Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File:                     59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier:          31VU8Byfe30I/wjO0zVJ8stdJNTYmLYX47reo9KEt9w=
Subject key identifier:   C7:F4:CE:19:D3:CF:97:12:C0:59:92:CD:0C:82:18:26:CD:9A:7E:81
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer:       /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial:       01A0D1926A83F14AF7507CC162FE79D52113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number:          18B1
Signing time:             Thu 24 Sep 2026 04:00:28 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:28 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:28 +0000
Files and hashes:         1: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: jzpeAAJJQ6KXcC2gF5iGA1HwtOuDsqqngJj0WsIWTKY=)
                          2: KMWFIlQC6ib8yekqMVKEQLoSRCk.roa (hash: 29tTxMBE8uiY+In8DyCrSX4qq9Iv9YNEkKYRZQmc7CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:6a:83:f1:4a:f7:50:7c:c1:62:fe:79:d5:21:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
        Validity
            Not Before: Sep 24 04:00:28 2026 GMT
            Not After : Sep 25 04:00:28 2026 GMT
        Subject: CN=c7f4ce19d3cf9712c05992cd0c821826cd9a7e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:94:60:e7:ae:68:f3:15:72:5c:81:49:e4:
                    e2:e7:64:55:12:9f:75:d4:ba:a1:95:1a:d9:d5:c7:
                    3c:e9:cb:5c:e4:5d:4b:3d:db:c2:ef:99:34:4e:62:
                    50:3e:92:b7:1b:fc:ae:e3:12:05:b9:cf:c0:a5:95:
                    14:03:9f:29:c3:50:82:1f:ab:81:a9:d3:8b:fc:4e:
                    06:ae:3d:be:30:6c:09:a7:52:60:14:e0:4b:df:94:
                    2e:fb:13:ef:55:3c:ea:4b:eb:d8:15:41:57:cf:43:
                    2c:87:2e:0b:81:31:d7:c1:41:cd:e3:7f:a2:1d:39:
                    55:cb:8b:36:4a:51:c0:99:33:f6:69:77:7c:15:93:
                    19:b3:a0:6a:4a:9f:4e:d0:91:bd:f0:03:6c:05:1c:
                    96:58:69:05:30:4f:25:3c:88:6e:d1:83:fb:0d:fb:
                    30:f8:ed:2e:b9:45:1c:db:32:4b:ab:f7:2f:57:cb:
                    7c:8a:20:fb:7d:4f:0c:df:9e:b3:b6:f9:b0:cb:be:
                    9c:c0:05:0b:4f:c0:e2:a6:4e:29:bc:d9:8b:20:98:
                    32:85:66:2b:60:07:bd:e5:84:48:e3:60:85:fa:de:
                    8d:49:3f:00:6e:a1:19:30:c8:e0:a4:d3:74:f2:61:
                    72:97:29:c9:92:6a:ee:44:4a:4d:37:6c:b1:bd:d2:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F4:CE:19:D3:CF:97:12:C0:59:92:CD:0C:82:18:26:CD:9A:7E:81
            X509v3 Authority Key Identifier:
                keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:08:b5:ee:a9:b4:a7:b4:8e:33:57:3b:2b:f2:62:53:fa:37:
         6c:6b:a2:6b:5f:36:93:25:51:32:c2:da:35:b7:37:e4:cb:0e:
         38:68:ed:c1:0e:fd:63:f6:4f:ed:37:08:da:2e:7f:e5:75:98:
         2b:fb:21:70:a7:f4:6a:86:09:12:96:a6:ad:fe:a7:7f:17:95:
         c6:22:d2:7f:86:54:27:65:be:96:b3:24:d4:ea:fa:14:9f:c3:
         ef:af:f8:15:c6:e6:3c:35:cc:f0:ec:47:63:21:ec:03:64:a0:
         2a:76:ad:8c:89:2a:8f:21:db:ad:b6:f9:71:dc:05:72:ee:4e:
         aa:9e:2b:4e:ac:d2:91:56:0c:71:28:d4:1b:2a:de:0b:54:2e:
         ae:69:80:7a:9c:30:79:13:f9:33:5c:6a:b4:84:29:24:8d:6c:
         8c:f3:da:d4:76:e6:5d:92:b8:d4:45:d7:50:13:49:b8:7c:0d:
         e4:4c:f7:30:f0:00:d9:1d:36:4e:1e:1b:f8:dd:3c:e6:d3:a1:
         87:f9:81:ba:42:27:63:f6:d1:9c:3f:6d:e3:e4:7e:6d:aa:bc:
         da:ef:68:82:59:e2:b6:cd:c7:4b:97:e8:87:cc:29:af:40:d3:
         4e:97:e9:dc:a1:e7:f8:cf:6c:c9:9c:83:ae:9e:bf:8b:5e:c6:
         f8:77:82:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:50:57 2026 by rpki-client