Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File:                     1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier:          bjtCiUx66EXIg3hOqYbDdo/8XhkILmuJ3ts82wm6s7M=
Subject key identifier:   E0:98:79:75:FD:1B:26:83:3C:50:46:0C:B1:AE:B4:B4:22:22:D8:12
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer:       /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial:       019F8F4721ED76FE0FEBF579680AE979F280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number:          0809
Signing time:             Thu 23 Jul 2026 14:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:31 +0000
Files and hashes:         1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: ffNGQWl87hEcBKfEZuSIYphanUL8QwutIMdg6UkFe10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:21:ed:76:fe:0f:eb:f5:79:68:0a:e9:79:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
        Validity
            Not Before: Jul 23 14:00:31 2026 GMT
            Not After : Jul 24 14:00:31 2026 GMT
        Subject: CN=e0987975fd1b26833c50460cb1aeb4b42222d812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9f:7c:0d:2d:0a:63:b0:c9:2d:1d:56:13:cc:
                    42:c1:5e:85:8d:a0:06:5d:07:9c:6c:91:4f:21:f2:
                    d0:57:56:2c:51:fb:f1:68:de:7e:45:57:9d:87:8f:
                    05:cf:13:6c:2e:df:1d:30:6d:28:a7:3e:8c:46:8c:
                    78:98:3f:29:93:f7:b6:c9:fe:26:5a:2c:e5:c3:33:
                    ea:ff:2d:9e:e5:d5:c6:54:96:31:66:db:ec:2e:b2:
                    e0:32:83:c6:6a:65:5a:78:b0:74:cb:5a:95:c6:2c:
                    a4:77:24:7e:fd:5a:3e:cc:2f:bd:3a:c2:03:32:af:
                    14:a7:3e:3c:a8:90:bd:1c:c3:10:51:aa:ea:f0:c0:
                    6f:95:63:71:ad:9f:87:21:00:0f:f8:45:d1:1b:89:
                    54:0d:c5:5a:11:6c:e1:2d:05:89:06:16:1f:3b:a6:
                    a4:51:71:16:45:3e:42:4d:69:16:a8:ec:d5:a9:27:
                    30:3d:18:b3:42:71:2b:5d:e6:73:22:d9:b0:8a:8b:
                    a8:a4:73:a3:de:4a:2a:ac:84:e8:d5:c4:eb:ba:20:
                    aa:b3:30:e3:db:db:ad:8d:13:5a:6d:b0:3b:03:c1:
                    2a:9d:be:24:ef:68:a3:ea:ce:72:02:f1:47:40:eb:
                    ca:80:56:e4:41:d2:92:83:27:fe:0e:52:83:92:ba:
                    00:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:98:79:75:FD:1B:26:83:3C:50:46:0C:B1:AE:B4:B4:22:22:D8:12
            X509v3 Authority Key Identifier:
                keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f4:22:f5:a3:3d:14:6b:19:64:97:d9:b1:e0:08:ec:54:f4:
         19:d6:04:1a:44:ff:9c:e4:b0:2e:65:67:85:8e:d7:ae:7c:75:
         eb:e7:47:32:0b:01:21:4d:af:7a:11:df:21:8d:b8:7a:aa:9d:
         93:30:43:d7:4a:8a:37:0e:9a:93:a4:90:bb:84:61:5e:f9:29:
         eb:dc:a1:ec:11:81:96:83:5b:5c:45:01:31:8d:3b:56:02:8f:
         bc:b6:da:78:d5:87:ed:f2:16:66:95:1a:1f:90:2e:f5:24:27:
         aa:36:f4:67:5b:e6:71:00:f4:50:c1:54:40:ae:1f:34:1a:64:
         5d:31:69:eb:0d:02:e3:44:3d:95:0e:f7:fc:7c:ca:b0:72:d9:
         59:b0:1a:bc:3a:b4:fa:2d:d0:bc:22:ff:d6:39:fc:22:c3:fc:
         fc:7b:ad:72:67:3e:dc:62:01:2b:57:40:10:a4:12:0c:c4:1d:
         b4:bd:8d:e8:46:42:cd:9b:66:d0:66:09:76:5e:66:80:62:43:
         83:42:d3:db:92:a9:84:10:f4:83:a5:e7:df:68:53:9d:64:8a:
         6a:aa:3f:91:3e:88:a0:57:b1:8e:c0:49:0d:33:79:81:6f:6c:
         18:24:f7:d4:c5:ed:db:ec:fe:11:ca:cc:19:be:02:7d:b1:ce:
         3b:4b:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:50 2026 by rpki-client