Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File:                     CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier:          t4KpNWm2ncrqv5nD+44JHyp8nLwhAPfhO31mUppz59A=
Subject key identifier:   FB:FD:BA:6B:76:59:DE:BD:04:D7:98:EE:CE:6C:18:57:EE:85:24:11
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer:       /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial:       019FA8626D201F65BCFD71D44CCBCE158F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number:          19DB
Signing time:             Tue 28 Jul 2026 11:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:50 +0000
Files and hashes:         1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: nYvJ0maI4qtNmYq1J1EVTVEiwOACZMXFDqIgK/erJjg=)
                          2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:6d:20:1f:65:bc:fd:71:d4:4c:cb:ce:15:8f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
        Validity
            Not Before: Jul 28 11:00:50 2026 GMT
            Not After : Jul 29 11:00:50 2026 GMT
        Subject: CN=fbfdba6b7659debd04d798eece6c1857ee852411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:80:0a:43:1e:87:87:45:70:43:ee:c2:34:df:
                    d5:8e:84:ed:bc:f2:34:3d:89:4e:c2:4d:05:67:34:
                    26:8b:40:9a:92:b9:56:c8:19:f9:51:7f:f9:52:42:
                    b2:ce:aa:d9:0d:3e:6d:57:5f:0f:14:2a:f7:30:ee:
                    1d:d1:07:45:97:99:13:fe:a8:e9:4f:62:06:91:91:
                    b1:29:9d:09:b9:7b:cc:c3:6f:2a:6b:a7:da:fd:9a:
                    8f:cf:6a:e5:d0:a7:ec:4c:b5:9e:73:c2:b3:13:2a:
                    e4:55:f0:9a:2b:64:6a:48:a1:fb:41:ff:b3:25:9f:
                    86:43:ba:0d:78:a1:3d:71:b2:76:50:91:a5:48:2b:
                    be:e6:89:75:ad:28:39:4d:6c:b5:96:c7:60:c2:5d:
                    12:93:5f:0d:47:0d:ea:49:c0:b6:e8:91:8f:11:31:
                    a2:36:61:ea:4b:20:4f:60:60:20:f0:dd:cb:b0:ec:
                    f3:5c:ce:06:86:f2:9e:c9:30:4a:08:1f:99:de:58:
                    21:f4:ea:40:b0:a4:d8:da:b9:15:59:49:6b:05:13:
                    9a:cc:72:66:37:d5:69:a2:2c:9e:ff:cd:8d:b1:ea:
                    4c:ed:37:2d:52:bf:ae:c8:fa:4b:29:59:d3:a9:4a:
                    51:b5:f9:d4:69:50:cd:dc:e3:61:0d:ae:3d:9e:57:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FD:BA:6B:76:59:DE:BD:04:D7:98:EE:CE:6C:18:57:EE:85:24:11
            X509v3 Authority Key Identifier:
                keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:47:65:ff:69:7a:0a:cd:75:ac:68:56:05:5f:4c:ee:1c:86:
         69:d4:f5:27:ad:98:64:da:4f:00:e4:ad:d3:4c:1f:ab:05:1d:
         22:b6:f1:3d:cc:b9:b3:e4:bf:76:71:22:ae:76:4d:4e:df:e6:
         96:4c:80:b9:ee:2e:c6:14:bb:f4:3d:56:38:4c:a2:90:b6:d3:
         38:7f:e2:18:c8:79:e0:ec:bf:33:0e:34:fe:d4:89:e3:1b:86:
         8a:08:94:38:02:7b:b3:60:19:fd:42:e8:7a:01:e6:17:13:ef:
         ba:3e:fd:19:79:2d:5f:5c:ea:67:0e:c6:8a:47:66:f0:31:30:
         1c:4d:63:80:e0:f9:56:72:eb:45:8c:7f:3a:29:80:5a:5b:b4:
         31:70:54:8c:be:0a:9f:af:e2:c6:8b:d9:6d:63:4e:52:b4:9f:
         71:3a:c1:ae:bc:9d:5d:72:94:ed:90:9d:23:69:d4:94:46:38:
         ac:4b:72:f8:ac:54:76:9d:1f:05:b6:d0:d1:53:95:f8:46:55:
         4e:48:98:6d:d0:eb:13:59:e7:6a:5f:00:6d:8d:9a:5a:c9:3c:
         2f:9d:b6:6d:2a:0a:e8:cf:73:81:e1:e6:03:a7:df:4e:b5:46:
         86:af:6b:c9:aa:22:db:b2:5f:ab:59:ab:25:2a:d8:d0:d9:8e:
         4c:bd:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:16 2026 by rpki-client