Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File:                     1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier:          7eRZZbyBNiU40uY/yuw4VIO2cJxcLmmzwDs0GR669bM=
Subject key identifier:   88:B1:E0:D1:E4:C1:74:98:EC:B8:BE:19:67:FF:E5:21:B1:0B:BC:F9
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer:       /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial:       019FA9E2CE4BB40F474D525196F172395D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number:          0EDE
Signing time:             Tue 28 Jul 2026 18:00:41 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:41 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:41 +0000
Files and hashes:         1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: D9/8TrzYG1TRTmA6ZprT8DMhBbZWeTWWQad/GDtOyGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:ce:4b:b4:0f:47:4d:52:51:96:f1:72:39:5d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
        Validity
            Not Before: Jul 28 18:00:41 2026 GMT
            Not After : Jul 29 18:00:41 2026 GMT
        Subject: CN=88b1e0d1e4c17498ecb8be1967ffe521b10bbcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:6d:29:dc:6a:bd:38:ed:bb:fd:45:d8:3f:
                    48:09:f1:78:4d:3d:53:91:37:75:ae:3c:cc:7d:5c:
                    2e:ea:4a:21:ba:6d:2a:65:b5:2d:cb:87:e4:c5:21:
                    e5:be:e7:57:8f:f4:ed:f5:cf:f1:d0:8a:d8:27:c6:
                    bc:2c:82:e7:0b:29:8a:95:f3:1d:90:bd:d0:70:56:
                    72:5f:14:2c:32:9a:59:08:b3:98:66:af:ea:a7:1d:
                    39:4b:e7:66:68:f6:79:a8:19:ea:14:ca:b9:92:43:
                    ba:a9:94:d7:1f:b2:27:73:6f:ed:0e:da:a8:9f:90:
                    23:d6:d6:c5:f8:91:97:bc:2f:a1:46:98:22:93:52:
                    41:da:ad:0e:a1:34:3c:ae:16:ae:d2:c4:0f:d6:bc:
                    ee:66:4b:16:56:74:5c:eb:86:40:19:3d:1f:95:83:
                    9b:14:d7:0c:7e:02:c9:7a:74:8b:87:f2:9f:30:30:
                    88:c1:c9:3d:4f:46:e7:2f:af:09:d0:38:f1:54:cc:
                    88:ed:04:5b:e6:ca:be:95:cc:70:0e:ee:54:4f:a1:
                    16:60:5a:46:5a:c7:cf:3a:8d:e4:65:bd:81:bf:80:
                    43:de:5c:d4:fb:c2:ea:b9:42:0a:32:79:c8:28:9e:
                    38:49:72:af:ca:66:65:fe:fe:d5:64:07:f8:4a:98:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B1:E0:D1:E4:C1:74:98:EC:B8:BE:19:67:FF:E5:21:B1:0B:BC:F9
            X509v3 Authority Key Identifier:
                keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:70:41:d2:64:c1:6c:93:bb:cf:be:47:30:e4:52:e3:cf:4a:
         52:aa:bb:73:88:46:fc:47:ce:b8:27:74:99:a9:75:75:2a:56:
         db:f5:a4:56:df:40:f4:97:08:2d:78:4e:29:74:61:da:2f:a2:
         ea:01:67:f3:21:60:95:62:91:73:0c:02:fd:a6:d9:b2:a9:9e:
         da:58:f1:55:38:f1:d0:14:89:a6:7d:ee:8e:3b:38:cc:c1:a0:
         54:22:97:13:53:ac:d2:de:0c:77:76:94:8c:b2:4a:04:0e:43:
         32:5e:6a:13:9d:ed:5d:f6:f3:aa:4e:b8:8f:c0:e2:21:37:f8:
         89:24:61:dc:36:37:70:da:4d:4f:d1:30:a4:9a:e6:11:a4:c0:
         56:9e:8b:a2:30:bb:22:24:df:01:f1:e2:0f:c4:7c:19:57:93:
         a1:5b:5d:05:41:9d:e8:aa:be:4f:65:02:35:b6:e6:7e:af:53:
         2e:05:5a:b5:c2:ac:1c:df:6d:dc:50:52:80:dd:14:88:11:c2:
         25:65:fb:d3:c4:da:cf:95:d7:53:b5:65:1d:53:98:08:d3:c5:
         5a:38:63:25:19:66:6d:bc:be:80:1f:0c:2b:c3:05:1d:24:c9:
         d8:ca:c6:ef:fc:74:c2:7a:9d:c2:4f:3d:7e:d3:65:37:bb:34:
         70:6d:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:00 2026 by rpki-client