Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File:                     8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier:          9j6M0EmDbKUhgR3PfXQc2Z3O6ihvgv6PMOmzZYgaORY=
Subject key identifier:   B7:66:44:64:EB:B8:C7:9B:71:72:9F:5B:7B:09:EB:D3:C0:3C:64:EA
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer:       /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial:       019FA97539A1054B70DD78500ADCF189A4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number:          19D0
Signing time:             Tue 28 Jul 2026 16:00:59 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:59 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:59 +0000
Files and hashes:         1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: t4glnPwFNtVorbQoZfybmkOPXZ1zJk68yrAJVCVHbV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:39:a1:05:4b:70:dd:78:50:0a:dc:f1:89:a4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
        Validity
            Not Before: Jul 28 16:00:59 2026 GMT
            Not After : Jul 29 16:00:59 2026 GMT
        Subject: CN=b7664464ebb8c79b71729f5b7b09ebd3c03c64ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:e6:76:37:67:dc:3e:f3:e0:46:30:95:da:
                    da:cf:a3:c0:c9:b0:ad:ca:f8:73:47:73:5d:96:9d:
                    74:b4:37:46:d8:df:f4:b4:e1:f3:da:cc:ee:d4:48:
                    0e:25:d3:72:80:d4:f8:db:93:6c:90:ea:70:aa:ec:
                    1c:d6:24:a6:70:0b:d1:67:fd:fb:0e:35:11:87:9e:
                    e8:0e:f4:ec:5c:ef:ef:f9:85:40:5a:c8:9c:1c:26:
                    99:9f:a6:1d:6f:13:fc:e7:b5:97:4a:eb:69:83:2a:
                    c2:30:2e:76:7c:00:ed:d7:23:93:36:3f:91:2c:b4:
                    3c:f7:f0:22:39:89:48:15:21:07:e7:76:94:07:c3:
                    6a:4d:ef:05:05:a6:b1:24:1d:6f:ab:11:bf:d2:52:
                    a7:d9:d4:ad:9e:8d:4e:10:98:6a:a7:33:fd:91:81:
                    34:0f:90:f3:98:20:47:63:54:87:0a:c1:5e:3c:5e:
                    b8:99:d1:17:84:ce:a1:0c:86:a3:5f:79:9c:b2:10:
                    fc:64:eb:67:71:70:ea:be:64:d8:db:a2:fd:3a:dc:
                    3c:73:b5:a1:1e:e9:a8:e2:fb:42:57:df:33:48:29:
                    67:53:08:24:3d:bd:9a:ac:64:8b:1d:ac:cf:a9:1c:
                    57:5e:ad:11:5e:6a:e1:b7:54:08:43:96:d7:a4:2e:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:66:44:64:EB:B8:C7:9B:71:72:9F:5B:7B:09:EB:D3:C0:3C:64:EA
            X509v3 Authority Key Identifier:
                keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e8:c2:d8:fe:5b:25:75:92:30:d0:94:55:c4:20:ed:e7:1d:
         62:2f:b6:1a:f9:2d:4b:0b:de:72:21:bb:a4:af:c3:85:af:8d:
         a0:88:8d:e3:4b:76:35:f7:16:6d:c8:44:1f:1c:c4:19:16:ef:
         2d:11:07:6b:0c:f5:c0:49:40:0a:c2:9d:95:02:3c:f8:5a:ad:
         35:d0:d4:3c:d2:6d:b3:c6:7c:7e:3b:88:ce:7d:74:1f:e6:45:
         b8:98:12:e3:93:f9:fd:eb:19:31:9c:09:b9:86:12:24:2b:f5:
         f9:27:96:3f:65:ce:fa:7a:5f:f7:36:bb:a3:ff:dd:26:8e:cf:
         73:7c:6a:6b:20:ee:de:10:74:c9:1d:58:de:5a:8b:61:37:d9:
         3f:05:75:87:c7:9a:e0:12:18:d1:c4:18:b1:ac:5e:47:2c:c6:
         cb:78:5d:b0:ed:d3:00:33:d6:87:c4:22:7f:b7:6a:0b:e3:0e:
         76:e9:8f:be:cc:3a:23:20:6d:d4:c4:83:e5:29:d5:95:df:a1:
         11:31:80:b0:21:21:98:95:f8:89:5f:80:0d:24:3d:24:b3:9b:
         f5:c4:bb:f5:2b:36:7d:6d:ca:6d:9e:ee:60:c3:59:c2:b9:cb:
         e7:cb:5a:5d:cf:14:d6:be:ed:d7:67:c5:80:ed:51:ed:77:be:
         26:ea:86:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:26 2026 by rpki-client