Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File:                     9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier:          GGBaJCkFa8urTEqUk0oK4x+T28psnJKuSKEFGiTLTdM=
Subject key identifier:   F4:AD:6A:23:A6:3E:69:F0:8B:65:1B:BC:EB:CB:89:0A:8F:41:F5:10
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer:       /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial:       019F8FEC311C4C9608E7929603952F91828D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number:          1597
Signing time:             Thu 23 Jul 2026 17:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:48 +0000
Files and hashes:         1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: +0G9pOtll7KjGlqX1NmO4P+0BTzbIy9jtHwj/hnc8jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:31:1c:4c:96:08:e7:92:96:03:95:2f:91:82:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
        Validity
            Not Before: Jul 23 17:00:48 2026 GMT
            Not After : Jul 24 17:00:48 2026 GMT
        Subject: CN=f4ad6a23a63e69f08b651bbcebcb890a8f41f510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:e0:8e:9a:67:b1:e2:32:28:bb:cf:c1:7b:
                    07:c8:66:43:a9:52:cb:7f:f1:10:a8:fa:73:24:cc:
                    7c:3d:74:e6:e5:e8:21:a0:19:42:35:e1:b7:7b:b9:
                    a8:81:d4:b4:60:41:01:ae:48:ff:8f:1e:3e:b5:2f:
                    40:b8:85:af:5f:18:91:35:f6:ee:20:80:57:29:fb:
                    7a:d1:ef:ea:c9:fc:67:03:09:6f:00:a5:5c:7f:27:
                    c2:aa:c5:74:06:c3:a0:f7:25:2f:e2:6a:3e:a1:5b:
                    b6:eb:cc:6f:26:9c:88:c2:54:af:28:08:da:68:ad:
                    8f:26:d5:d6:a4:e8:09:8b:3c:5c:cf:8f:cf:c9:10:
                    6e:ad:49:9a:55:6d:c2:7a:c0:49:6d:1f:aa:9d:ef:
                    2d:e5:4a:03:98:a3:a9:16:70:a3:80:7d:a2:88:66:
                    7d:78:a5:24:0d:be:b2:7e:eb:c8:96:6b:5d:ac:01:
                    b5:18:78:7d:ee:4f:62:39:97:d7:ec:e2:38:98:1b:
                    66:33:11:ec:67:1c:a7:05:a2:b5:99:26:19:11:06:
                    21:7f:d3:c2:41:34:49:cc:70:72:78:1d:fa:07:a3:
                    20:c4:f5:01:dd:ed:0a:82:18:d9:6c:f6:c8:12:cf:
                    03:71:ac:b1:cf:a8:b9:64:b2:67:ad:1c:a0:97:4f:
                    41:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AD:6A:23:A6:3E:69:F0:8B:65:1B:BC:EB:CB:89:0A:8F:41:F5:10
            X509v3 Authority Key Identifier:
                keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:21:61:12:ff:de:d2:3d:dc:8c:22:e4:de:f2:f2:b6:a8:6d:
         87:8e:b6:78:b4:2b:0f:92:c7:f8:36:a5:53:45:1e:23:d0:88:
         da:9a:1f:17:5a:1f:be:cf:43:08:e7:76:d6:b5:f2:09:e8:a8:
         09:e0:01:6e:d7:48:7e:59:75:f5:a3:2c:96:8b:c9:b3:5c:06:
         78:56:35:db:e8:7c:fc:dc:98:6b:0b:50:36:7b:81:e6:d1:08:
         9d:a1:23:3f:bd:3b:32:68:5d:33:42:99:51:c6:b0:02:db:12:
         1c:e1:09:15:9e:ac:e8:32:07:0b:6c:86:b1:87:e3:58:46:67:
         48:3e:80:c4:cf:23:82:29:9e:8e:4a:77:ea:59:95:da:1b:b6:
         80:c7:ec:12:b9:74:d5:da:fb:af:cf:48:0f:85:f5:43:b8:24:
         76:6d:c4:bd:64:4b:30:b8:f8:5b:25:c7:e9:4d:32:e3:7f:18:
         a9:fb:3b:64:ac:af:74:30:c8:b4:a8:07:e3:3e:ce:e8:9b:34:
         d5:92:8d:b3:b0:db:52:44:1b:d9:ba:4e:b7:0f:dc:75:7f:cd:
         af:49:77:6c:1a:fd:5d:4b:87:31:b1:c8:4d:a5:c7:9f:d1:4a:
         f3:26:7a:10:b9:f7:d2:f7:01:33:20:37:ac:3b:5a:82:c9:f7:
         52:98:3d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:44 2026 by rpki-client