Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
File:                     69xd5v5ftQVVoFyXxbDdR369C_U.mft (raw, json)
Hash identifier:          VR21BOj2sS4k/KxEpyiOy7dgYbNWUI5Vbkfk7EuirEo=
Subject key identifier:   9F:D7:26:A8:B6:8E:14:15:0E:F4:FA:1B:0B:D3:F4:AA:E6:3E:9F:EF
Authority key identifier: EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5
Certificate issuer:       /CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
Certificate serial:       019F92ECC9477598E040970CC8C885986535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
Manifest number:          19C2
Signing time:             Fri 24 Jul 2026 07:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:19 +0000
Files and hashes:         1: 69xd5v5ftQVVoFyXxbDdR369C_U.crl (hash: V16B1Qvtq0cS3HkOxvzuyjx64f4ViBXUNbSKXbIRggI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ec:c9:47:75:98:e0:40:97:0c:c8:c8:85:98:65:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
        Validity
            Not Before: Jul 24 07:00:19 2026 GMT
            Not After : Jul 25 07:00:19 2026 GMT
        Subject: CN=9fd726a8b68e14150ef4fa1b0bd3f4aae63e9fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:e6:34:a0:8d:88:4a:3b:ed:52:ec:58:68:
                    01:44:c9:7a:e3:fd:0c:7a:51:2d:d3:c0:23:bd:1b:
                    68:59:92:18:13:6c:70:25:a3:65:af:5f:24:43:d8:
                    d3:ca:1f:d1:52:c6:60:98:e3:0e:51:e4:d7:8c:c5:
                    99:e8:4a:0d:c5:5b:db:7a:8a:00:d2:4b:4c:7a:3e:
                    2c:86:c4:44:9e:ff:a5:bc:01:ae:58:90:d2:3d:8a:
                    c4:79:e8:fa:b3:9e:50:5e:d7:c1:1b:a9:35:dc:25:
                    44:d0:73:29:5c:e9:db:98:15:4b:d0:d4:59:e1:37:
                    69:70:c1:fd:6a:69:a4:fd:5b:43:51:2e:f4:96:8d:
                    cc:1d:3e:e3:1f:81:09:3d:df:aa:f6:23:d6:eb:d5:
                    e5:31:17:75:20:09:69:cb:e3:59:fd:17:a4:73:17:
                    34:59:41:87:64:6a:2e:e2:25:0b:b9:80:c5:ab:0f:
                    4b:16:85:5f:98:96:ff:3a:ed:73:56:15:d6:6e:bb:
                    4a:0f:6f:09:34:e3:ca:39:e1:16:ef:bc:2d:a8:c3:
                    9c:34:b7:fa:ff:1b:45:ad:96:33:da:d3:37:83:20:
                    90:66:aa:5d:06:e2:a5:5e:01:32:85:70:a9:22:69:
                    04:8d:22:f9:90:a0:53:3e:83:61:42:36:1d:46:b6:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D7:26:A8:B6:8E:14:15:0E:F4:FA:1B:0B:D3:F4:AA:E6:3E:9F:EF
            X509v3 Authority Key Identifier:
                keyid:EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b5:71:66:ea:8e:49:b6:1e:f3:f2:b2:75:fe:ae:97:80:0f:
         9c:98:19:b6:5a:61:97:ed:ff:cd:df:58:a7:e0:db:28:e7:9f:
         ce:ef:d6:11:d5:54:08:3b:c3:a2:c9:01:aa:e2:18:3d:fb:ca:
         ba:81:61:c3:28:bb:6f:88:a1:ac:e7:11:99:81:c0:c2:14:52:
         7c:9d:fe:7b:c1:5b:25:9b:5c:b9:b7:06:87:5d:a0:e2:5c:1c:
         08:0b:13:0a:61:5c:15:23:ce:d3:a2:ab:b9:db:eb:80:24:77:
         bf:72:35:1f:f8:bd:22:e7:32:40:62:f9:28:f6:f1:96:b3:3a:
         cf:5f:d1:15:76:9a:d3:e4:d1:a0:7f:f1:76:d4:d8:f3:0e:9a:
         7b:6b:46:20:88:1d:4f:3c:5e:f6:6c:50:e9:7f:f1:0f:12:77:
         fd:f0:1f:96:0b:f4:a9:7e:35:4a:7a:68:0b:e8:c6:04:da:ea:
         95:40:c5:87:36:0d:d2:fc:86:b9:91:53:5a:19:df:ad:7f:ee:
         6e:8b:b3:79:3c:b2:d4:6c:5f:a6:10:9c:72:08:a7:3e:05:a6:
         e9:31:17:6e:9c:3c:f5:07:ed:81:88:28:5c:03:b0:21:69:17:
         02:33:e0:3f:22:d2:15:ce:23:a6:ff:56:54:f5:7b:42:6e:71:
         6e:0b:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:37:20 2026 by rpki-client