Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File:                     52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier:          E0/4JQTbc7loCuVfM/M8KdL4cYL8yXm9bVAXyOvKe+8=
Subject key identifier:   CF:10:0A:DC:44:44:E4:D2:07:64:C7:90:95:96:1E:65:BE:78:3C:FF
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer:       /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial:       019FA9E33F622D6D8859786E9F0B63F010FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number:          097D
Signing time:             Tue 28 Jul 2026 18:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 18:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 18:01:10 +0000
Files and hashes:         1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: qZQkZS0Qf5AbR1I5GfiAx8HlBBOHyH3VFS/wf79I+1k=)
                          2: 5rrj-m_hEB0TpNnz9CK4K7DwWl8.roa (hash: 9owh74vfAaCJ/1OVELmifFfpJ8uxpYLTHNGPMitNfLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e3:3f:62:2d:6d:88:59:78:6e:9f:0b:63:f0:10:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
        Validity
            Not Before: Jul 28 18:01:10 2026 GMT
            Not After : Jul 29 18:01:10 2026 GMT
        Subject: CN=cf100adc4444e4d20764c79095961e65be783cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4f:90:b0:9a:af:51:91:42:65:57:a4:4c:0f:
                    43:1e:a8:eb:12:2b:57:1d:f2:f2:8c:c8:00:1f:b8:
                    7c:e2:61:dd:39:e0:5e:4d:1e:c6:86:0f:13:59:63:
                    4d:d1:ae:1c:30:a9:51:a2:8c:57:af:67:fa:e2:c0:
                    db:e0:01:c2:51:78:62:85:a8:2b:a8:3d:18:b8:27:
                    e5:46:e7:a7:d8:75:3b:8f:08:6d:c5:8a:9e:23:88:
                    7b:68:89:4f:11:21:63:af:0a:bb:a5:f8:06:aa:b9:
                    8f:b5:31:75:f4:c7:02:4e:14:8c:bc:d4:20:2f:60:
                    64:75:5e:85:9e:21:9e:54:64:1a:4d:7a:78:5f:b6:
                    ec:ff:98:31:52:87:c6:c5:18:ef:a4:49:32:d3:bc:
                    0a:f5:57:b2:86:2c:44:9b:e2:87:5c:61:ee:a7:82:
                    93:7e:3a:19:4f:c1:9e:54:72:af:67:01:aa:8e:27:
                    7d:07:d0:ed:e7:43:b4:13:a1:22:5b:38:05:8d:97:
                    9e:6b:36:ed:3f:29:f3:d2:76:54:36:02:f3:f2:cf:
                    e8:34:f5:cb:2d:ac:15:71:96:e1:67:c4:cc:89:53:
                    15:cb:19:a7:1c:30:0e:8e:c3:c0:2b:65:4e:91:32:
                    f5:1f:f5:4a:3e:0e:39:cc:0f:d7:0d:e0:69:d2:66:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:10:0A:DC:44:44:E4:D2:07:64:C7:90:95:96:1E:65:BE:78:3C:FF
            X509v3 Authority Key Identifier:
                keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2f:83:08:d8:2a:c0:5c:d6:02:5f:4c:f1:9b:28:7a:84:64:
         5c:6e:81:b5:ca:5a:e4:41:21:3f:ba:f3:d3:ad:b6:29:55:6e:
         f9:94:68:a5:ba:e1:9b:fc:16:c4:dd:56:08:e9:9c:69:a0:7d:
         bb:76:49:75:7a:16:95:01:cd:c7:40:91:41:30:dc:c0:1d:dc:
         eb:00:34:39:56:e6:4c:b9:3d:45:43:4d:12:32:b8:4b:da:e4:
         c6:ce:ce:c8:58:da:ec:4d:a3:53:c4:b2:6e:04:a0:50:bc:8f:
         d0:2c:3f:41:a5:95:1e:6d:f2:64:ca:e4:b9:10:71:b4:c0:d8:
         a7:ba:60:61:97:a3:d9:d6:d0:23:b5:c6:2f:9e:a1:55:4c:23:
         7f:70:d2:7d:44:11:db:71:89:82:93:66:b4:0f:47:b3:29:b0:
         b9:70:2c:b7:a0:c5:5a:39:9e:6a:d3:61:2e:5b:b7:a1:e0:d4:
         99:eb:1e:ec:4f:37:36:23:d9:62:3e:85:af:31:30:28:d6:12:
         00:2a:c5:30:45:9c:f5:ab:6e:2b:0e:14:85:7c:e5:24:c4:04:
         57:0e:56:20:6a:17:8c:b4:19:79:7f:46:0d:d1:e0:d0:12:c8:
         2e:b1:be:b6:2b:e6:b2:79:9d:87:8e:6f:fe:f0:20:c1:64:d8:
         af:c4:b2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:09:22 2026 by rpki-client