:35:20:8d:03:38:c7:21:02:f6:f9:a3:0d:
                    6c:ad:4d:3c:c0:30:75:13:ef:6a:f9:c4:26:32:f3:
                    3c:62:4f:ae:e5:15:ac:20:e8:cd:18:1d:b1:3c:a9:
                    8f:d0:64:ca:bb:0f:6a:fa:c6:3f:7c:be:c3:7f:d8:
                    34:5f:ec:47:c0:5f:8d:84:1d:05:cd:03:bc:b2:44:
                    6f:15:ad:6d:58:41:00:a3:e9:78:be:d1:16:ee:fd:
                    a2:2c:1e:ca:34:37:88:a6:c5:31:84:05:84:62:7a:
                    e1:84:b5:ef:f6:7b:10:1c:2e:ec:b9:b0:bc:d5:51:
                    ec:35:49:d6:3f:f0:ae:b1:de:43:53:24:24:9c:20:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C3:0D:70:35:AF:40:46:4D:F3:59:3E:86:F2:7C:93:BD:F7:01:E3
            X509v3 Authority Key Identifier:
                keyid:ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c5:76:07:c3:c1:44:3f:0e:1b:03:75:4c:0e:bd:69:d9:0e:
         52:7a:60:d7:19:5a:ed:60:30:6c:62:61:9b:48:ae:0f:84:49:
         89:38:52:76:59:a0:fd:f3:ca:b1:62:e5:e0:c3:2a:d9:07:5b:
         4f:a4:0b:1e:2c:15:47:73:98:13:d3:39:11:a8:75:94:07:57:
         45:1b:9e:9e:d7:d6:5e:4f:cd:a7:35:68:ac:31:bb:9e:1a:2c:
         4a:59:3f:e7:39:46:bd:77:04:9a:ed:e2:7b:58:7e:08:9c:94:
         a4:26:aa:02:33:94:20:82:10:86:81:b5:5d:64:08:2a:04:8c:
         b5:6f:e2:c9:e9:b6:40:3e:71:01:14:83:a2:11:e0:f5:a7:27:
         d1:24:ad:46:5e:2a:59:a5:e7:ac:fd:67:81:ea:8e:d8:5c:86:
         02:ed:dc:cc:a4:da:a9:de:14:d9:ac:b3:8c:e8:ab:00:a1:72:
         2b:5a:85:95:f6:0a:1e:cc:03:82:d6:95:05:ee:b1:93:eb:94:
         41:1f:6c:5a:0f:ae:5d:ca:d9:96:c6:1c:30:40:3c:08:03:62:
         3c:32:0a:16:2d:c6:37:df:86:63:4c:2f:b4:0c:91:1c:cf:12:
         87:2c:1f:da:f9:f8:a1:85:1a:a0:5e:6e:5a:34:5d:08:5e:da:
         bc:25:5d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:30:46 2026 by rpki-client