Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
File:                     55b_u99E78Ho4QIA1J2o7tCjtx4.mft (raw, json)
Hash identifier:          wQv96fdWXlByCYXS0283+3ZlYQpQDVVe6AqOyndJXg0=
Subject key identifier:   33:1E:05:2B:09:91:AF:8A:BD:93:AB:B5:FF:B7:EC:39:5A:38:C3:1F
Authority key identifier: E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E
Certificate issuer:       /CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e
Certificate serial:       019FA8624F6D320B63EB3992CBAFD5798BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 11:00:42 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:42 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:42 +0000
Files and hashes:         1: 55b_u99E78Ho4QIA1J2o7tCjtx4.crl (hash: jRxv0hk9v7UTto4OcafvmzJoPOF35CWFwIVp8p0BP+A=)
                          2: 6_7eZf24isCNW4I6xx_t7mR7qHQ.roa (hash: K+RrpBJZJgRykfH3os4A5wEvK1ISeCA14xU5M4pO5jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:4f:6d:32:0b:63:eb:39:92:cb:af:d5:79:8b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e
        Validity
            Not Before: Jul 28 11:00:42 2026 GMT
            Not After : Jul 29 11:00:42 2026 GMT
        Subject: CN=331e052b0991af8abd93abb5ffb7ec395a38c31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:c1:ab:37:6a:14:df:87:be:96:00:19:86:
                    45:b0:2b:10:a3:f5:d6:66:be:9e:dd:9b:51:22:dd:
                    eb:f0:45:e1:91:57:e7:d7:ff:25:3e:05:5e:4d:e6:
                    15:f2:d3:97:af:57:57:35:fe:76:87:93:26:7f:ab:
                    5b:d5:1f:a0:0e:77:ce:2a:3a:5b:d0:3f:c4:8f:95:
                    5e:bc:74:e8:6b:fd:ce:07:5f:7a:7f:12:6e:6a:95:
                    4a:bc:c3:4d:d2:fa:68:ee:ac:b5:6d:1f:a1:98:dc:
                    69:62:52:0c:f2:86:b3:ee:f8:dd:ae:5b:e2:25:a9:
                    10:a5:0f:b8:69:4a:ad:a3:7e:9f:1e:a2:04:3b:9e:
                    15:00:16:ef:56:e5:55:3a:fe:e8:00:6f:e8:53:10:
                    d8:5f:b2:ef:94:d5:32:87:e3:e1:db:45:33:62:f5:
                    9b:7e:81:90:cb:91:fa:97:fd:ba:89:23:8d:d1:70:
                    27:a3:96:4c:fd:32:cf:2d:1e:ee:7e:35:ad:d9:a8:
                    c5:ac:e0:d6:59:59:dc:91:2f:5e:8b:75:a2:97:ee:
                    55:b4:21:4b:a2:25:17:96:f9:7a:75:1d:23:3c:ff:
                    30:12:43:af:11:a4:06:ff:66:be:fd:e1:13:b9:92:
                    9a:df:c7:a3:dc:17:36:89:de:98:df:01:ba:12:8e:
                    c8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1E:05:2B:09:91:AF:8A:BD:93:AB:B5:FF:B7:EC:39:5A:38:C3:1F
            X509v3 Authority Key Identifier:
                keyid:E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:61:2f:e2:73:23:fb:99:d4:cc:b7:17:6a:5b:06:2b:db:4b:
         31:7e:2d:d4:75:5b:c7:1f:46:8f:f9:fa:af:c7:ef:ad:99:1f:
         4c:eb:63:67:af:e6:40:d9:44:86:0b:ac:f5:de:1d:f1:56:0c:
         16:14:1b:0e:d5:16:89:cd:68:33:54:74:d2:8d:ab:c0:e5:d1:
         be:c5:7d:82:ed:d3:de:0d:36:7c:f3:5a:a5:59:c0:21:1b:cb:
         ad:22:92:69:de:2e:7c:16:24:8c:5f:67:ed:cd:32:ae:0a:00:
         68:bd:cc:9a:15:17:6a:e2:7d:a9:8a:07:25:63:ed:fe:56:f3:
         f6:f1:8e:52:a0:7b:04:d7:56:6c:3d:85:b7:e3:1b:54:20:5e:
         df:19:d7:b6:c5:68:c7:83:3a:dc:cc:7a:b0:0a:6d:57:c0:f0:
         d5:74:a5:f8:ba:7b:18:ce:7b:a4:99:b3:05:6a:d9:53:b2:1a:
         12:55:1c:fe:d4:a9:3b:8a:72:45:ed:6b:b6:5e:21:98:72:22:
         44:ca:32:17:35:d7:83:2f:ce:dc:ff:46:57:fc:b4:2b:b3:59:
         1c:5c:df:ca:f2:c4:08:21:14:a2:3b:e7:fc:e7:7d:53:ca:6e:
         25:37:f3:43:14:c3:9d:72:23:63:f0:e6:b3:1e:58:54:08:cc:
         61:6a:b1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:22:23 2026 by rpki-client