Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File:                     AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier:          LS9r9TduhxgdFYDfVK/0hG0Y5eNggoYz+RhUUxz8aAE=
Subject key identifier:   52:AF:6E:3D:12:5E:A0:AE:CC:20:F1:0B:C1:85:88:8E:7A:8C:78:25
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer:       /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial:       019F916DBE65AD31D911023D57E92B3C7747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number:          0E3C
Signing time:             Fri 24 Jul 2026 00:01:56 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:56 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:56 +0000
Files and hashes:         1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: 12J09hRkTtR8AGjgIaZ4WjKwYxkYJjCG9urM4PJ9xG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:be:65:ad:31:d9:11:02:3d:57:e9:2b:3c:77:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
        Validity
            Not Before: Jul 24 00:01:56 2026 GMT
            Not After : Jul 25 00:01:56 2026 GMT
        Subject: CN=52af6e3d125ea0aecc20f10bc185888e7a8c7825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:eb:57:59:00:d1:7a:f8:a7:11:dc:cb:d4:a4:
                    e7:b2:ca:21:84:9b:56:37:fb:41:18:27:d3:a3:86:
                    01:f8:53:4c:22:c6:e8:47:8b:74:1b:7c:2e:1a:f6:
                    78:25:10:a2:f2:13:09:23:ed:c8:93:0f:98:b3:8a:
                    b0:e8:8e:7d:03:e6:31:7b:bf:69:3b:81:be:6a:94:
                    79:f2:25:54:24:8f:5a:b8:8d:ad:98:e9:6a:56:83:
                    90:f9:99:aa:66:67:42:33:f6:88:b6:05:bb:9f:8e:
                    2d:74:b6:9e:e3:a7:62:bc:2f:94:3e:0e:bd:1d:eb:
                    ae:79:d7:22:04:91:ec:dc:35:b2:c6:e1:6a:e1:89:
                    f2:1c:ff:7a:d2:3c:79:29:3b:29:d4:94:fb:e6:ca:
                    47:fc:bd:03:fa:cd:98:ec:9e:73:4f:1f:bc:c0:6e:
                    d7:1c:44:73:5f:1e:11:4c:8e:7e:7f:bd:9b:b8:a3:
                    62:02:51:b6:16:51:96:ea:4a:9e:4a:3f:d4:46:16:
                    88:a6:1a:2a:92:71:d1:90:9a:37:0d:c9:8b:ea:4a:
                    ba:7c:06:f4:47:d6:f2:1b:32:59:b7:67:34:72:dd:
                    e1:c9:26:9b:5a:21:d8:81:f2:c5:c2:4f:52:9d:d1:
                    74:66:2e:cc:2a:98:6d:81:2f:b1:f8:8e:2e:ff:99:
                    7d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AF:6E:3D:12:5E:A0:AE:CC:20:F1:0B:C1:85:88:8E:7A:8C:78:25
            X509v3 Authority Key Identifier:
                keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:33:e9:bb:09:a8:4d:ff:63:83:2b:85:d1:3b:d6:46:4b:bf:
         2e:b9:db:84:25:a9:c9:c4:1a:88:61:37:73:47:f4:95:05:53:
         ef:88:b8:a9:10:b6:e5:a3:91:6c:f4:6d:58:9f:72:53:28:3e:
         a0:62:ac:4b:fb:27:01:5b:21:09:9d:c9:75:4b:4f:d2:c2:7b:
         41:b3:5f:ba:f0:67:60:e1:c2:33:51:d9:da:89:0d:40:c2:e5:
         44:e5:25:f0:95:60:99:ad:ea:50:31:ff:67:50:b7:89:11:22:
         46:b9:66:da:85:ea:cd:af:18:22:18:56:a4:42:bb:f8:f8:24:
         ee:2c:db:58:da:e5:b1:36:89:e5:20:b1:da:26:1f:7c:28:57:
         41:d2:44:3a:1e:fe:0f:b8:44:ce:72:ef:5a:8d:2a:fe:d9:62:
         d5:7b:a8:e4:f3:1e:06:59:4c:5d:b4:e2:58:ba:c0:40:59:64:
         37:cf:94:44:e4:98:6f:59:20:8f:f5:50:9d:a9:77:64:1e:6b:
         3c:a8:e5:c2:9b:cb:a3:4d:2b:4b:87:5a:60:79:39:39:64:b3:
         4f:f2:4b:e5:db:15:78:04:ea:95:81:0b:cc:ce:ba:80:1d:eb:
         a1:ad:6e:0c:ec:8f:c8:48:0f:af:76:51:b4:64:b0:e2:a1:fd:
         8c:8b:11:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----