Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File:                     339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier:          4rwS9NVcqWTiqDVyGvTM+Drn3gd00jtLoeqOSxHV1KA=
Subject key identifier:   2B:B8:A5:0A:02:0B:3C:0E:9D:BB:12:6F:E0:E3:CC:7D:E1:CC:AE:33
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer:       /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial:       019FA93E13BD21E7B43140952298F9592253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number:          16D0
Signing time:             Tue 28 Jul 2026 15:00:45 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:45 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:45 +0000
Files and hashes:         1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: zbB39InUyZlQKJ8SXAxMwzNmzXZQOZTfgjURXyVCaMM=)
                          2: ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa (hash: Z0tlGeHI28w/uWa6BzOx7bS4D0r8kubbhdFc5SfUT7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:13:bd:21:e7:b4:31:40:95:22:98:f9:59:22:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
        Validity
            Not Before: Jul 28 15:00:45 2026 GMT
            Not After : Jul 29 15:00:45 2026 GMT
        Subject: CN=2bb8a50a020b3c0e9dbb126fe0e3cc7de1ccae33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:ea:11:0c:61:07:e7:09:0b:be:45:86:8a:
                    f4:ee:0f:dd:90:dc:c3:9e:01:0f:47:13:f0:ba:57:
                    94:3b:17:ea:1e:b2:47:b7:fd:28:8b:59:c5:67:43:
                    fb:ea:c0:fc:e8:d6:78:45:f7:3c:99:b0:52:cd:90:
                    28:91:82:b2:cd:a0:4f:25:db:9b:d9:a0:fa:c1:b9:
                    23:21:a2:80:a6:4e:a0:97:00:c5:09:8d:f2:07:81:
                    87:0d:c6:bb:97:52:ef:69:9b:d0:0f:3f:a1:65:b4:
                    2a:3a:a1:ca:36:ac:56:48:c0:f8:fd:76:93:5c:ab:
                    94:03:78:97:f9:57:8e:ee:e5:85:f6:35:49:f1:cb:
                    76:ea:54:3a:93:75:8e:de:90:98:df:62:82:ee:e1:
                    76:c3:92:f4:ed:1f:6b:0c:e5:aa:e9:e1:b4:9a:76:
                    77:7e:0e:c9:d6:f5:b8:94:de:3a:e4:ad:d4:62:31:
                    35:80:62:3c:4f:00:d7:f9:31:f0:59:39:36:01:c4:
                    1b:55:7a:5b:e7:f6:4f:b7:a3:04:eb:4c:ad:f3:dd:
                    fd:df:19:e6:67:3a:bc:8f:51:30:05:a4:27:6c:d4:
                    bb:8d:da:0a:24:b9:f7:5b:5a:aa:35:a8:b5:ce:d3:
                    db:66:3e:f6:11:27:9a:84:db:6e:ac:43:87:e2:01:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B8:A5:0A:02:0B:3C:0E:9D:BB:12:6F:E0:E3:CC:7D:E1:CC:AE:33
            X509v3 Authority Key Identifier:
                keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:86:87:52:d5:13:6f:32:46:48:ea:c8:c9:6d:e7:4e:eb:66:
         a1:02:92:de:d5:dd:18:62:75:c6:88:1f:1e:4c:95:88:e8:e4:
         65:24:39:40:27:aa:ae:07:9f:e1:30:89:98:47:db:60:36:c4:
         28:ba:9b:96:c6:24:ed:29:0d:83:94:3d:c7:ad:5f:43:8b:7e:
         58:3a:d9:6b:2a:fe:85:79:5a:04:b7:d5:d5:19:7c:a2:ad:52:
         c0:6c:d1:9d:35:3a:e7:7f:56:02:32:13:d0:2e:71:6f:a2:70:
         6d:87:f9:af:b9:17:cb:49:72:cf:38:7a:ed:78:22:e6:a1:c4:
         d0:51:52:b9:e8:d5:37:b8:ef:ab:ec:ef:31:2d:3d:44:d0:61:
         4b:c4:91:9d:41:7a:16:ca:a3:0c:69:ee:88:74:ff:d5:8c:7d:
         de:6b:67:5e:19:56:74:f1:ed:f8:a9:7c:a4:9a:29:8c:c4:b1:
         61:c8:14:4d:11:09:d2:2c:a8:58:0f:a7:58:dd:dd:99:6a:c1:
         ce:84:0e:d9:e0:a8:2e:46:b3:29:c2:84:2e:75:f4:19:3d:a2:
         cf:bb:08:5b:b8:aa:4b:57:1d:ea:a1:8c:95:f0:98:45:df:d0:
         34:3b:60:c4:13:5c:6c:65:0d:e5:d1:f8:cc:6e:5d:50:be:ff:
         29:b3:84:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:45 2026 by rpki-client