Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
File:                     31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json)
Hash identifier:          gVPxY0k8IMCe1M8VuwoED0HSNMMrrmnojsnQNavbA3c=
Subject key identifier:   D7:2B:2F:2A:54:88:58:44:EA:A8:20:06:0C:7C:3C:BD:01:FD:9D:97
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Certificate issuer:       /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial:       019FAA8878543950F90C994B7471413DA2C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 21:01:38 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:38 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:38 +0000
Files and hashes:         1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: Gc52eoZhXANxFz9ySUTetK335GzZZw3JVpX8dsGIhCk=)
                          2: KwvgmxkuN2Vb_g5rfP-r60wn56s.roa (hash: pRgKb7xCV6ebEVi6C792sZZDSzLwlu0u5goqcmXhzF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:78:54:39:50:f9:0c:99:4b:74:71:41:3d:a2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
        Validity
            Not Before: Jul 28 21:01:38 2026 GMT
            Not After : Jul 29 21:01:38 2026 GMT
        Subject: CN=d72b2f2a54885844eaa820060c7c3cbd01fd9d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:eb:5a:86:b3:a3:3a:3a:d5:13:bc:0b:1a:
                    3d:34:04:d1:c4:ec:cd:78:70:d0:51:b7:dc:74:6a:
                    7e:3a:66:0e:5e:ff:12:33:bd:d9:52:0d:f0:b7:08:
                    30:ac:72:01:c5:a5:03:84:75:65:66:6e:8a:d8:49:
                    7e:06:3e:a5:1a:fb:a1:38:70:2c:66:43:26:85:f8:
                    4d:2e:e0:0d:2c:2f:87:c7:79:fe:6b:a2:85:35:02:
                    cf:7c:7c:94:cd:00:5b:8d:a9:23:31:74:31:7c:e7:
                    3f:12:74:4b:be:26:e6:7d:86:65:23:66:b5:c5:82:
                    9f:e2:70:b3:b1:ca:fc:08:09:54:94:96:f1:c5:fb:
                    20:65:9f:26:44:cf:90:a4:d4:1a:e5:4e:0a:39:7c:
                    59:e0:ef:55:35:05:7b:5d:21:9c:74:71:92:f4:b5:
                    1e:eb:7d:b3:40:ce:d5:a3:11:a6:16:91:51:4b:d4:
                    9a:18:1e:e0:f2:4a:ee:7b:8a:6f:f8:cb:22:58:c2:
                    e1:dd:0c:24:8a:7b:51:bc:08:f2:39:ce:50:01:6f:
                    e9:42:ef:47:1a:00:71:37:4c:64:31:6b:82:e7:53:
                    f2:04:a2:56:88:fb:9f:eb:48:4b:9f:44:6a:ac:b7:
                    cb:e9:88:68:db:3e:d9:68:b2:43:bd:97:21:a5:4b:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2B:2F:2A:54:88:58:44:EA:A8:20:06:0C:7C:3C:BD:01:FD:9D:97
            X509v3 Authority Key Identifier:
                keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b9:fe:42:ed:4d:9f:e3:d9:9d:1d:bf:4c:37:8e:0a:77:73:
         81:31:cc:0b:46:80:86:58:22:99:bd:cb:f4:d9:45:36:f2:93:
         35:f8:c6:63:be:90:1f:66:f2:3c:09:40:a5:2d:8c:38:7d:a0:
         bd:2c:3e:40:ae:db:c8:5b:dd:55:e1:13:f1:c8:bc:61:0b:d4:
         50:ca:c4:af:b2:21:9a:f5:34:95:8b:2a:a0:91:b7:5d:f0:15:
         6b:9b:82:33:b5:93:3f:01:b0:b8:83:60:e0:ef:09:3e:6c:e7:
         fc:5f:36:29:04:c7:06:a4:74:87:6f:ce:88:4c:d7:9a:07:ab:
         73:69:39:38:70:bf:42:2d:3f:78:0b:8c:92:87:c9:0c:47:3e:
         07:b7:e7:94:1b:b7:fa:01:8b:dc:eb:71:fa:98:19:6b:3f:9e:
         18:c5:b6:28:25:4a:b7:02:92:6e:f2:32:91:23:59:b5:50:1b:
         48:75:cd:3b:08:09:7a:6a:c7:b7:f9:0b:0d:fb:e1:ff:cf:4f:
         7d:4e:20:a9:cc:ab:28:22:16:4e:8c:64:42:10:6f:d9:49:15:
         97:41:b7:b4:c3:34:dd:37:e2:ca:85:f8:7d:40:69:8d:2a:23:
         da:0e:0b:e8:99:e4:7a:ce:a1:cc:e5:98:1c:02:6f:0b:a1:45:
         52:b2:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:31:33 2026 by rpki-client