Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File:                     cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier:          EMjL306IoHIxD5xrAkmoRO9FEn0q1K3jOLljZmvLBSE=
Subject key identifier:   50:CE:89:4E:F9:2E:48:50:5A:87:A5:67:A2:CC:28:37:14:60:80:45
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer:       /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial:       019F946D50FBCFEEC281052596D019CF677D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number:          0BEF
Signing time:             Fri 24 Jul 2026 14:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:19 +0000
Files and hashes:         1: RIVpRVcoTiPM597Ay6ktG1nRpoI.roa (hash: 8WsKosIyT+/va+/3Ff2UyTN4wl8h0E62UrDqXKvX/7s=)
                          2: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: SuN7Il4Elooh/BLKwHupoHEMiTfM//zZl/4g/42WyFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:50:fb:cf:ee:c2:81:05:25:96:d0:19:cf:67:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
        Validity
            Not Before: Jul 24 14:00:19 2026 GMT
            Not After : Jul 25 14:00:19 2026 GMT
        Subject: CN=50ce894ef92e48505a87a567a2cc283714608045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:79:77:dc:cb:30:a9:d2:9e:82:e5:56:28:
                    6a:5b:ee:4f:b5:da:00:ac:3f:64:b8:0d:78:db:22:
                    6b:13:8c:ae:1f:0d:84:f3:4a:ae:bf:fb:ab:6e:77:
                    48:31:77:06:75:c2:0b:5c:dc:80:f3:61:80:1d:66:
                    03:0f:ca:79:36:b4:4a:a4:50:b5:7e:db:73:2b:24:
                    9d:f0:d9:e8:e0:bf:04:14:77:37:7c:14:93:9c:0e:
                    db:1e:d2:a5:78:71:dd:5a:35:ca:cb:04:23:c6:41:
                    01:05:6a:a5:84:bf:1f:10:da:15:fb:a7:37:47:76:
                    7e:f9:61:07:7c:e8:3d:35:f1:81:e7:8d:01:a3:ab:
                    cf:24:e6:ff:90:ce:0b:d6:67:1b:0b:00:f3:e8:16:
                    20:26:c5:9c:2b:af:ef:59:b7:60:4c:0f:2d:39:45:
                    b2:b1:88:af:d4:be:24:17:cc:5a:ae:a4:20:63:cd:
                    72:4b:86:93:df:df:5d:b8:02:ed:95:48:2e:7d:20:
                    3e:9c:e5:cf:d3:23:74:32:a3:1b:e9:4d:78:d9:2a:
                    55:5b:42:fb:dc:9e:90:f9:2d:b1:b4:f6:04:6f:84:
                    af:84:c7:f7:77:b0:38:ec:08:3f:cb:dd:cf:d8:a8:
                    b6:da:2d:2d:33:87:82:23:4e:6c:5f:40:cc:c5:b3:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CE:89:4E:F9:2E:48:50:5A:87:A5:67:A2:CC:28:37:14:60:80:45
            X509v3 Authority Key Identifier:
                keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9a:a8:65:80:eb:37:e0:eb:ea:b6:cc:b0:b7:8a:07:62:67:
         4f:7a:46:9f:c3:fe:f3:5a:58:71:37:4a:e1:31:ae:9f:6d:1d:
         bf:13:18:fa:cb:57:cc:37:e1:47:66:6f:66:a4:89:30:b5:ff:
         22:15:06:c9:61:99:51:80:28:bf:2f:93:5d:86:6d:eb:3b:44:
         f8:4d:ba:e9:2c:95:0c:5f:75:e6:53:1b:a3:1f:09:63:da:9e:
         db:83:80:69:62:5e:ef:7d:ee:77:8e:3b:bb:3b:b9:58:75:f5:
         e9:5f:a7:af:fd:54:97:69:22:45:2d:57:b3:a5:5b:5d:ef:07:
         c3:af:c4:69:53:f0:6e:ac:a4:b3:eb:a6:56:e7:8e:59:89:18:
         26:fe:80:ad:51:61:33:b2:67:2f:15:6e:db:e7:06:91:b7:e0:
         11:66:77:da:51:e2:f3:3a:57:94:53:9b:48:1e:c8:9f:4c:31:
         28:5f:d9:ef:7e:46:cc:d0:9e:7b:6f:89:57:ff:6f:11:68:30:
         10:56:1d:77:56:00:36:10:bc:79:7b:99:a7:57:0d:76:a7:cc:
         e5:4b:e6:f9:06:ce:7e:33:85:0d:6d:20:1f:da:4f:47:47:af:
         d1:ab:09:c2:89:60:d6:ad:66:e7:d5:19:74:4e:13:87:a7:ef:
         40:38:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:24 2026 by rpki-client