Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File:                     1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier:          amq1XndFWLpkh9Eg8waGPYkLB3oMQsf8qd8s94abtKo=
Subject key identifier:   A2:7C:DF:F6:2D:70:02:8C:94:2A:43:A9:51:37:57:86:D9:CB:76:30
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer:       /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial:       019FA906CCDC6D2892FA3F6632276E576BE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number:          06E7
Signing time:             Tue 28 Jul 2026 14:00:22 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:22 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:22 +0000
Files and hashes:         1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: 0s+vt4uMbp86tVhnAoGSegsF2G5J5skPjjVRldlaozU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:cc:dc:6d:28:92:fa:3f:66:32:27:6e:57:6b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
        Validity
            Not Before: Jul 28 14:00:22 2026 GMT
            Not After : Jul 29 14:00:22 2026 GMT
        Subject: CN=a27cdff62d70028c942a43a951375786d9cb7630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:53:c1:56:e8:fe:15:46:25:c3:0c:a6:16:30:
                    42:3f:ab:9c:3a:1b:27:7f:69:53:44:f4:5f:86:7d:
                    2b:4c:e1:ed:34:d3:9b:75:26:cb:50:be:e4:c8:a2:
                    a2:5e:4e:23:dc:6f:d3:d9:3d:8b:ca:47:b4:15:37:
                    04:ba:33:3e:4e:75:0f:12:9b:aa:43:e8:70:8f:54:
                    fc:ca:23:28:78:40:b1:36:1e:37:68:47:b0:af:a7:
                    8b:01:31:e4:60:30:cb:48:e9:0d:5f:6f:9b:03:32:
                    2a:c5:e9:36:8d:30:fb:17:1c:9b:be:ba:6a:f8:d2:
                    66:b8:3a:79:6b:f8:31:57:30:f2:6e:48:4b:4f:13:
                    a6:1e:fa:9c:39:4f:9f:01:be:47:c0:c8:df:03:a5:
                    a9:29:a8:b5:62:be:62:51:4b:2b:40:bb:39:24:1f:
                    b1:7b:d0:da:3d:60:0a:c7:49:53:3d:c5:2b:73:46:
                    57:7c:81:8d:c7:47:9f:a7:3e:c4:7c:7d:b8:3a:d2:
                    91:62:b2:6b:16:92:c8:65:30:79:af:b9:23:5e:9a:
                    8c:d4:81:00:69:20:7c:9c:15:02:63:52:db:57:c2:
                    ac:27:1a:b7:fc:82:f7:0b:44:84:32:ee:a7:2f:27:
                    79:3a:cf:87:9f:77:b2:5e:c9:60:bc:48:7f:30:85:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7C:DF:F6:2D:70:02:8C:94:2A:43:A9:51:37:57:86:D9:CB:76:30
            X509v3 Authority Key Identifier:
                keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f0:28:7a:ba:41:a3:90:1b:fb:7f:55:98:34:f5:e3:12:ec:
         d1:cc:87:dc:03:a1:86:b8:21:c8:f3:44:b0:78:6d:6c:bd:d2:
         85:f5:ac:9f:b2:38:2b:10:32:ef:f0:70:5c:ca:b8:1e:8f:f1:
         ce:ce:ed:44:23:3e:db:b5:81:da:0f:88:68:91:ca:08:8d:d3:
         f5:f1:64:2a:cd:d2:e0:f4:9a:e5:7d:c7:66:c9:36:19:83:90:
         44:27:d9:13:59:1a:01:90:c0:6b:ea:76:1f:2e:55:c5:0e:97:
         63:39:7d:4e:c6:fc:7f:3b:9b:29:13:a9:3c:7b:fe:e5:57:15:
         31:88:0d:ed:94:2b:9f:4c:ac:0f:31:9a:f0:a9:c1:5c:f4:44:
         41:51:47:ea:78:fa:c8:fa:57:fc:61:2f:79:e6:78:9c:23:bf:
         18:cd:32:8a:f9:7b:03:d8:c1:36:5c:67:9b:13:73:0f:ec:ea:
         cc:8f:79:66:a1:76:2a:7f:0f:5e:71:a9:26:fd:ee:da:cd:25:
         b9:be:cb:b7:fa:40:92:fd:0f:fb:00:63:b9:c9:62:3b:c3:26:
         74:d7:d2:ba:f5:d1:f3:13:e1:5f:f8:ed:24:3d:b9:fc:f3:00:
         25:08:e2:f5:83:35:d1:8f:73:c8:0a:41:1e:4c:77:c8:81:20:
         8e:f3:db:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:44 2026 by rpki-client