Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File:                     47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier:          okhXb18H+OB74iYJ3zadOdSesRUk0W6KUkDG7jUdNrA=
Subject key identifier:   A0:5E:FA:5E:34:99:FB:75:1B:FF:F4:E2:C7:C2:33:BC:0B:CC:5C:90
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer:       /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial:       019F905AA00F867263CADBF31F7A15DCFE56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 19:01:26 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:26 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:26 +0000
Files and hashes:         1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: ZkdiANUJy9Ikp6gwygLlGBTw8V2EnEO+pTgpcJ5ti5g=)
                          2: CshAZZODRLNLmNGlI2avtLyw1y8.roa (hash: Hf1RE2bw+HGP7b/6j+X1+6eXzCajo5UkBDMdWtNUDgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:a0:0f:86:72:63:ca:db:f3:1f:7a:15:dc:fe:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
        Validity
            Not Before: Jul 23 19:01:26 2026 GMT
            Not After : Jul 24 19:01:26 2026 GMT
        Subject: CN=a05efa5e3499fb751bfff4e2c7c233bc0bcc5c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:36:c7:c9:d6:90:d3:24:06:6e:5f:af:2a:
                    c1:54:f2:ac:07:69:97:f2:0d:29:4b:ad:d9:af:31:
                    40:45:ce:2b:a5:f0:f1:bc:75:b9:96:3c:fc:dc:dd:
                    13:67:e8:b6:b3:a0:bf:b1:0a:22:07:07:03:79:e5:
                    d9:40:3b:78:bc:90:d9:6f:d6:37:b0:c3:8b:f9:4e:
                    b0:d2:96:c1:db:82:87:99:29:44:05:31:61:de:66:
                    d9:5b:60:ac:d0:77:74:4c:3e:38:6b:4e:83:ec:5b:
                    18:3c:76:9f:98:bb:cf:1d:c4:b9:bf:87:65:df:1f:
                    47:81:a8:82:c7:9f:73:2d:e8:e4:ff:06:7b:e9:dd:
                    b4:da:60:a5:8f:1e:2a:4b:65:b2:60:c0:63:e8:b6:
                    e5:a2:bf:9b:7a:50:85:cb:11:3a:f1:18:cc:a2:62:
                    c4:bb:e9:d8:84:c8:de:3f:de:c8:94:67:bd:1b:7d:
                    d1:bc:14:b2:4d:72:77:2c:fd:a1:7b:8a:16:95:8e:
                    7c:52:fd:a1:76:eb:54:ff:87:68:f4:7f:f0:6c:07:
                    9a:e9:db:9f:04:e8:08:b8:04:5e:27:a1:89:91:c4:
                    cc:f1:17:0d:72:b7:bc:e5:df:7d:d1:62:b8:9e:dd:
                    fa:49:ff:d8:89:6e:fb:e4:a6:10:28:a8:bb:ed:57:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5E:FA:5E:34:99:FB:75:1B:FF:F4:E2:C7:C2:33:BC:0B:CC:5C:90
            X509v3 Authority Key Identifier:
                keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:42:18:85:fd:71:e1:77:1e:0a:3a:02:7a:1b:ac:5f:11:ad:
         36:be:0f:90:50:d1:0e:96:08:ba:20:b1:2b:2b:5c:9e:c9:f5:
         cd:4f:46:c2:6b:f6:40:8c:ff:99:e4:6e:19:b8:96:40:b8:fd:
         b4:f7:fe:d6:c9:c5:3b:33:a9:35:e6:ac:88:3a:3f:b1:50:ec:
         30:d0:ff:49:f5:6a:2e:86:ca:5b:d4:94:5a:96:86:d4:db:8e:
         0e:37:6c:2f:c2:4c:e1:98:54:e1:a4:79:e8:2b:d0:40:e6:0e:
         48:7e:0f:e5:97:31:72:e2:22:cf:d7:fe:02:65:92:0c:76:ff:
         16:fd:96:51:a0:7b:63:4c:92:6f:10:a0:0f:a4:bf:2e:01:8c:
         0a:92:58:bb:64:05:9b:43:a9:79:30:0b:8d:1b:d4:5b:5f:59:
         19:5e:42:2a:53:6a:1e:8a:00:50:43:fb:87:ac:de:fe:8f:3d:
         5a:ff:6b:d6:2a:84:5f:99:85:b6:a7:e4:93:b0:5b:05:f6:24:
         c7:2d:6f:5f:14:fc:cc:94:cf:78:ba:87:bc:dc:3e:6a:e1:0c:
         5f:4b:94:64:34:48:c6:83:d1:d4:d8:f7:1d:1a:eb:95:3b:95:
         ff:31:3e:54:e5:0e:43:e1:72:86:e2:5e:b5:90:81:c9:04:71:
         5c:f5:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:07 2026 by rpki-client