Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File:                     0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier:          5H9ADy6Ce4eJ/bwS5ycxXxTtOmRPuZHb8Nt8nvypLWc=
Subject key identifier:   66:0B:4F:EA:F2:5A:EC:D8:46:51:3C:34:5F:57:CA:60:CC:99:22:04
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer:       /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial:       019FA906FE1B2057B6549BD30091E2969896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number:          16D4
Signing time:             Tue 28 Jul 2026 14:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:35 +0000
Files and hashes:         1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: h5Z2XvJAZDV46Og8RVJYwWy1Fx3LG47oRCJjzBhzsHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:fe:1b:20:57:b6:54:9b:d3:00:91:e2:96:98:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
        Validity
            Not Before: Jul 28 14:00:35 2026 GMT
            Not After : Jul 29 14:00:35 2026 GMT
        Subject: CN=660b4feaf25aecd846513c345f57ca60cc992204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bf:95:94:ed:e9:87:c0:66:53:67:b1:1e:67:
                    e3:a0:5b:65:39:3c:fd:4a:65:90:0d:3a:eb:8a:11:
                    30:69:b2:d4:74:79:79:4c:ee:3a:86:96:e6:ea:78:
                    06:44:56:b2:0b:8d:b6:d3:98:9c:fa:3f:37:b6:e7:
                    51:16:de:67:b4:e0:82:61:c9:81:ca:fb:f5:b6:15:
                    d3:78:14:53:ad:74:7f:fb:be:fa:0e:58:7a:78:a8:
                    a6:11:9b:3d:5e:be:89:54:3a:92:6c:de:fd:63:a0:
                    88:a9:46:05:05:fe:b9:43:6a:ff:f5:11:36:ac:b6:
                    0d:dd:e4:5c:2c:9b:18:be:b1:47:c7:52:1e:cf:07:
                    33:65:37:0e:c3:c2:74:76:34:61:6e:91:79:5e:55:
                    27:c9:e8:11:70:34:fb:f7:33:72:c0:40:f2:87:f0:
                    85:95:a2:fe:43:c7:08:c0:fe:a3:ed:5c:0d:8e:ad:
                    55:41:0b:81:a6:5c:66:0b:6c:6c:6c:ce:91:fa:11:
                    f2:40:f3:3c:95:2f:62:d5:b5:96:10:06:b9:9f:b8:
                    65:26:a6:81:67:be:18:36:98:54:3d:67:b8:6a:cf:
                    bb:4b:08:d7:50:59:27:d0:a7:7d:d2:87:58:9b:2b:
                    95:dc:92:99:18:d4:a6:b9:07:c6:12:67:32:9f:b5:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0B:4F:EA:F2:5A:EC:D8:46:51:3C:34:5F:57:CA:60:CC:99:22:04
            X509v3 Authority Key Identifier:
                keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:96:c1:29:2f:1f:c9:33:63:06:e2:2b:5f:77:93:df:7e:00:
         de:8f:fd:a6:b8:6b:db:63:1f:f6:fc:c7:b5:8e:3f:52:d1:ce:
         5d:ac:a0:ff:cb:5a:74:2a:f2:da:b3:37:3a:88:7b:80:42:6e:
         da:ea:79:21:e0:5a:a3:e8:43:af:98:65:33:54:00:01:1b:90:
         3d:6f:b1:33:cd:e6:11:2c:3b:a6:77:81:54:bf:b8:d4:50:47:
         02:55:3a:d6:a5:88:8c:ce:9b:10:4b:ba:28:2c:30:19:fb:56:
         f4:b3:cd:59:00:0f:7d:b0:e6:32:43:4b:52:5e:ac:f3:ea:52:
         23:14:8a:6b:9d:f8:6a:a4:49:de:f2:45:d1:ea:e8:17:c3:77:
         0a:ea:c8:51:11:f7:93:69:d9:4d:13:9f:99:d5:05:88:89:dd:
         e7:d0:b3:7e:b2:2d:51:05:ff:35:29:06:8c:64:42:14:f2:6c:
         36:3e:20:73:45:00:97:d6:b5:0b:33:79:de:35:15:a8:7b:14:
         23:e3:27:60:09:5a:93:c9:0b:d6:4d:ba:aa:f2:f5:d2:74:41:
         00:5b:f7:dd:b6:d1:93:28:2c:50:c0:74:09:31:1d:dd:5f:5d:
         0c:be:e3:d3:2e:df:f7:2d:bd:93:a8:3a:64:47:e1:d5:5b:c3:
         c0:9b:8b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:53 2026 by rpki-client