Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File:                     7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier:          Qpz93JcpLpp3XG+UjoJ9Vy6otANGU9MWHWlzjcUe7fo=
Subject key identifier:   5C:13:DD:E8:0F:E2:D1:D8:0A:3B:6F:D6:70:15:DD:D1:24:F2:53:6E
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer:       /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial:       019FAA88BCABC48658B6BA399C90140671A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number:          1966
Signing time:             Tue 28 Jul 2026 21:01:55 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:55 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:55 +0000
Files and hashes:         1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: jBegLW1zVl7ErE9lgKcKucaDeaw0XezSCUd0K6mGNVM=)
                          2: NJ53-rR_xX4WzjhOA9BrYV2nSLM.roa (hash: QoLJTTNt4EV3su31vq7GYg/U/5yk5wlrs70Rl9FmejU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:bc:ab:c4:86:58:b6:ba:39:9c:90:14:06:71:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
        Validity
            Not Before: Jul 28 21:01:55 2026 GMT
            Not After : Jul 29 21:01:55 2026 GMT
        Subject: CN=5c13dde80fe2d1d80a3b6fd67015ddd124f2536e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:57:8c:90:52:8d:52:9c:af:6f:f9:28:e6:
                    43:9e:ac:6d:30:fa:c5:30:7b:5e:fc:5a:97:5c:ff:
                    be:82:e1:b9:7e:8f:b0:6c:07:bd:26:c4:93:9c:5a:
                    82:6e:0a:35:34:81:9a:ca:52:26:4d:e9:90:a2:95:
                    80:30:23:22:48:2d:d6:d3:59:b8:f3:4c:e0:c9:c2:
                    a9:6c:24:fb:c9:9d:82:f0:5f:8c:ed:6a:1c:70:8b:
                    23:46:9f:99:94:8c:bb:17:50:e3:ad:ba:0e:cb:32:
                    7d:8f:90:14:9b:b4:33:c0:46:4a:1e:67:ce:eb:c0:
                    1d:28:8b:ca:c8:3d:95:3e:2e:bd:b1:8d:c7:8b:7c:
                    d9:dd:cc:6d:1a:c5:60:0e:90:6f:b7:e3:7e:96:f2:
                    ea:7f:6f:8f:e2:47:8f:3c:0d:d6:df:16:20:10:d9:
                    d2:24:88:9a:7f:14:2c:67:d6:84:2f:b8:32:95:70:
                    c0:2c:90:07:14:e5:7e:6e:e7:44:50:7e:9a:10:ad:
                    51:b8:cd:7e:0d:24:86:0b:c4:19:9c:c8:be:ac:9f:
                    51:db:0b:af:73:62:17:53:21:51:16:e0:ca:2d:50:
                    18:74:cc:b5:97:f6:d2:41:60:38:da:9e:8e:86:2e:
                    b7:92:31:09:5e:ad:a7:70:6a:f1:df:30:fd:74:99:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:13:DD:E8:0F:E2:D1:D8:0A:3B:6F:D6:70:15:DD:D1:24:F2:53:6E
            X509v3 Authority Key Identifier:
                keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:fc:e5:de:aa:68:06:87:6f:06:41:79:8b:49:7a:49:f3:
         ce:d0:44:0e:08:0d:68:00:1f:5e:ca:67:a3:68:ba:a9:5c:12:
         83:ec:c7:17:6d:88:e9:9f:4a:49:67:6c:08:54:fd:4e:7e:15:
         75:82:9e:ee:87:9e:cf:ea:85:82:df:99:cc:4e:ed:28:51:a4:
         2c:17:81:06:0f:43:52:ea:99:9f:64:69:b8:52:3a:75:b7:4a:
         c9:ca:fb:c6:4a:20:41:89:b0:46:16:f5:39:86:1d:da:b0:f7:
         52:bd:4e:34:4d:57:b5:ea:5d:8f:5d:45:f4:7f:87:35:f4:5d:
         a1:f2:1c:1c:94:7f:63:6d:b6:95:b7:d6:bb:ba:32:4e:d1:7c:
         83:2e:82:00:df:4c:68:02:d6:c1:c7:4f:79:47:64:27:15:2b:
         a5:ad:b4:50:98:84:36:ee:78:af:f7:82:87:f7:14:48:1f:29:
         73:94:8d:ab:4d:1b:e9:54:e0:96:39:3e:19:79:51:29:bc:af:
         ea:ad:a9:d3:90:58:52:33:f1:94:31:a8:3c:19:6d:80:2d:e4:
         2e:4a:a2:e9:b6:12:05:37:f9:3f:06:8e:a3:50:6b:b6:f3:a3:
         b3:85:fd:f3:a8:e8:44:a9:59:3c:03:6d:eb:04:5b:3e:4c:e0:
         b2:14:42:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:54 2026 by rpki-client