Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File:                     10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier:          +IXJbY7waZdShg53XImjSVCZB8ulXtIlQqhSJ89+6Qo=
Subject key identifier:   9F:8E:C6:51:55:CB:8F:DA:59:22:8B:53:0A:5C:27:9C:8B:1C:86:BE
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer:       /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial:       019FA8D061D29AECBBE4B281A00181A21C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 13:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:56 +0000
Files and hashes:         1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: pRjOIgd4lAgmXT2Yx7h2KsziLXiAD7nsiLvBNMCqNfs=)
                          2: OAbpOTnAOzglaKzJYR_dSWth0y0.roa (hash: p0BRSUqt0ibbeGiIUqDvTDnDIoyeLcX+EC1SME0H0Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:61:d2:9a:ec:bb:e4:b2:81:a0:01:81:a2:1c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
        Validity
            Not Before: Jul 28 13:00:56 2026 GMT
            Not After : Jul 29 13:00:56 2026 GMT
        Subject: CN=9f8ec65155cb8fda59228b530a5c279c8b1c86be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f4:2a:15:fe:14:58:10:0b:16:a0:86:f1:c1:
                    d5:6b:54:db:eb:01:68:57:6f:bf:fe:4d:fb:b8:ff:
                    1e:9a:eb:46:1e:ad:00:89:04:3d:5a:f5:95:ee:bc:
                    51:ca:5a:78:a6:18:68:42:16:77:eb:3d:87:09:77:
                    0a:76:75:45:08:1c:a0:3f:d3:cf:54:c0:4e:e3:72:
                    af:4d:3b:d1:4c:a6:62:1c:72:59:b7:60:22:b6:de:
                    88:de:8d:cf:7d:89:cb:b6:02:ad:9d:0e:0a:4b:ec:
                    78:e8:44:a2:3c:a0:c1:31:6d:94:d3:03:f4:38:60:
                    a3:87:81:51:8d:15:ab:18:a5:50:6e:08:5d:63:00:
                    7e:1f:7a:56:6b:be:a2:07:04:63:4a:f0:1a:82:d9:
                    5f:0b:55:da:06:5a:50:0d:36:56:00:1c:73:a6:1e:
                    57:0f:03:d4:96:df:2e:84:de:97:7a:db:5e:9a:2d:
                    f0:9f:0c:bf:54:fb:a3:af:6b:8f:5a:7f:f4:bf:df:
                    98:ab:0c:f6:3b:db:d1:06:86:f6:4e:41:39:ee:7d:
                    50:67:d3:27:e9:d9:c9:02:f4:72:27:c2:d8:f4:21:
                    e4:34:53:ef:80:f3:af:1e:3f:c9:90:2b:f8:27:83:
                    63:a8:99:d7:19:2b:e9:fb:38:7e:d8:70:07:8b:1f:
                    ca:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8E:C6:51:55:CB:8F:DA:59:22:8B:53:0A:5C:27:9C:8B:1C:86:BE
            X509v3 Authority Key Identifier:
                keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:14:61:53:6f:6a:2b:7e:0e:83:5e:bd:35:31:5c:7a:5b:4f:
         10:d1:e9:e3:dc:3a:54:ba:25:dc:14:22:00:55:67:d2:6e:e7:
         56:c1:4e:60:38:7f:d8:e7:65:65:8f:75:19:88:f3:f8:5f:19:
         98:5b:e5:61:3b:a5:93:fb:f3:56:11:a0:c4:05:e1:2e:f9:ca:
         03:e9:cc:42:3c:48:51:fe:68:01:0e:9f:4f:0c:6b:f8:de:ee:
         35:5c:43:23:94:bb:92:a1:8c:80:0e:d0:96:31:48:03:2e:24:
         24:99:a7:c2:b7:25:b0:fe:ee:32:9b:ae:f7:43:1e:0f:ab:f3:
         bd:7f:da:23:21:cd:66:78:c7:a7:a5:bd:8c:ed:34:19:f7:32:
         d1:93:5d:a3:b3:6d:b4:e4:23:e2:82:fb:b0:d9:d3:bb:90:2d:
         5e:c7:00:b8:b4:f1:29:b9:c0:5d:af:8a:e6:fd:14:1c:42:10:
         52:61:bb:9d:77:c3:cf:0e:fe:9c:44:1a:a4:5e:ee:df:61:22:
         39:84:cc:58:ed:e3:18:b5:fc:e2:1e:aa:86:4e:28:fb:69:1b:
         6f:22:f2:9b:15:0c:1d:ab:f7:bd:3d:49:9c:17:4c:91:e0:f5:
         cd:a3:1f:1c:5f:94:4a:cc:d0:0d:2e:07:9f:b7:52:63:13:66:
         56:e2:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:50 2026 by rpki-client