Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File:                     12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier:          v+GbBWniYocGIqDTqW35rfnEP2cfjWGsdBJ4ZNlQLWw=
Subject key identifier:   61:C0:FB:46:49:E0:14:E7:DC:3B:A8:AF:F1:55:2C:8A:61:1B:32:ED
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer:       /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial:       019F90232FAA5D537752D0F8276AE6E30066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number:          1956
Signing time:             Thu 23 Jul 2026 18:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:52 +0000
Files and hashes:         1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: yVJvctn9oPWAZxBuX6cwIMCKSQ3NzQwcPHJ31sSBHcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:2f:aa:5d:53:77:52:d0:f8:27:6a:e6:e3:00:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
        Validity
            Not Before: Jul 23 18:00:52 2026 GMT
            Not After : Jul 24 18:00:52 2026 GMT
        Subject: CN=61c0fb4649e014e7dc3ba8aff1552c8a611b32ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8d:0b:f2:8d:30:13:b0:07:d7:87:ff:ea:81:
                    f5:bb:fe:0b:10:15:2a:c4:00:57:0f:04:23:9a:4c:
                    41:d6:3b:da:a8:14:e5:7b:47:f9:5d:d2:0d:87:ad:
                    71:bf:14:c0:6b:1f:e1:74:28:18:47:22:08:46:da:
                    45:ba:9c:eb:0e:a8:7c:97:6a:46:50:16:a8:66:2d:
                    61:a6:fe:a6:af:98:86:e7:4c:ec:0d:2c:0f:b9:9b:
                    47:bf:22:a7:e6:16:51:0b:cd:3b:b4:f9:7f:98:63:
                    50:a1:62:dc:c5:fc:7c:54:0b:16:5b:78:0d:22:54:
                    fd:1d:5a:e0:a5:80:1f:95:16:c2:91:08:4d:6c:a7:
                    e4:c5:96:a8:27:5e:97:b4:26:60:1a:d1:81:f7:35:
                    8f:61:cc:c2:bd:fd:5b:f8:f4:72:76:37:11:65:79:
                    96:a1:05:54:e1:f7:e9:31:23:d4:a5:80:cb:de:9a:
                    cd:50:b9:1f:df:2f:61:2d:cb:22:be:37:84:a5:a5:
                    5a:64:fe:a6:10:bb:af:7f:ef:74:f8:71:93:2e:7d:
                    21:52:a2:68:9c:8b:44:93:eb:9e:0e:9f:2c:82:c9:
                    c1:d1:fd:fe:77:a1:91:6e:3b:06:75:3c:4b:e3:d7:
                    04:fc:65:8c:c4:58:e8:34:38:a6:12:57:4b:7d:3c:
                    a4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C0:FB:46:49:E0:14:E7:DC:3B:A8:AF:F1:55:2C:8A:61:1B:32:ED
            X509v3 Authority Key Identifier:
                keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b5:c7:b4:dc:01:ac:4a:05:b5:c7:da:e7:1b:da:fe:30:76:
         8d:9b:93:8d:83:c2:67:57:bf:a7:db:76:7f:bd:60:d9:49:f5:
         a1:3c:ad:f6:cc:13:12:22:a3:18:a9:8c:b7:24:8d:b7:58:62:
         f6:f8:32:5d:d2:12:86:83:52:5f:8a:75:50:1e:c0:6a:75:2b:
         14:50:6f:f2:60:1d:fb:1b:5a:05:7f:05:6c:38:b5:86:1e:a3:
         b8:c0:4a:72:3d:98:97:0a:5d:be:35:ae:ce:1a:4b:cf:91:fc:
         1f:a0:6c:ac:05:04:a7:b5:75:ae:06:41:36:67:4c:00:ae:1e:
         d7:11:dc:2b:a3:f9:82:12:13:3f:64:ce:6f:6a:0e:d6:00:8d:
         f9:00:c0:f9:50:2e:29:5e:b3:c9:aa:e8:4f:bd:70:2f:49:b9:
         43:44:2e:ed:b8:9c:69:a8:50:bc:fb:ae:bd:a3:e1:32:1f:07:
         9d:82:e4:29:8c:28:b8:0e:cf:ea:6c:c3:ec:50:3a:5b:75:42:
         74:28:1e:df:9c:f1:6e:14:f7:8d:99:d9:f0:d3:4a:d1:5e:f8:
         98:75:83:39:8b:ae:8c:d8:84:ac:1d:3b:a4:04:0f:a6:c8:8b:
         90:4b:46:f4:13:e3:17:49:46:27:52:d5:53:47:44:e9:b7:9c:
         89:a9:6c:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIy+qXVN3UtD4J2rm4wBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjUyYmFlNDdiMzAzYmJhYjEwM2ZmN2JhNDVhMGE5MDYw
YzNkY2MwHhcNMjYwNzIzMTgwMDUyWhcNMjYwNzI0MTgwMDUyWjAzMTEwLwYDVQQD
Eyg2MWMwZmI0NjQ5ZTAxNGU3ZGMzYmE4YWZmMTU1MmM4YTYxMWIzMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno0L8o0wE7AH14f/6oH1u/4LEBUq
xABXDwQjmkxB1jvaqBTle0f5XdINh61xvxTAax/hdCgYRyIIRtpFupzrDqh8l2pG
UBaoZi1hpv6mr5iG50zsDSwPuZtHvyKn5hZRC807tPl/mGNQoWLcxfx8VAsWW3gN
IlT9HVrgpYAflRbCkQhNbKfkxZaoJ16XtCZgGtGB9zWPYczCvf1b+PRydjcRZXmW
oQVU4ffpMSPUpYDL3prNULkf3y9hLcsivjeEpaVaZP6mELuvf+90+HGTLn0hUqJo
nItEk+ueDp8sgsnB0f3+d6GRbjsGdTxL49cE/GWMxFjoNDimEldLfTyk1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHA+0ZJ4BTn3Duor/FVLIphGzLtMB8GA1UdIwQY
MBaAFNdlK65HswO7qxA/97pFoKkGDD3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWIt
YWI3NmEwOThhZWJiLzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWItYWI3NmEwOThhZWJi
LzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7XHtNwB
rEoFtcfa5xva/jB2jZuTjYPCZ1e/p9t2f71g2Un1oTyt9swTEiKjGKmMtySNt1hi
9vgyXdIShoNSX4p1UB7AanUrFFBv8mAd+xtaBX8FbDi1hh6juMBKcj2YlwpdvjWu
zhpLz5H8H6BsrAUEp7V1rgZBNmdMAK4e1xHcK6P5ghITP2TOb2oO1gCN+QDA+VAu
KV6zyaroT71wL0m5Q0Qu7bicaahQvPuuvaPhMh8HnYLkKYwouA7P6mzD7FA6W3VC
dCge35zxbhT3jZnZ8NNK0V74mHWDOYuujNiErB07pAQPpsiLkEtG9BPjF0lGJ1LV
U0dE6becialsrg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:57 2026 by rpki-client