Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File:                     63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier:          WrqtOv6XrwWOOrl1zT+QgvlbBnobDFAQkRLJShRjhLc=
Subject key identifier:   2D:59:90:B6:AF:B1:8D:7E:4E:A8:56:CB:7B:42:C4:74:16:BA:38:BE
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer:       /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial:       019F927FB501957130B46E7D4DDC034B9B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number:          14CF
Signing time:             Fri 24 Jul 2026 05:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:10 +0000
Files and hashes:         1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: IaO1Bv86TSswDJ4ZDUre4FK3NK9aumPsSc5P+BUmCgY=)
                          2: vUFwfEY11W7JpynTF9BbfUWs9-w.roa (hash: eu7mWQahLyPxvPg5BFYa4l+E4W1NHB0xDJbdLJnBmrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:b5:01:95:71:30:b4:6e:7d:4d:dc:03:4b:9b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
        Validity
            Not Before: Jul 24 05:01:10 2026 GMT
            Not After : Jul 25 05:01:10 2026 GMT
        Subject: CN=2d5990b6afb18d7e4ea856cb7b42c47416ba38be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:e0:aa:d5:d6:77:8b:7a:e0:8a:e0:73:e3:
                    9a:f5:e7:ef:41:e4:45:c7:a6:84:8d:74:a5:a0:4c:
                    5e:d0:60:f6:71:bc:ae:33:71:2f:64:ea:b1:d5:9d:
                    cd:2d:06:77:31:a8:88:df:44:55:57:10:aa:88:59:
                    56:8c:bd:d0:1d:1e:8c:99:9c:31:ae:2a:32:42:1b:
                    c1:02:68:3c:14:a9:a8:83:12:e0:ba:e6:e5:93:96:
                    32:91:66:74:b6:ec:b0:4b:f8:ee:17:fa:42:d1:db:
                    02:84:37:63:75:5a:b6:16:b1:58:ff:5e:90:16:cd:
                    c8:64:6a:ca:9b:73:c8:91:d3:cf:84:4b:c8:58:a9:
                    92:e3:d3:b3:a3:98:ac:5e:f1:c8:b3:16:6b:00:e8:
                    d9:a3:c3:b7:e7:e2:bf:68:92:f3:88:4e:de:f6:ac:
                    9e:1b:68:aa:87:38:4b:f2:66:f0:28:32:4a:fe:d5:
                    31:3d:dd:f1:3b:7a:6c:72:d9:1c:96:81:fd:db:78:
                    46:91:2d:1a:8a:62:07:93:cb:31:da:fb:91:3d:cb:
                    f9:8e:eb:65:3a:78:e6:dc:c6:bd:e5:4e:0c:69:d2:
                    62:0e:11:b0:0b:51:47:88:54:f8:cc:60:e1:49:38:
                    b4:e7:76:43:fc:71:c7:8f:de:8d:12:b4:0c:ee:9b:
                    ad:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:59:90:B6:AF:B1:8D:7E:4E:A8:56:CB:7B:42:C4:74:16:BA:38:BE
            X509v3 Authority Key Identifier:
                keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:2f:79:0f:36:63:d9:b6:b6:12:b4:d6:d5:ea:a8:03:01:b8:
         e2:4d:83:61:cc:fa:68:56:0f:a8:f6:b9:db:d2:4d:a8:cb:88:
         7a:78:d7:fe:41:54:b7:9c:25:61:af:c1:89:2c:bd:97:15:e6:
         f5:f1:59:fb:16:11:7c:3b:61:6e:40:ed:c7:0b:7d:26:eb:15:
         fc:6c:a1:fb:c3:e3:fe:ac:fb:27:96:b0:68:2d:6e:b5:91:97:
         28:70:eb:f6:17:bf:98:0c:31:f2:f4:cd:8a:71:44:85:11:fa:
         3d:29:f9:35:67:b2:3c:89:b1:ee:ef:6b:2f:c8:e3:e3:7e:c2:
         2a:af:b9:7f:11:cc:c9:33:15:17:eb:bf:6c:02:d7:1f:18:c3:
         8d:d7:fe:73:74:65:4a:ff:0f:a4:41:d8:02:b2:99:32:dd:ab:
         a2:ca:22:45:56:44:15:08:16:22:b2:56:78:d5:80:3e:8e:a5:
         23:7b:ab:7d:3d:90:94:37:99:80:13:3f:bf:a8:d0:a7:90:b2:
         2c:dd:81:e1:bc:d9:f7:56:ee:c5:e7:ff:38:00:0f:4c:e8:f7:
         a4:1f:c9:f4:29:d7:e4:35:b7:98:31:ab:a5:cf:d9:f9:f5:76:
         43:a3:be:a4:65:3c:fa:39:83:d2:d4:52:45:29:03:8e:13:36:
         40:a2:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:45 2026 by rpki-client