Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File:                     7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier:          R5uk6ywgTyn2olsfvDoAoLSVx1rlPmkXF7SESd1Kbi0=
Subject key identifier:   2E:36:F3:E1:B0:D7:65:05:B3:25:DE:7D:C3:A8:20:06:26:18:93:7C
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer:       /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial:       019FAA883FF3960F9155E964AFD361996225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number:          19CF
Signing time:             Tue 28 Jul 2026 21:01:23 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:23 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:23 +0000
Files and hashes:         1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: 047e0sw/P3+AOTmQQnN94HqCGgbpKB5NnaOsIRjzG8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:3f:f3:96:0f:91:55:e9:64:af:d3:61:99:62:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
        Validity
            Not Before: Jul 28 21:01:23 2026 GMT
            Not After : Jul 29 21:01:23 2026 GMT
        Subject: CN=2e36f3e1b0d76505b325de7dc3a820062618937c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:4a:a7:f3:4d:a0:e5:ec:1e:3c:af:40:21:
                    23:ce:f6:3e:21:79:51:8b:5c:92:cd:6f:0d:72:ef:
                    6e:7b:c2:09:6a:a1:cb:af:7e:c5:a9:ad:40:ec:cc:
                    02:f1:83:75:29:7c:e7:30:5b:48:68:89:dc:eb:5f:
                    3c:35:9d:e9:88:2b:42:20:55:ee:dc:94:1c:3d:7e:
                    2f:2e:7a:c1:ab:d5:3f:06:fc:57:ac:89:2d:01:e1:
                    60:61:a5:59:bf:38:2e:c2:c0:c8:e9:cf:99:68:bb:
                    aa:a4:06:1e:de:3c:82:58:28:37:17:24:7c:0b:f2:
                    ac:6a:a0:5c:41:4c:72:24:e7:f1:e4:ea:f9:cc:55:
                    88:c3:5c:fb:53:ab:75:21:ae:ea:5d:7c:79:c1:93:
                    a9:f2:55:5c:9c:6c:8c:63:b4:e5:98:f3:6b:f0:bb:
                    a6:67:cc:84:0f:79:78:d8:b4:d3:9f:b3:8b:14:0c:
                    f7:74:31:d6:4f:ac:94:3d:28:3c:21:38:da:aa:a7:
                    60:c9:05:dd:fb:ba:df:37:1b:16:f5:58:77:46:63:
                    f2:17:5f:47:c6:2d:11:32:0b:a6:86:6b:8e:6b:a2:
                    bb:92:09:c4:0f:b0:a1:d1:45:04:26:9c:5a:72:23:
                    58:98:a1:07:ae:ae:2d:83:60:aa:5c:a4:84:f7:6d:
                    b5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:36:F3:E1:B0:D7:65:05:B3:25:DE:7D:C3:A8:20:06:26:18:93:7C
            X509v3 Authority Key Identifier:
                keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:81:05:9f:7b:c0:4b:dd:bc:42:9b:e4:66:d2:ad:93:9f:
         95:19:43:37:34:20:ef:51:36:92:30:da:ff:fe:9c:c4:5e:51:
         f1:14:32:28:ca:8a:ce:36:3e:e3:49:c9:03:64:49:4a:f2:1a:
         1b:19:04:50:c7:ee:d3:97:23:b4:a2:ea:51:f3:c3:4a:b8:42:
         0e:e8:78:3a:fd:2a:6a:6f:87:45:de:3c:24:e1:d4:97:79:3b:
         14:75:6c:72:6a:5e:ec:6f:c4:82:37:76:83:9f:18:f3:99:ba:
         4f:0b:eb:fa:44:26:b3:48:1d:bb:06:e3:f4:47:a4:26:64:e5:
         10:70:73:ce:e4:f4:53:0e:76:28:00:6d:b0:c3:2c:41:b9:82:
         84:1c:7f:4d:a9:19:08:47:76:fa:c9:13:53:78:97:c7:f8:8d:
         b6:6e:c0:05:fa:66:e7:43:69:85:8b:5c:2a:e8:c7:42:50:d9:
         2a:7c:3b:69:9f:27:84:34:dc:dc:0a:c1:e4:2c:32:9c:3f:42:
         85:86:69:2e:a8:ec:91:b3:05:0c:81:65:a8:50:10:40:f6:c1:
         85:db:f5:09:fa:b3:88:0d:a2:96:0c:36:51:ec:37:32:03:fe:
         d9:65:67:4f:14:b8:1f:bd:fe:33:9c:61:ff:ad:1d:7a:ad:8a:
         9f:71:a0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:53 2026 by rpki-client