Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File:                     7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier:          SNKaH7yDMD+vHT3M34n1PNsGCINyt0PLyLLhy1Jm1jE=
Subject key identifier:   07:CF:CE:9F:13:92:1B:3B:30:82:86:0D:59:35:8B:11:F0:47:B6:C5
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer:       /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial:       019F91A3821EB98821616536B85352ACFB0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 01:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:39 +0000
Files and hashes:         1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: HpM/8a6U2RcdZh8Lptc0KUwYtnsPCN+tFC347PcLYHU=)
                          2: Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa (hash: 6I0ghzBeN79J1UAgpVFm5cx7tXZBN44byXnGOpV99sA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:82:1e:b9:88:21:61:65:36:b8:53:52:ac:fb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
        Validity
            Not Before: Jul 24 01:00:39 2026 GMT
            Not After : Jul 25 01:00:39 2026 GMT
        Subject: CN=07cfce9f13921b3b3082860d59358b11f047b6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:5e:64:92:c0:6a:c1:97:d6:18:bd:07:9c:
                    ae:e2:c8:5c:42:45:ba:94:dd:26:64:9e:73:8d:63:
                    bb:34:4d:26:95:65:a1:e5:e9:25:a7:88:c2:db:58:
                    53:b3:10:88:46:ea:78:ea:8d:f8:72:14:5d:0f:40:
                    68:e8:30:23:f1:b0:9b:c9:a9:b9:40:18:59:64:28:
                    fa:86:c9:e7:90:b1:1b:85:4a:7a:00:15:55:c8:51:
                    eb:08:c2:97:b0:28:e9:20:a8:a3:27:f6:b5:61:f6:
                    92:98:c9:50:36:d4:48:b9:7f:c4:50:7d:73:34:4c:
                    6e:35:0e:fe:fa:f2:be:62:71:1f:48:d1:fb:bc:2a:
                    48:9e:2c:3b:5b:b9:e1:3b:06:ad:35:8b:08:b3:26:
                    e3:e5:06:b5:9d:73:e9:95:46:91:b6:16:75:4d:6f:
                    2b:4b:59:ea:8f:ea:a1:8a:ec:db:e6:9e:0f:5d:8a:
                    bb:6a:b4:fc:ea:90:29:ae:70:1a:10:06:32:bc:2c:
                    ff:2c:4a:2d:f5:4c:4b:d2:5c:c8:32:e7:b9:24:cf:
                    1f:b6:52:be:e4:e1:09:76:6d:9b:b5:ab:a9:87:cc:
                    f7:c3:e0:8b:5d:4d:d6:fb:12:75:4d:cf:d5:ed:65:
                    f6:26:03:7a:e8:89:69:e4:4e:4a:90:54:d1:5f:81:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CF:CE:9F:13:92:1B:3B:30:82:86:0D:59:35:8B:11:F0:47:B6:C5
            X509v3 Authority Key Identifier:
                keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:8f:84:61:4b:39:f9:a0:8f:c4:6f:d7:df:eb:c7:9c:cc:
         ab:ab:7e:72:a3:6d:98:82:e8:f3:83:60:ad:d9:b8:fd:aa:69:
         20:f5:33:9d:34:9a:ca:76:ba:4a:06:9f:78:25:80:67:bd:16:
         4c:83:c5:df:99:98:49:be:50:20:04:70:ec:14:f6:51:c3:dc:
         70:c9:6a:d8:14:1b:01:fe:7e:97:82:26:cd:54:83:42:39:e8:
         a4:56:a0:41:f7:ce:95:95:cd:bf:f3:dd:47:e5:3b:5c:1b:b1:
         b9:81:6e:36:e6:60:93:56:91:61:90:40:18:bf:4b:67:e9:45:
         b4:8b:07:b7:92:6c:e5:02:b1:ab:00:36:1d:ae:f6:f5:f6:d0:
         0b:36:db:5f:58:34:bb:4a:33:9d:04:10:f3:82:10:40:80:96:
         5f:b7:4e:e0:29:e7:fa:68:43:c7:c8:e6:07:85:e4:f3:45:39:
         a2:f2:8d:17:ec:07:49:e3:66:d1:37:a1:3a:6d:73:4c:93:82:
         e5:7b:5e:7a:98:f7:17:aa:0b:53:a8:2a:2c:f3:7d:dd:23:03:
         a7:3a:b4:c5:1b:98:e3:f7:ac:30:d4:6b:50:38:f4:82:86:c4:
         9d:11:55:de:9d:c6:54:51:10:63:00:04:b4:95:48:0b:c0:92:
         86:6e:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:58 2026 by rpki-client