Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
File:                     1uU17yFuvm9_xVz73DFTK5EtjmM.mft (raw, json)
Hash identifier:          urnqnPg05M0xuik7c5rlOUXUeicbubKjQxINW+BfYJo=
Subject key identifier:   59:DB:1D:D6:FF:02:A8:3E:0F:2F:AE:FD:C7:29:61:CE:0E:0A:51:D2
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Certificate issuer:       /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial:       019F8FEC9F262AD71FA1C827FFDBD1296F59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
Manifest number:          0EF0
Signing time:             Thu 23 Jul 2026 17:01:16 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:16 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:16 +0000
Files and hashes:         1: 1uU17yFuvm9_xVz73DFTK5EtjmM.crl (hash: xdIpHJCAh+VzK7x2ShrsNEGsS1eqdGpDK1Z5Bcasz0U=)
                          2: KU8q2n2CMANYI0fRJo2s7p5G3KY.roa (hash: TGvZcgRzyrpwF/XoDD+tDWJMqg0cIvjLnDlG6w6JYqw=)
                          3: O6Raip0XpEJuTr4vqY0PE2h8BoU.roa (hash: rkN25N2D5fR585r7ltR6p+7tSt5GR6XgMCZ7nCaivnw=)
                          4: w0AIzL_yXPCHkJImPTgRwJJtTaU.roa (hash: sZxn5UqLt4mLh2cPzkHphFRVza6dN160+xYuKyv4YdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:9f:26:2a:d7:1f:a1:c8:27:ff:db:d1:29:6f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
        Validity
            Not Before: Jul 23 17:01:16 2026 GMT
            Not After : Jul 24 17:01:16 2026 GMT
        Subject: CN=59db1dd6ff02a83e0f2faefdc72961ce0e0a51d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:d2:1e:38:f2:8c:84:77:fd:0c:9f:af:f5:
                    84:e1:08:9e:ce:b8:6d:18:62:6c:d7:60:67:b7:58:
                    20:c2:c4:6a:f0:61:76:0e:31:bf:27:33:ce:93:b5:
                    d0:82:76:98:37:6d:e4:3c:55:32:d3:b0:7b:b6:ac:
                    ae:26:ff:81:7b:a9:c2:3c:06:da:80:35:98:35:58:
                    25:94:32:3c:ac:9d:d7:66:70:d7:03:0c:42:23:3c:
                    2f:5a:b0:1c:b0:52:42:9c:52:7e:fd:13:20:5f:e7:
                    e8:2e:62:9d:eb:a5:a8:b6:06:48:94:5e:d5:07:1b:
                    8d:97:3e:27:42:52:13:c0:a3:5f:db:20:81:ce:79:
                    41:80:8a:5b:e7:e3:ff:c3:b6:96:a1:77:9d:2e:95:
                    49:81:04:3c:dd:d4:a5:c1:4e:16:65:cf:1f:e4:b7:
                    09:a1:35:6f:31:58:28:e4:2b:1c:60:a8:1f:d1:91:
                    d7:97:7c:00:df:e3:fc:8f:72:66:c0:3c:dd:2d:1e:
                    8f:e6:51:2e:33:bf:fb:93:3d:75:21:f3:cf:51:9c:
                    e6:10:45:bd:11:c5:9e:4e:19:3a:67:0f:29:96:a2:
                    56:69:e8:33:ae:8d:80:c7:a7:fb:52:cb:02:0e:5f:
                    59:1c:d8:58:d6:e9:77:0f:5b:87:e4:93:74:42:65:
                    d1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DB:1D:D6:FF:02:A8:3E:0F:2F:AE:FD:C7:29:61:CE:0E:0A:51:D2
            X509v3 Authority Key Identifier:
                keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:17:49:e7:66:fc:1c:11:e8:f2:49:c5:dc:b5:84:2c:ad:a9:
         8c:5d:32:5a:a1:04:91:46:a8:1b:61:e6:59:a6:02:28:0b:74:
         b0:d5:66:82:e4:a3:de:8c:d7:64:91:04:4f:38:f7:27:96:a7:
         24:2d:c3:2b:3b:ec:74:22:61:e7:4d:be:72:cc:b9:ab:d4:8e:
         0d:4f:39:e4:21:a7:7a:1f:41:79:76:95:cb:bf:17:71:ce:c7:
         5e:95:89:dc:85:9b:b5:aa:07:37:66:57:fb:5f:2d:83:bb:5c:
         4f:fe:61:5a:76:61:f5:2b:6e:74:40:dd:db:2a:79:4d:f2:a5:
         b9:fe:52:67:1d:38:19:07:47:56:fc:e7:25:ab:01:01:70:fa:
         d7:84:6f:e3:0d:0d:3d:5e:a1:7d:00:a5:8d:5b:b8:a8:7e:0a:
         40:02:d0:64:37:60:69:cb:c4:da:c1:f0:b1:86:6a:fc:76:74:
         b9:89:00:b9:b7:4c:90:f0:ef:13:a2:e4:49:8d:16:c5:bb:c9:
         bd:01:f4:00:ed:d0:47:0d:31:7c:c3:ae:9e:9a:7c:fa:51:1d:
         86:22:ea:37:fb:da:ab:45:4e:37:f4:17:7a:fc:c4:8e:7d:06:
         95:de:79:f0:6b:98:41:45:de:fb:74:c6:a2:06:d3:fb:1c:f8:
         5c:f0:6b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:54 2026 by rpki-client