Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          0p1p0w5AK4LBw+S1xQKMHSRLYMat4JRqX57d0dtKJvM=
Subject key identifier:   69:22:CB:41:EB:27:0D:4F:16:56:C3:4A:05:C0:EE:5D:47:DE:B8:14
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       019FAC77280D45666C72EE220CB29EBEBDE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          0E22
Signing time:             Wed 29 Jul 2026 06:01:57 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:57 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:57 +0000
Files and hashes:         1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: tVL20FaavihAC0HkC3JjKaIpoJb2PguLMEy4GGdIqng=)
                          2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:77:28:0d:45:66:6c:72:ee:22:0c:b2:9e:be:bd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: Jul 29 06:01:57 2026 GMT
            Not After : Jul 30 06:01:57 2026 GMT
        Subject: CN=6922cb41eb270d4f1656c34a05c0ee5d47deb814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:73:20:ee:5d:f8:7c:7e:5f:4b:b3:a0:62:
                    46:33:c5:40:db:84:4a:40:db:04:7c:04:3c:ad:37:
                    fb:af:5f:ce:39:00:f7:31:c2:f2:51:cd:2f:68:90:
                    ab:ca:79:aa:43:b9:2e:06:6b:e8:42:a6:6c:87:2c:
                    6b:62:19:9c:71:5d:63:d2:4a:76:cb:56:44:d3:df:
                    9b:05:f7:28:62:d1:9c:cd:12:fd:86:09:94:47:31:
                    8e:c3:e1:0d:60:80:1c:cd:be:07:ca:4e:f8:35:5d:
                    14:f5:75:78:3a:8f:a5:af:1a:3a:01:4c:64:6b:50:
                    07:3b:0e:e3:8e:3e:7d:87:20:bf:7e:2b:cb:e6:cb:
                    05:91:8c:cf:6a:fd:82:8d:3c:58:41:26:bf:16:21:
                    2c:1b:1b:c5:91:63:26:a9:01:e1:0f:19:04:06:40:
                    a5:b5:be:bf:e4:4f:1a:07:7c:0c:3b:48:b7:33:0c:
                    ce:0d:d7:01:ae:85:a5:90:55:2e:2b:c5:d0:9a:69:
                    2f:bc:f4:37:f4:9d:60:1d:5b:56:64:84:b6:68:9e:
                    d3:dd:0c:4e:a9:c0:f9:12:8d:90:4a:df:de:72:fc:
                    a2:84:09:a6:03:07:70:20:54:df:10:09:c9:d3:72:
                    86:67:2d:ab:00:5f:49:1f:ce:46:31:f7:a7:b2:f3:
                    0b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:22:CB:41:EB:27:0D:4F:16:56:C3:4A:05:C0:EE:5D:47:DE:B8:14
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:29:b3:2b:11:0e:1b:92:b7:4a:c8:ce:72:96:56:16:96:d5:
         8a:68:61:ec:72:4e:fd:d3:ae:f8:8d:da:d4:f3:0b:18:c4:18:
         6e:cc:f9:35:57:fc:e3:10:c8:b3:dd:29:69:67:2f:db:56:51:
         6f:9a:84:ed:bd:77:ad:97:b9:da:60:2a:78:f3:53:c9:0e:a4:
         35:fd:b5:75:4a:3a:50:b3:bc:94:40:18:29:89:a3:b6:8d:6f:
         b0:d5:e6:82:9e:29:e7:02:56:ca:58:6e:d4:31:32:cf:ba:3a:
         c5:cf:be:87:8b:94:4b:7b:1f:04:e1:fe:25:be:40:9e:8b:df:
         22:42:2e:ca:14:8e:92:de:b7:89:35:fa:c3:b2:00:27:1a:d3:
         ae:57:38:d1:56:04:38:25:4a:30:1a:3e:84:79:64:18:5a:d2:
         9b:64:ba:b4:d7:74:6e:dd:a3:7e:e9:14:4e:39:83:69:0a:da:
         53:5c:36:4d:cf:78:36:1d:7d:79:e2:c3:07:6d:e3:4d:e1:81:
         17:6b:b6:17:53:7a:a3:b8:3a:7d:97:ed:8c:9f:46:bf:2d:e0:
         c1:eb:78:b9:38:94:40:e2:54:85:9f:81:a8:6f:90:82:c4:ab:
         02:72:ff:af:a4:f9:1b:30:c7:01:9f:d4:71:08:8d:5b:64:36:
         25:4e:7b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:02:58 2026 by rpki-client