Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
File:                     7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft (raw, json)
Hash identifier:          0HaGcbk3emo/MQ0FUglwhHK5qJK5V9957RkdSkTaGEw=
Subject key identifier:   B9:CD:5F:72:15:26:D8:3C:7B:81:41:AA:50:89:2A:A2:C5:3D:41:4B
Authority key identifier: EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5
Certificate issuer:       /CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
Certificate serial:       019F8FEBD0F05749BB27E3C2CA31B18AD1C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
Manifest number:          1921
Signing time:             Thu 23 Jul 2026 17:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:24 +0000
Files and hashes:         1: 7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl (hash: 1TtzSJlmOmqis8L9DrEy1gUlMVuo63hn1VWHZVw2siU=)
                          2: 7O0-WQodmjjGVUBOxW6Jvd4Ww7I.roa (hash: DsSc/REu21MuM1a9JQHPgAHIAE36g5CaUqClp3hJ+dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:d0:f0:57:49:bb:27:e3:c2:ca:31:b1:8a:d1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
        Validity
            Not Before: Jul 23 17:00:24 2026 GMT
            Not After : Jul 24 17:00:24 2026 GMT
        Subject: CN=b9cd5f721526d83c7b8141aa50892aa2c53d414b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:2a:2a:17:e5:8c:69:2b:d0:d2:7e:4f:74:
                    1b:02:4e:0c:24:37:b4:a4:ae:e1:48:0f:99:04:9f:
                    9c:9e:c1:7c:0d:98:94:c8:81:76:8a:48:4f:bb:23:
                    86:8b:db:ad:2a:8e:8e:42:85:30:99:51:f0:2a:bc:
                    68:3e:a5:48:41:09:4f:de:cc:62:44:36:50:dc:63:
                    6b:93:b2:ae:3b:99:f4:5b:21:d1:ae:38:f8:78:97:
                    00:cb:9d:9b:8d:0c:3f:3e:36:d8:12:21:37:98:63:
                    0f:17:ea:d0:15:51:93:00:bd:d0:ac:10:69:72:bf:
                    2b:5b:03:7e:17:cc:3c:8e:14:d3:e9:70:f1:2c:5a:
                    1f:e5:aa:b3:71:31:3f:9c:c7:b8:86:33:6a:b9:0c:
                    ac:c9:06:99:3b:a8:47:a5:c9:90:ad:05:b5:29:88:
                    9c:26:42:ab:52:d0:fe:e4:eb:15:0a:21:a4:8f:c0:
                    a3:e1:8c:38:e5:76:90:da:89:55:d3:5f:42:5c:85:
                    e7:5b:45:a2:66:ff:b0:13:61:dc:6c:f8:7d:c5:e1:
                    70:d5:d7:69:15:6c:89:df:9b:66:6d:cb:6e:ec:e6:
                    94:2e:66:d6:28:ff:b6:61:c7:eb:59:b4:e0:ec:8c:
                    fb:63:5d:4e:64:be:6b:47:15:85:dc:f8:06:d6:b3:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CD:5F:72:15:26:D8:3C:7B:81:41:AA:50:89:2A:A2:C5:3D:41:4B
            X509v3 Authority Key Identifier:
                keyid:EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d5:ad:27:57:5b:6b:0a:9b:20:3d:28:51:26:e8:08:a8:18:
         8d:64:44:b5:04:f3:7b:ae:b5:00:56:eb:1c:95:59:cf:67:ef:
         fa:ee:a5:3c:6e:9d:f8:4a:c9:29:a4:8a:2f:a5:59:1f:51:b2:
         ef:c5:d5:3d:57:21:3c:09:c2:26:75:89:bb:1c:bf:27:e5:9d:
         9b:d1:6d:1c:c5:5d:0f:cc:72:3e:ef:8f:4c:53:09:63:82:03:
         d5:47:04:45:d6:57:49:eb:54:3f:c0:b6:f2:11:f8:32:7c:4a:
         f5:0f:aa:9e:d4:37:14:52:b3:45:6d:31:4d:02:4f:23:6f:af:
         9f:c3:6a:de:9c:86:bb:7e:40:d3:00:aa:0b:e4:15:a2:1e:a5:
         47:90:38:85:8c:75:54:7c:4b:12:f9:03:fd:a2:d1:5e:0f:d5:
         35:ef:47:f9:7e:7b:9b:33:94:97:c9:c7:ea:5a:07:03:a7:bb:
         f4:02:c7:1a:3b:e6:b1:9b:04:af:ca:96:2d:62:48:23:32:e9:
         af:00:09:f0:a8:4a:69:17:ee:a3:78:94:7c:c5:b6:42:d2:01:
         6d:ab:15:d9:fa:d8:b5:1e:05:8d:c9:51:df:b9:5c:0c:74:27:
         cd:d0:80:49:5f:42:c8:ae:26:f1:cf:a5:46:4f:0e:3c:10:d4:
         24:dd:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:29 2026 by rpki-client