Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File:                     AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier:          ZpzVouQeu85bghIqgP2MKQ1FJyfu8gdvI4+MqSF1fL0=
Subject key identifier:   DA:0E:CD:51:04:D0:4E:13:40:85:23:B4:F9:36:38:7E:E2:A4:B8:F7
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer:       /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial:       019F91A383A08B57DDDBE1D111486A0B5878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number:          19C3
Signing time:             Fri 24 Jul 2026 01:00:40 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:40 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:40 +0000
Files and hashes:         1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: kmYiPjjW4rxJIjl9g5DQVYou4dIMUxKDStu4NuY0sM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:83:a0:8b:57:dd:db:e1:d1:11:48:6a:0b:58:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
        Validity
            Not Before: Jul 24 01:00:40 2026 GMT
            Not After : Jul 25 01:00:40 2026 GMT
        Subject: CN=da0ecd5104d04e13408523b4f936387ee2a4b8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:cf:7d:a7:36:0a:ff:f5:6a:a3:5f:42:0a:
                    b1:85:ca:7a:83:ce:79:6b:f1:50:a5:f8:95:4f:22:
                    9d:a7:26:ee:80:59:7d:7f:be:60:8a:6f:a3:cc:85:
                    7e:9d:25:f6:85:7f:38:0c:88:50:28:37:7a:2d:0c:
                    a2:65:31:13:ae:ea:cc:26:63:3a:dc:a3:4d:86:d3:
                    49:f6:df:c6:fe:f7:27:72:2f:97:09:be:6d:bb:13:
                    99:90:e6:3f:5a:62:4c:ad:58:9c:a7:18:53:0d:17:
                    7e:60:e6:c3:2e:65:29:80:b5:59:cc:0a:5a:bb:bf:
                    07:77:3e:b7:52:d0:e1:2c:9b:41:95:ad:e6:e3:cf:
                    69:25:24:6d:36:41:43:6d:87:56:b5:dc:5f:3c:b6:
                    17:27:db:20:aa:c6:43:46:e4:de:a7:2f:b3:b0:dd:
                    bf:21:6f:47:7d:03:aa:6c:5d:d2:58:9e:3e:06:4c:
                    6f:b0:e1:03:d0:98:e4:03:5b:b5:65:40:35:44:b0:
                    ff:c8:f3:be:fe:01:c3:2c:6c:56:8d:93:1a:7c:c1:
                    13:87:5f:98:05:21:32:80:bc:29:63:bc:8f:0e:a2:
                    40:ce:95:1b:6d:64:77:8c:46:83:67:76:35:87:62:
                    87:54:e3:e4:d8:9b:32:5e:75:69:54:a7:b1:73:03:
                    8c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0E:CD:51:04:D0:4E:13:40:85:23:B4:F9:36:38:7E:E2:A4:B8:F7
            X509v3 Authority Key Identifier:
                keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:36:f5:1a:ea:f3:86:6f:22:d9:41:29:a3:81:aa:8f:95:4f:
         7f:fe:97:bc:bc:92:7d:51:f8:be:46:16:aa:02:e8:2e:27:c4:
         5b:ef:43:06:29:9b:12:3b:9e:2b:a0:29:ea:ec:5d:0d:88:36:
         f5:67:60:95:41:45:0c:7f:3d:74:9a:f5:9c:0e:22:91:98:da:
         50:6d:af:b6:f9:24:ca:a5:65:1a:ba:7b:07:33:6d:2d:ec:be:
         55:6a:8b:9e:4d:e4:61:2a:b9:27:2e:72:af:1a:59:ae:a1:45:
         ed:5e:b8:68:23:24:18:f7:b6:21:f4:de:68:f7:21:8f:4e:58:
         69:27:78:6d:f9:56:43:1c:d6:2d:88:af:30:64:5a:0f:50:e8:
         2d:bc:48:1b:1c:cc:7d:fc:eb:c8:57:19:6f:ae:4c:d9:bc:cb:
         d4:0e:91:12:e9:a1:ab:e2:7e:ce:f6:eb:9c:ee:e8:ef:e2:cc:
         1b:37:6e:ee:54:47:b8:55:e8:ff:37:fd:f2:a5:a8:6f:ce:a4:
         7a:98:20:cb:45:8d:6c:35:15:57:e5:e1:dc:3a:91:84:83:86:
         38:bf:87:ec:a7:83:0f:de:05:6c:09:94:16:92:e1:e9:04:f8:
         d0:19:33:f3:03:13:de:8b:71:78:07:35:9d:2e:d6:2e:6c:58:
         98:f8:c5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:25:55 2026 by rpki-client