Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File:                     2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier:          hbWY0/0dVmr8S/12vatTNHzPapyqM8PNPfMWG1Xd194=
Subject key identifier:   24:8A:78:A8:35:E5:91:76:1E:DC:6C:B1:D0:FF:8C:F4:DC:E9:96:4F
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer:       /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial:       019F90FEDD8387534E36744E7B0DF0C50EE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number:          19C3
Signing time:             Thu 23 Jul 2026 22:00:49 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:49 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:49 +0000
Files and hashes:         1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: FCJ2SmG+wstP3X3PA1/UBVGNTyw7OUEJ+mkHgMeZKyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:dd:83:87:53:4e:36:74:4e:7b:0d:f0:c5:0e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
        Validity
            Not Before: Jul 23 22:00:49 2026 GMT
            Not After : Jul 24 22:00:49 2026 GMT
        Subject: CN=248a78a835e591761edc6cb1d0ff8cf4dce9964f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:a4:fb:77:b0:e5:20:25:ef:bd:d1:11:54:
                    3a:67:f1:4f:68:18:63:b8:21:0b:6b:50:fe:1d:ad:
                    da:66:cb:16:5f:21:cb:b2:d1:71:16:bd:17:c2:fe:
                    b6:55:ff:c9:3d:8c:6b:0d:7f:ac:0e:71:00:a1:92:
                    81:6c:8a:06:40:d2:9a:40:48:bd:c2:c3:f0:d9:77:
                    82:ed:84:10:d0:45:4c:fe:7b:e6:14:8a:00:73:98:
                    e6:ea:a6:29:4b:54:52:cc:32:f1:b0:47:bb:c1:7e:
                    65:43:a3:4c:92:48:58:a2:26:4b:89:a4:a5:cf:ab:
                    33:67:ee:af:62:f9:fd:42:0c:3b:6f:ad:8d:1c:54:
                    0d:51:bb:33:f1:6c:a9:6e:e0:95:bf:59:46:dd:88:
                    a1:6f:1e:4b:15:12:dd:db:00:29:f0:0f:86:ca:41:
                    e6:e9:78:78:53:72:4c:24:c5:6c:71:71:e1:08:1d:
                    68:09:83:43:2c:c0:77:14:b6:73:bc:0b:92:ad:d9:
                    8f:1f:86:71:01:72:e4:c7:0e:25:4f:99:fa:fe:1a:
                    13:3b:72:b4:d2:a3:c2:ac:f6:60:4e:7c:49:71:b6:
                    8b:3d:9f:45:d8:0d:7b:d3:9a:26:24:fd:88:01:91:
                    df:8d:eb:b4:03:56:6e:c6:47:ee:7a:32:1e:41:e5:
                    fd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8A:78:A8:35:E5:91:76:1E:DC:6C:B1:D0:FF:8C:F4:DC:E9:96:4F
            X509v3 Authority Key Identifier:
                keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:84:c2:61:48:d0:1c:62:72:10:ed:78:7e:82:1d:75:42:
         63:3d:7c:32:65:10:86:38:48:85:d1:b1:f3:21:8c:91:20:09:
         bd:78:30:b4:e9:d8:66:80:3f:78:6a:7e:ae:07:76:b1:9f:40:
         b8:fc:94:02:4b:3c:fb:f9:aa:f0:76:a4:f5:f3:28:a7:8f:2f:
         7a:0d:67:e8:aa:fa:82:1e:92:64:48:d1:6a:9b:83:43:b1:a8:
         0b:38:b8:ed:dd:f1:1e:ae:5a:01:e3:ff:4f:fc:0c:87:77:67:
         3d:06:87:e6:9a:fb:57:8c:e5:9e:3c:af:a4:54:7a:69:d4:9e:
         99:69:08:d5:f7:7d:f0:8d:1c:a6:0b:f6:6e:31:51:fd:80:c4:
         7a:75:52:6e:7c:7c:ac:30:9f:3c:9b:f9:8d:68:6f:f2:3e:5a:
         3d:0b:5c:b5:df:e3:74:20:b1:ca:f2:8b:8a:f1:61:5c:e5:bb:
         d0:75:4d:c1:5b:50:f6:12:41:44:d0:3e:ce:a6:ef:42:83:c4:
         60:f0:7a:9e:61:91:e4:bb:68:b1:ce:35:af:87:9b:7b:76:30:
         3e:b6:7c:de:87:51:3a:6b:d0:e3:f9:a3:3c:29:b8:9b:5a:a4:
         d9:f6:f8:5e:23:96:1d:72:20:6a:96:5f:cd:60:1b:36:2a:58:
         e8:dc:8b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:19 2026 by rpki-client