Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File:                     718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier:          cr58OsNl+ONd5sMrKfrddt/75fbSQiAiTGTecGKY6Pg=
Subject key identifier:   90:12:4F:69:04:07:F9:D4:97:67:C4:64:54:06:9B:7E:D8:AC:B5:7B
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer:       /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial:       019F909112F99B9F2F8AF2D073148BD82AF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number:          13BF
Signing time:             Thu 23 Jul 2026 20:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:54 +0000
Files and hashes:         1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: 6GtHRDgfwUeLuTT8zByeM1K+Cdf/nIEfXlm70ugG6Rw=)
                          2: eqWOG9zATDE6vua6nCdpCj8d9tU.roa (hash: c/ceJ8EEg4SDQlrPP9l4Ag70f5QrPY73Z9EWNEH2NF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:12:f9:9b:9f:2f:8a:f2:d0:73:14:8b:d8:2a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
        Validity
            Not Before: Jul 23 20:00:54 2026 GMT
            Not After : Jul 24 20:00:54 2026 GMT
        Subject: CN=90124f690407f9d49767c46454069b7ed8acb57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:b5:f4:8f:41:1a:e9:70:33:2f:15:23:0e:
                    f5:0c:19:3f:4d:c2:00:5e:54:8e:d8:63:9f:40:30:
                    f6:d0:3e:ec:c4:74:81:3e:99:af:44:ea:be:95:eb:
                    05:d1:f7:8e:55:00:3b:a9:c7:37:10:49:56:e4:49:
                    53:44:75:8b:52:e2:bc:5a:92:b0:82:34:00:55:20:
                    86:b8:44:50:a3:81:ed:cd:71:e2:b4:8f:8a:c4:1d:
                    d5:4d:f6:ea:62:3c:0c:17:d2:6c:1a:14:88:93:ce:
                    8a:c7:53:1c:6c:31:2f:46:d8:9f:14:75:91:76:00:
                    46:25:5c:f0:4d:71:ff:69:62:96:19:43:a3:a6:a0:
                    29:84:88:fb:c0:78:a5:39:33:1e:2d:63:5c:1e:b5:
                    af:f1:8f:35:57:33:dc:a0:bf:ae:10:4f:8f:22:d4:
                    8b:0d:29:3e:07:7f:c0:2a:b6:6f:b5:b6:6a:7c:a9:
                    45:32:d0:f3:28:34:38:66:29:75:f5:3e:44:32:6e:
                    37:50:37:b5:0d:e0:8a:32:00:86:d8:18:04:c1:66:
                    3c:78:4a:61:5c:f0:5b:c4:b0:ec:61:c5:74:a8:ca:
                    17:dd:5f:8f:b9:c7:a1:97:4d:ac:64:dd:ba:09:50:
                    fe:19:21:94:4e:c8:9c:74:59:f6:5f:f0:c1:52:72:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:12:4F:69:04:07:F9:D4:97:67:C4:64:54:06:9B:7E:D8:AC:B5:7B
            X509v3 Authority Key Identifier:
                keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:15:86:2b:ca:51:3c:6a:8b:08:61:7e:64:7d:dc:80:62:cb:
         be:6f:54:c5:09:96:27:4f:72:68:f0:be:b2:2b:b9:67:50:ee:
         10:25:0b:e2:8d:1a:92:59:19:2b:25:f9:22:48:d7:1c:90:65:
         c5:16:07:f9:28:bf:4b:26:cb:b8:74:b5:ba:e4:ca:0d:fd:95:
         99:aa:34:ae:37:4b:34:57:1a:0f:c3:6d:48:31:ed:c8:18:46:
         2f:8d:74:80:b5:e5:91:c3:30:cc:6b:71:57:4d:95:7a:8e:cb:
         36:b0:87:47:6b:a6:9b:93:32:e7:65:26:f3:cf:b4:77:69:02:
         89:7f:68:b5:48:03:a4:db:73:7d:d7:b3:21:39:2b:f6:21:86:
         2b:51:06:7b:01:94:1a:c5:42:bd:46:05:17:85:d4:4d:6f:3b:
         4a:55:ca:33:33:84:0e:53:5b:d2:30:aa:17:e4:f9:2f:91:be:
         0e:17:07:94:82:c3:5c:6d:7f:4c:0c:db:31:6c:60:94:d0:3c:
         6f:e9:c0:25:b9:56:32:5f:03:39:16:bf:48:a9:91:7b:ed:d7:
         c8:08:a3:fb:51:0b:d6:ed:14:48:1e:73:33:aa:9b:79:64:7c:
         80:89:c0:87:58:56:48:85:98:47:38:6a:80:ad:4e:98:ae:6d:
         1e:08:62:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:06 2026 by rpki-client