Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File:                     7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier:          JuX9HdxyucfcGOzZcMIAlogbNA0foKlOaZ/ofgrs9i4=
Subject key identifier:   BC:1B:3E:08:76:33:78:57:45:56:58:C2:2B:4F:CF:CA:08:43:76:7B
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer:       /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial:       019FAA19C54CB2B744E21A91619776F09891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number:          19C0
Signing time:             Tue 28 Jul 2026 19:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:43 +0000
Files and hashes:         1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: fRgmGAZJe7ux3qpkXYEbvok1b8ws+WYVTV1J7tXlXnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:c5:4c:b2:b7:44:e2:1a:91:61:97:76:f0:98:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
        Validity
            Not Before: Jul 28 19:00:43 2026 GMT
            Not After : Jul 29 19:00:43 2026 GMT
        Subject: CN=bc1b3e0876337857455658c22b4fcfca0843767b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3d:d1:dc:42:05:4e:5a:41:9c:cc:45:99:a0:
                    0b:5e:34:1e:64:19:89:f7:c5:4d:80:96:b5:c0:80:
                    50:7c:e4:9d:63:6c:08:c0:52:c0:69:45:99:f0:c1:
                    49:20:e4:aa:d4:25:d2:ef:2b:ae:f9:24:b7:a1:da:
                    50:dc:c5:d4:59:69:31:45:3f:88:e6:f7:b3:a8:e2:
                    f9:8d:50:7d:86:6c:75:81:6d:15:53:0f:64:ec:fe:
                    75:44:f0:8b:8e:c1:8c:74:22:d6:53:7c:9e:34:f4:
                    a9:21:3b:5e:17:53:0c:05:0e:b7:80:89:3e:ac:53:
                    0f:83:69:37:2f:2f:44:db:a9:22:5f:29:90:5b:5f:
                    87:3e:7e:12:83:de:2a:11:52:65:de:b1:1a:58:d9:
                    39:77:7d:98:9f:7b:f9:71:1a:3d:4d:c9:89:6a:74:
                    f2:7f:ec:5d:2d:e1:59:8c:0b:b2:e4:46:79:dc:e1:
                    4b:f2:16:7f:3f:e7:76:7c:73:26:82:92:21:3e:f8:
                    68:58:e2:39:74:29:b8:3b:35:a6:8e:32:a2:80:0e:
                    3b:c9:48:92:9a:0a:d9:ba:ff:ef:fc:97:1d:31:2e:
                    b1:11:3d:c0:d7:ac:a8:51:b6:b4:b2:db:11:43:cb:
                    bc:ec:b4:bb:b6:e5:e8:52:b3:d5:49:7c:18:91:6f:
                    80:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1B:3E:08:76:33:78:57:45:56:58:C2:2B:4F:CF:CA:08:43:76:7B
            X509v3 Authority Key Identifier:
                keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:e0:fd:4d:24:15:22:d7:31:80:28:57:82:d5:cd:3b:c4:c9:
         fe:2d:03:1c:b5:7a:53:09:6b:4d:3d:e9:65:8a:f6:ca:b3:1a:
         27:4f:15:08:9e:2c:89:61:ee:08:25:8a:8b:48:b0:16:e6:4f:
         08:ff:fc:5f:04:4e:2b:68:d5:e7:88:a3:b1:f5:91:8c:42:4c:
         96:97:92:1f:95:f4:f1:29:3e:df:6c:7a:3c:fa:58:78:83:79:
         e3:4c:ec:22:e0:ab:59:1f:6c:0c:82:37:79:ff:24:9e:8d:0a:
         ec:16:16:91:25:83:fa:5a:5a:1e:c3:34:92:44:fb:60:65:e6:
         25:be:18:9a:6c:8f:91:09:13:dc:c8:19:d3:32:da:55:49:04:
         c0:48:86:e4:fe:ac:90:74:da:0d:40:10:b8:5e:e8:a3:85:b9:
         ba:cc:87:4c:45:b1:07:00:5c:9f:2e:0a:6a:2d:8b:46:02:38:
         d5:32:cf:6c:e2:c3:52:80:18:bf:00:0f:72:df:39:25:51:b0:
         d8:c0:55:22:e2:09:43:88:4a:36:17:4c:bd:39:e6:dd:b7:eb:
         11:83:61:1d:77:1e:46:d3:81:d3:81:d9:e3:a0:6f:fc:79:c5:
         58:75:b7:c1:09:1e:dc:36:c7:ce:17:4e:10:27:6a:46:6d:e2:
         1e:d9:3d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:38 2026 by rpki-client