Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File:                     7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier:          xDvsBtP1THnQgczmw7ZStU3aKXNKmkSsuPnKw5EZyAk=
Subject key identifier:   25:57:6F:92:06:4F:63:96:3F:8D:27:DC:64:BB:22:3F:FB:07:E4:EC
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer:       /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial:       019FAA877E761A29554B3FA5A751542EB405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 21:00:34 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:34 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:34 +0000
Files and hashes:         1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: 1otaKZ0J7tdiviGmm/HDAGmnWEFp8OnDJMCSXN6q2jM=)
                          2: Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa (hash: TaYrbh565HuhRP+MsEApRFlphctYPIuvYOeurCpD+fA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:7e:76:1a:29:55:4b:3f:a5:a7:51:54:2e:b4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
        Validity
            Not Before: Jul 28 21:00:34 2026 GMT
            Not After : Jul 29 21:00:34 2026 GMT
        Subject: CN=25576f92064f63963f8d27dc64bb223ffb07e4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:11:68:b8:42:77:ac:99:4a:4f:52:5d:b9:86:
                    ad:36:64:fe:d4:82:9c:b5:c1:71:68:bc:1e:bc:2d:
                    b1:2e:c5:db:6a:88:24:5c:49:3a:ec:23:69:bd:49:
                    92:fd:28:68:0e:7f:91:98:ba:22:e1:f6:9b:c0:2e:
                    7b:75:75:a5:9c:96:eb:26:f7:db:1a:63:26:ef:43:
                    a0:2b:e7:1f:d8:69:1d:db:25:a3:dc:fd:16:1f:d0:
                    82:97:74:07:99:1d:a0:15:d4:69:20:6c:7a:a1:29:
                    85:aa:7e:1d:8d:cd:f9:1d:0d:47:fb:07:f5:6e:32:
                    04:66:8e:a6:cc:45:ca:47:29:c9:03:07:aa:09:c0:
                    99:6d:75:b7:5e:a5:a2:9c:48:e1:77:f1:bc:37:8f:
                    d9:ab:4b:34:b3:1c:4f:24:80:72:dc:06:2a:eb:20:
                    e7:5a:75:72:3a:39:b0:46:9c:45:a9:8c:ae:2c:d3:
                    52:bc:3a:90:41:8d:61:a0:77:90:4a:23:2e:92:62:
                    a6:6b:5f:e3:a3:aa:bb:50:f0:9b:3d:c2:73:e5:75:
                    35:52:02:d2:9a:3a:ab:29:c4:d2:c2:de:42:f5:f7:
                    18:64:aa:30:ba:1b:e5:d7:78:64:59:5b:a2:3e:af:
                    d7:5f:70:ee:c5:b8:ec:99:14:33:ae:5f:ac:ed:31:
                    8d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:57:6F:92:06:4F:63:96:3F:8D:27:DC:64:BB:22:3F:FB:07:E4:EC
            X509v3 Authority Key Identifier:
                keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c8:bc:e0:fa:23:4d:4a:36:ae:5c:a5:d1:03:d9:63:a1:c4:
         e9:56:15:55:b5:b0:8a:44:b0:32:86:b0:0a:73:23:a6:11:47:
         ed:ac:22:e6:39:77:0f:35:9f:35:5e:38:ca:8d:65:51:d6:f7:
         00:8b:c9:b3:e6:92:dd:1d:9b:50:12:a3:81:90:f5:14:22:5d:
         ce:be:be:4a:a2:88:71:af:17:6f:2b:c5:98:d6:4f:dd:96:b2:
         72:23:d5:4d:9c:96:28:28:9a:ab:7b:1e:c8:dd:fd:51:55:70:
         f4:49:27:b2:91:ae:26:3a:3c:f5:e2:cc:3d:14:5b:00:4c:29:
         16:f2:72:fe:8c:67:c3:b0:3b:80:2c:79:2a:11:1c:c8:be:0b:
         ea:d4:21:d7:c2:c1:2f:b3:88:21:33:69:d8:fd:4c:a0:22:db:
         89:b9:7e:d0:8c:1f:1f:35:af:ec:98:5f:73:2d:c7:25:bf:bb:
         68:d0:21:ce:d6:5b:db:2f:70:ef:85:77:3b:3e:0a:b9:99:42:
         66:e4:11:b6:79:b7:44:75:71:94:c9:67:69:03:ee:15:2a:ae:
         85:91:ed:ef:60:06:59:75:6c:56:f8:53:aa:b5:16:2f:33:d3:
         18:53:48:12:d1:9c:46:a1:45:90:ff:1b:e2:af:7e:1d:77:e9:
         a2:3c:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:45 2026 by rpki-client