Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File:                     7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier:          TY+/pxbLoy/KW9QxYhAAJeOdtKJBdGMXP7eHa/XE7HM=
Subject key identifier:   50:A3:5B:D7:C2:92:C2:10:86:7E:62:58:38:91:4C:32:87:9F:96:B6
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer:       /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial:       019FA82BF5EF00DD92828444445748707F47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number:          19D1
Signing time:             Tue 28 Jul 2026 10:01:20 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:20 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:20 +0000
Files and hashes:         1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: JA884rN/eJ1kd3EtYWV5+47EITP42ZRMjCmlVG6JdAM=)
                          2: oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa (hash: qgN0ZwFa85gMlSMo8H+ZBEVFv906WUNJ1MUKTtcyf+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:f5:ef:00:dd:92:82:84:44:44:57:48:70:7f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
        Validity
            Not Before: Jul 28 10:01:20 2026 GMT
            Not After : Jul 29 10:01:20 2026 GMT
        Subject: CN=50a35bd7c292c210867e625838914c32879f96b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:9e:bf:f4:06:01:d9:a9:1b:ae:fb:5f:dc:
                    41:78:76:f5:cb:54:f0:b7:96:a3:8e:89:25:82:72:
                    80:6b:1f:76:ea:34:7f:92:91:44:1b:4c:95:96:7c:
                    c8:97:79:f7:b3:49:32:d1:38:b9:78:ee:63:b1:9a:
                    4c:42:f7:c3:f0:d3:1a:e7:e7:4c:8e:0b:3c:67:65:
                    7c:4e:3e:a5:2f:34:d0:cc:d7:34:8d:9a:ae:bb:29:
                    73:38:8e:9e:e7:1e:2d:d2:cb:35:40:25:99:e2:bf:
                    67:ce:87:f6:a7:96:32:85:00:49:ef:00:a1:6e:1e:
                    f5:cd:cc:00:54:af:67:1b:6c:7d:d5:3e:40:3a:52:
                    a2:96:d5:63:da:c0:e0:51:20:cb:fc:92:3d:18:35:
                    8b:a7:8c:98:13:3b:22:06:90:ef:cc:5e:4e:bd:07:
                    b4:6f:d8:bc:3f:b2:0d:de:71:34:83:72:0d:26:d4:
                    2e:5b:3a:df:56:73:44:7c:48:10:ca:41:88:6e:00:
                    12:04:28:80:cb:41:6a:4d:b7:13:a7:3c:39:ab:e6:
                    2d:da:de:71:27:81:cc:c4:c2:ba:10:d1:61:45:8f:
                    7f:6f:2c:c2:53:b1:1e:21:f0:98:a3:e6:4a:5f:d1:
                    19:15:43:1e:d9:ab:d1:44:78:b3:44:0b:c8:72:ac:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A3:5B:D7:C2:92:C2:10:86:7E:62:58:38:91:4C:32:87:9F:96:B6
            X509v3 Authority Key Identifier:
                keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:24:73:70:7f:24:bf:61:4d:b3:74:ee:19:ca:15:93:78:43:
         44:0b:fd:55:99:46:46:78:19:4a:8c:d5:4e:b0:74:54:10:6d:
         cd:48:e5:ed:ec:00:d4:97:cc:f1:06:cf:1f:f0:79:b9:75:76:
         bb:20:6a:6c:2b:0a:68:c5:f3:c3:98:27:10:fe:29:25:46:ef:
         6e:f1:a2:32:17:45:9b:90:27:9b:f3:dc:47:fb:9f:bb:2d:64:
         55:c4:81:ff:58:c3:1b:01:1c:2f:eb:be:30:62:0f:47:1b:e1:
         f1:87:53:f8:41:91:eb:51:d5:1e:af:71:40:57:1a:ff:2d:eb:
         dc:73:a9:34:d5:da:b1:02:44:78:94:8c:5c:07:0b:92:66:cb:
         d0:b8:d3:66:aa:03:31:51:a5:50:78:79:be:25:00:03:dd:b2:
         26:6c:53:90:ff:b8:2b:16:cf:aa:08:fc:94:47:7b:3a:7f:01:
         27:c1:77:38:3f:64:11:77:4e:96:d4:48:f3:83:af:bb:f6:8b:
         39:4c:b2:bb:87:a5:36:a9:72:37:65:d1:e4:97:e4:68:d9:33:
         60:ab:82:5c:46:b9:a6:93:0c:12:e3:c2:44:e8:3d:17:14:e9:
         96:31:2e:50:b9:29:a1:67:43:d0:94:ba:33:64:35:69:eb:64:
         d0:51:e9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:37 2026 by rpki-client