Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File:                     4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier:          z7R2hOysBh7y1zUZ6eW4u8YnTy3qIYf8faIUfxZHma4=
Subject key identifier:   82:6D:7B:FB:FD:7A:AF:BE:C1:32:93:C3:7C:5F:C0:8B:82:99:ED:4F
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer:       /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial:       019F905A0A83F1DF287C97E4E35EF864064C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number:          192C
Signing time:             Thu 23 Jul 2026 19:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:47 +0000
Files and hashes:         1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: YWOz8Ju6CIv8gUJtNVhyPYQ/o2r2G1pquFZWxx+tFrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:0a:83:f1:df:28:7c:97:e4:e3:5e:f8:64:06:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
        Validity
            Not Before: Jul 23 19:00:47 2026 GMT
            Not After : Jul 24 19:00:47 2026 GMT
        Subject: CN=826d7bfbfd7aafbec13293c37c5fc08b8299ed4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:84:3a:0d:21:d5:38:5e:bc:8a:7c:c0:e9:
                    c8:d4:35:76:24:ce:aa:ca:3b:ff:e8:5b:7d:80:4d:
                    4d:46:80:63:5c:c4:d1:d4:8a:ad:ec:85:2e:28:eb:
                    e7:0e:90:fe:5a:09:e8:4f:7d:26:12:10:45:ab:8a:
                    81:14:3e:f3:4e:0f:ac:26:27:a7:b1:d0:59:ef:f9:
                    db:b3:11:fd:6c:fb:2d:33:92:1f:50:1d:bf:18:9d:
                    04:50:ae:a2:d0:59:5e:2f:93:48:99:2b:28:72:b4:
                    e2:43:4a:a0:f0:95:00:69:aa:62:37:bb:fd:6d:83:
                    bb:83:93:b6:dc:5a:79:10:b2:43:ad:7f:c4:52:98:
                    48:b6:56:42:be:99:9b:81:86:5f:d0:8a:95:bc:58:
                    15:f1:ab:da:13:62:15:71:5b:79:0f:49:74:aa:da:
                    ff:1f:ef:a1:eb:a2:45:40:41:6c:de:09:b7:b2:c2:
                    55:8d:14:bc:d6:ab:61:26:d6:13:bf:dd:0a:12:92:
                    b9:38:5d:86:9e:02:b3:16:46:ea:5e:ef:da:39:07:
                    82:b3:ea:d6:d7:4b:8a:7b:9c:66:70:23:ba:eb:0c:
                    d7:62:6a:d7:fe:60:40:ce:e8:d4:0c:5a:10:80:f4:
                    c9:c1:af:86:8d:0d:d1:8b:79:13:0b:0c:f4:86:93:
                    85:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6D:7B:FB:FD:7A:AF:BE:C1:32:93:C3:7C:5F:C0:8B:82:99:ED:4F
            X509v3 Authority Key Identifier:
                keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:65:f9:47:39:ef:e9:37:bf:02:b2:b5:2a:3f:bb:55:d3:1f:
         64:d8:18:a9:ef:b5:66:f1:6a:d1:23:be:29:8b:1d:9f:6a:53:
         fe:5f:30:1f:8e:36:bb:a0:85:b5:66:3b:7c:62:58:1e:01:ee:
         19:9d:8f:32:94:34:d7:2c:ce:a3:8e:18:42:18:f5:c2:0b:4c:
         0a:6f:49:32:71:9f:9b:1a:a6:ba:9d:5b:a6:35:30:ad:07:be:
         25:6f:65:59:b5:1b:1c:e2:41:81:1b:f8:7f:3e:02:ec:93:bd:
         40:fe:09:de:5d:ea:aa:05:bb:0b:08:f4:35:8b:9b:2d:98:ed:
         87:58:8b:9b:27:95:4b:4c:2b:a5:90:e5:45:e9:d4:bc:c4:94:
         86:e3:ad:27:77:6c:c2:a1:0b:4f:54:08:71:65:42:4b:7e:d7:
         38:6a:37:79:17:fd:83:9f:72:a4:96:50:43:57:e6:80:ed:21:
         da:ab:5e:21:3c:2d:49:5b:b5:72:87:ba:75:c8:e4:02:f8:b3:
         ed:ff:75:c2:49:ef:e1:c8:21:96:d2:b3:bc:93:4b:5d:74:03:
         53:c4:28:06:40:d5:24:93:51:13:37:17:98:e2:2d:1e:79:4e:
         fe:28:8f:92:33:b6:1c:56:e0:14:4b:20:96:05:2c:78:38:11:
         70:90:b0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:40 2026 by rpki-client