Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
File:                     VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json)
Hash identifier:          q81c5oyqxJ4z/Rwi497FAcXZE7/P0wl/YN/IKmZP1vY=
Subject key identifier:   EA:10:47:F4:9B:86:14:61:2B:DB:1D:CB:06:69:23:94:86:35:BF:EA
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Certificate issuer:       /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial:       019F913578122916C0D33069FCFEA6F691A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
Manifest number:          11F1
Signing time:             Thu 23 Jul 2026 23:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:28 +0000
Files and hashes:         1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: qnc8M9pa76DggUZXeOROJAw1a/wFxhbM80qo+1Ttj6w=)
                          2: qwRgsQyWceddvM_GZ0mcBzGmfsw.roa (hash: u5m7OeUQAJztt6tYqPBa102kwAghmU7lU7GBR2CQZGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:78:12:29:16:c0:d3:30:69:fc:fe:a6:f6:91:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
        Validity
            Not Before: Jul 23 23:00:28 2026 GMT
            Not After : Jul 24 23:00:28 2026 GMT
        Subject: CN=ea1047f49b8614612bdb1dcb066923948635bfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:cb:73:21:c3:01:8f:dc:48:2d:ce:30:6a:
                    66:24:44:33:78:d4:0a:c1:60:14:a9:da:f3:a4:99:
                    6a:64:72:fb:c9:6f:c9:3f:2e:8e:75:89:0b:34:f5:
                    aa:c4:2c:4a:a7:20:df:64:2e:cc:1d:aa:6c:90:3a:
                    15:b4:cd:ce:95:6f:a9:f2:43:60:d8:73:67:d2:cb:
                    53:a5:3a:b2:0b:4b:fc:0a:a5:80:c5:fb:b5:5b:5d:
                    ab:c8:18:57:2f:44:58:cb:c9:69:63:4c:b4:e8:d4:
                    16:09:71:1e:0c:51:28:de:4b:ad:8f:2b:c0:17:00:
                    c0:40:cf:80:7f:e3:53:5f:64:fb:89:e1:be:c5:07:
                    dc:3e:dd:4d:78:e3:39:1a:6d:92:26:b3:b9:87:78:
                    18:a7:f7:d0:75:29:f5:3e:ed:c5:e8:3c:f1:b4:a5:
                    db:a3:e2:19:76:0d:0d:a4:46:b1:d3:74:2f:b8:6e:
                    23:a6:f2:91:0f:42:8f:fa:ba:0c:ce:4b:30:ae:81:
                    7c:b3:0e:b8:0b:87:ed:f3:2c:ba:e3:7d:48:e8:64:
                    86:ed:93:69:67:82:f9:66:86:e2:a9:e8:47:b4:75:
                    e5:d3:06:5d:98:01:34:dd:a3:63:bf:1b:98:90:ce:
                    7d:ff:20:5f:67:66:40:03:d9:7c:12:71:b2:d2:86:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:10:47:F4:9B:86:14:61:2B:DB:1D:CB:06:69:23:94:86:35:BF:EA
            X509v3 Authority Key Identifier:
                keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:2e:38:89:35:3e:2f:ea:2c:04:bd:a7:d5:ec:1a:44:e5:fc:
         9a:b8:fd:a3:92:fc:ea:62:c3:30:cf:5f:90:08:56:06:b9:d7:
         97:72:78:18:b5:ed:ee:41:fd:cd:a5:b4:ad:7b:e1:09:84:2a:
         ac:18:e2:b5:8f:74:7e:fc:ce:5d:df:c8:e1:af:5d:14:5d:aa:
         78:43:6b:fd:37:7e:f8:e7:de:54:a8:8c:5f:15:9a:af:09:85:
         53:69:c3:c8:b0:d1:13:8d:03:ac:64:6c:d2:f0:81:69:85:08:
         8a:d9:b9:94:de:86:af:e6:66:4c:ca:fd:fd:9d:92:71:fd:65:
         d9:a4:14:c7:55:6c:be:03:db:07:54:24:3a:49:50:48:c2:16:
         4f:59:b6:7b:9a:b8:fc:3a:92:73:00:f1:46:02:b2:dc:14:d3:
         be:70:22:9f:0a:d8:b0:e8:23:5e:69:e6:64:a4:31:ce:c5:81:
         33:12:c6:b1:73:c7:2a:49:39:e9:7c:bb:17:7b:04:df:34:a0:
         34:8c:dd:f0:8b:37:08:4b:e6:07:e1:1f:5f:96:b6:c4:87:97:
         79:56:cc:dd:50:2b:27:f2:94:20:2e:53:bf:1f:6e:93:f0:1f:
         0a:ab:4f:e5:0f:dc:a7:f7:46:74:48:4a:af:5a:c1:82:51:ba:
         3b:b7:76:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:27:01 2026 by rpki-client