Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File:                     0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier:          W7r+DEBSuL3H2jbKZzgl7TMeBPjgb8wfyiKRc7mHZNo=
Subject key identifier:   DA:65:4D:69:53:F7:66:AF:3A:D6:F8:80:45:2B:D7:CA:6E:3D:C4:DA
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer:       /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial:       019F8FEBEB2399D42190C10EBE66A989F983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number:          1877
Signing time:             Thu 23 Jul 2026 17:00:30 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:30 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:30 +0000
Files and hashes:         1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: vRZi5sWI9T13pd8DAV6hSXL/YYkC+W+dZUSCvuG3Xn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:eb:23:99:d4:21:90:c1:0e:be:66:a9:89:f9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
        Validity
            Not Before: Jul 23 17:00:30 2026 GMT
            Not After : Jul 24 17:00:30 2026 GMT
        Subject: CN=da654d6953f766af3ad6f880452bd7ca6e3dc4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:02:ec:04:54:8f:9f:7e:05:60:71:53:79:
                    ce:ea:24:70:be:21:1b:fa:39:bd:89:32:1e:d9:c3:
                    e2:f2:dd:fb:46:f8:32:79:7d:db:74:ac:41:89:5a:
                    d5:54:fd:f3:92:00:fd:41:ca:8e:eb:96:1d:25:e4:
                    a2:e0:66:b6:65:ff:79:c5:ee:ca:84:50:9f:28:ff:
                    3f:89:55:66:d2:a8:36:45:ab:a7:f3:c6:45:d4:e3:
                    b6:d8:85:7d:3a:c2:55:46:76:8e:b3:16:5e:d9:1f:
                    6b:62:1c:72:83:c2:40:e6:36:22:e8:ae:e4:8e:38:
                    75:f5:75:fb:84:71:d4:0d:c6:8d:82:0a:51:a9:8f:
                    4b:96:e5:ee:15:28:de:cd:3c:d7:d1:46:0e:02:ad:
                    fb:a5:13:cb:e7:35:bf:b8:61:10:12:2e:31:e7:b2:
                    af:2f:d9:dc:3b:00:9e:61:3c:9e:40:18:cf:7e:c4:
                    46:46:c9:9b:58:1e:08:98:d9:b7:b6:2f:d6:3a:ab:
                    3b:c1:6d:3a:f6:13:93:5a:a6:9e:fa:24:e9:86:34:
                    25:6b:b0:58:13:68:45:9f:a7:49:db:15:a1:bd:d4:
                    64:95:3c:49:11:44:fe:22:15:37:e7:06:0a:0e:de:
                    de:32:52:16:cf:59:ac:08:49:14:ca:58:c8:03:5c:
                    6c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:4D:69:53:F7:66:AF:3A:D6:F8:80:45:2B:D7:CA:6E:3D:C4:DA
            X509v3 Authority Key Identifier:
                keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:41:cd:56:4e:55:2f:27:8e:e2:4f:d5:69:11:2b:a1:75:2e:
         01:84:ef:a6:b5:bc:de:32:cc:e9:64:8d:f8:3b:f9:48:5f:57:
         3d:b3:2e:52:92:79:b5:8e:66:7a:20:85:47:1f:cc:42:9d:7e:
         6f:ed:3a:dd:3b:a6:6b:5b:8b:51:a5:88:10:29:93:da:5e:81:
         4a:29:72:92:79:af:6d:3a:fb:80:16:48:45:d2:30:6b:be:02:
         1d:1b:6b:c2:84:f5:98:96:0f:bf:9c:fe:aa:7c:e7:04:86:d8:
         c6:14:7b:01:bc:c5:bf:1c:c9:85:71:3d:e8:f9:ae:aa:10:c5:
         76:18:e5:32:f6:58:a1:38:74:98:1c:44:a5:b0:29:85:28:59:
         5d:69:b9:21:73:2e:35:2f:96:1b:35:9b:df:80:af:d8:e1:99:
         8f:1f:b7:5d:26:fb:a2:97:25:3d:4f:91:76:2d:4e:2b:03:41:
         21:cb:86:95:5b:ec:b9:39:65:86:e1:57:fd:9f:36:90:76:b3:
         2e:a2:74:90:fe:62:a1:0f:15:6b:35:e5:49:7f:a1:7a:c4:5b:
         6b:d9:c9:cd:9f:18:16:c5:59:75:c7:35:16:2a:56:e2:ad:b0:
         c5:4b:70:ee:fb:ca:a0:96:f4:61:4e:86:91:1c:20:d2:eb:c8:
         ca:dc:44:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:05 2026 by rpki-client