Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File:                     7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier:          UrCIegbGmENf23urWk9JfFBGWfEmvBthVPhvHgT3f4g=
Subject key identifier:   59:9E:17:DD:13:80:A5:BE:76:4D:47:0B:A8:3A:AB:EF:76:53:48:A6
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer:       /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial:       019F916DC759049E653CF6F22DC709D4A81B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number:          0E48
Signing time:             Fri 24 Jul 2026 00:01:58 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:58 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:58 +0000
Files and hashes:         1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: M1M1TjJQ/P2HueUQH2gwsRJA/3bG61q3EYXYZJpFyw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:c7:59:04:9e:65:3c:f6:f2:2d:c7:09:d4:a8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
        Validity
            Not Before: Jul 24 00:01:58 2026 GMT
            Not After : Jul 25 00:01:58 2026 GMT
        Subject: CN=599e17dd1380a5be764d470ba83aabef765348a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:af:43:73:52:83:76:42:f3:b8:56:07:ed:
                    be:17:cb:d8:3f:9e:00:ed:b4:5d:51:1e:55:00:53:
                    75:32:97:1e:c7:26:1c:95:49:cf:47:9e:bb:12:f6:
                    e4:b1:f4:2d:45:69:2f:f8:7d:cc:06:a8:34:32:42:
                    47:ed:6d:02:5a:e7:69:46:3d:6c:8a:9c:13:68:b2:
                    28:58:31:e6:1b:b6:fc:7b:21:7f:e5:ea:8c:83:ce:
                    00:7d:b3:d4:9e:3b:33:f6:f3:8d:b4:b8:e6:14:3f:
                    79:2e:e8:50:92:82:75:06:84:d0:1d:dd:8b:7f:a4:
                    c7:a2:d3:07:cd:54:1b:e1:aa:04:8e:25:63:d6:38:
                    83:09:44:00:27:dc:ab:00:5c:55:23:a7:17:87:c7:
                    db:25:ae:0a:7e:7c:5b:0a:98:f9:51:ea:7b:10:38:
                    99:68:c1:b6:4a:ff:3f:5c:e8:5d:e8:a4:51:a0:ba:
                    2d:9d:df:b6:a6:cf:48:95:89:41:4f:28:3a:93:cd:
                    3e:3b:56:27:14:5f:98:a3:6b:6f:ec:cc:60:69:b4:
                    88:f7:e9:77:c2:0f:9e:93:51:e3:df:fa:99:a8:ad:
                    aa:6f:d5:06:f7:6b:47:cf:ca:d1:89:50:3d:60:70:
                    f0:64:42:22:9d:5b:63:21:25:17:ca:28:79:15:78:
                    2b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9E:17:DD:13:80:A5:BE:76:4D:47:0B:A8:3A:AB:EF:76:53:48:A6
            X509v3 Authority Key Identifier:
                keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:4c:6f:84:c4:00:fd:48:34:0f:e6:d2:cc:98:41:4c:59:
         21:8e:62:eb:02:4e:11:e9:3f:4a:dd:0e:de:66:22:07:8a:ed:
         2f:61:a3:11:0d:85:46:8e:dc:d2:6c:35:1d:64:a9:73:84:ea:
         38:77:9e:8b:4f:ae:77:82:15:2a:1a:75:ce:81:0c:2d:d8:2b:
         e8:08:8c:05:b5:ae:5b:7a:66:0b:6e:5f:8c:c1:ae:c6:d1:93:
         9f:2e:d3:d5:63:28:a0:18:d6:89:44:4f:51:c0:fd:25:dd:56:
         cc:2c:86:2a:dd:ef:7c:e1:fb:ce:aa:3f:08:79:69:4d:ed:0f:
         e7:5c:36:be:8b:9d:c0:ec:4c:6b:cc:a4:f1:56:50:d2:19:b0:
         af:29:05:41:eb:0d:7a:e1:f8:83:95:4e:2e:d4:41:9b:76:2b:
         0b:15:9a:94:83:ab:3a:4e:80:5c:dd:f3:3b:35:b4:7a:41:9b:
         d0:c3:74:ed:77:3b:8b:8d:4e:01:ca:49:66:1e:b3:96:46:76:
         13:0d:05:d7:f1:08:77:93:6a:8f:54:af:da:96:00:9e:4b:40:
         dc:b5:37:f9:d5:9c:81:77:00:89:5b:75:6b:23:7b:1e:e6:1d:
         93:ff:c5:ae:cd:3a:b4:b0:3d:8d:a8:b6:18:29:88:e7:36:c3:
         c4:4b:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:51 2026 by rpki-client