Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File:                     4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier:          qJvG2Jh5JmWkdDWtRhH6Jld4ljmPivDk64xksvJW2YI=
Subject key identifier:   F3:FC:7E:91:1A:E8:81:F1:94:92:3E:0D:00:6D:93:BF:9E:C4:F3:B7
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer:       /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial:       019FAA1A098C2EC27D846B4DAA2919CEEB05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number:          19D0
Signing time:             Tue 28 Jul 2026 19:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:00 +0000
Files and hashes:         1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: tLCmLU1TPwzNlfOtYy0iS9tYtw86EufZkCL9C0k92Us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:09:8c:2e:c2:7d:84:6b:4d:aa:29:19:ce:eb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
        Validity
            Not Before: Jul 28 19:01:00 2026 GMT
            Not After : Jul 29 19:01:00 2026 GMT
        Subject: CN=f3fc7e911ae881f194923e0d006d93bf9ec4f3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:f5:50:db:6b:e3:c8:85:4e:7a:ea:0c:10:
                    4f:f8:77:3b:8f:19:d6:b7:64:e7:77:fa:9d:65:3f:
                    cc:55:05:2a:9e:98:07:f1:75:28:da:70:46:17:9b:
                    31:fa:60:38:de:8f:14:69:89:0c:c0:bd:44:1e:1f:
                    32:97:d1:f4:05:3a:20:34:32:96:3b:85:9b:54:2c:
                    85:e5:d1:b6:13:f4:2c:04:63:31:3a:2b:09:ac:04:
                    d6:e9:ff:e2:a1:d9:fa:85:35:2c:95:fd:c4:77:32:
                    d6:b2:fd:ec:98:b9:d1:7e:aa:5e:07:3b:af:34:d5:
                    b9:d9:19:3b:40:72:a1:79:e3:b1:43:c9:87:c9:6e:
                    d9:7c:29:0f:8f:e8:c2:f8:f3:0d:0d:4b:cd:bf:26:
                    d5:5a:57:fb:c8:6e:c1:68:b9:7b:24:52:fb:48:c0:
                    b2:d6:07:84:b4:a6:fe:f8:ac:40:bb:e1:32:14:10:
                    29:a9:7e:8a:90:15:79:39:67:d7:61:f1:e2:ca:5b:
                    a0:58:a1:53:a4:19:32:e0:d3:8d:3c:8a:89:17:81:
                    ab:40:57:f1:4d:25:eb:ef:c5:96:bd:38:d7:71:73:
                    e0:2c:be:29:ed:76:de:ff:0c:e3:a0:06:8b:5b:0c:
                    aa:49:61:0c:2c:19:65:43:d1:9a:89:81:91:82:dc:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FC:7E:91:1A:E8:81:F1:94:92:3E:0D:00:6D:93:BF:9E:C4:F3:B7
            X509v3 Authority Key Identifier:
                keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f0:22:dd:fd:7a:d3:f7:3b:eb:3a:d0:ad:7a:9d:ad:5e:1c:
         a1:e1:0a:5a:9b:2b:ec:2a:32:5c:04:75:24:2b:6a:f1:0f:4e:
         03:50:5b:75:0e:7f:df:fa:11:97:58:f1:86:9d:8e:94:bf:78:
         09:0c:0f:fb:76:66:21:2e:cc:30:cb:6b:d1:bf:f5:65:3a:ae:
         09:7a:31:83:4c:03:49:24:a3:05:65:12:e3:16:51:2a:51:ee:
         91:67:e3:77:38:c2:1c:1b:d9:dc:2a:19:69:7e:a4:e8:ac:eb:
         e5:fb:13:cb:2f:98:06:c6:50:85:d6:ea:69:77:47:43:f2:4d:
         19:c7:44:cd:76:1c:c7:a1:4d:39:57:29:69:85:e9:ab:30:54:
         96:1a:e2:f5:0c:d6:8d:b8:e0:46:61:e2:1a:ba:a3:7c:b7:b5:
         3d:f6:dc:a5:5b:7f:e6:05:fa:80:82:7d:3f:cc:5a:72:5e:30:
         e3:05:a1:f3:91:72:6a:ae:cf:55:0a:6d:ea:f2:c5:43:81:7f:
         61:61:c4:0c:1e:bd:ea:83:7b:4f:61:10:c4:37:a2:f8:ae:13:
         ff:4e:85:1c:4b:f8:a2:97:9c:e5:e7:9b:e5:48:ed:19:17:eb:
         9d:7b:72:22:d5:c0:62:56:ec:c5:cd:83:fb:cb:ae:8e:ae:42:
         27:b1:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:34 2026 by rpki-client