Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File:                     7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier:          0F5fw4E0eN5JdiIF0JeuEkFX+6wAkm6ydNbJ60BKzPE=
Subject key identifier:   53:61:53:B8:AF:EE:66:EF:77:9E:84:7A:6B:80:D2:81:E8:BB:2D:17
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer:       /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial:       019FAA87A5BEC585B42ECCF79AAC935BCB09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number:          0A18
Signing time:             Tue 28 Jul 2026 21:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:44 +0000
Files and hashes:         1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: tCX1ObVgXwGZerH8lWfywdrVhjMhWURMOkcpzEihTWI=)
                          2: sMDnDS7b5WQ5D-JoFss-D-9gaX4.roa (hash: UIum8I7uAuNske5DioiLLh5KWIejx8PVPwTt3WKIKnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:a5:be:c5:85:b4:2e:cc:f7:9a:ac:93:5b:cb:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
        Validity
            Not Before: Jul 28 21:00:44 2026 GMT
            Not After : Jul 29 21:00:44 2026 GMT
        Subject: CN=536153b8afee66ef779e847a6b80d281e8bb2d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:49:9d:6a:31:a5:48:06:de:75:b3:80:d2:
                    12:4b:28:ab:16:e8:2b:73:39:b7:e8:05:5e:99:2b:
                    0c:bc:36:60:b1:ab:8e:cc:74:1a:f0:3c:52:7b:1b:
                    b0:d8:fe:61:04:aa:30:e0:7e:1d:7f:91:a9:e0:dd:
                    11:95:67:2b:a8:13:07:a6:bf:24:a3:fc:13:33:8d:
                    df:ad:1e:7d:be:24:44:8e:07:f2:35:50:37:bd:85:
                    15:d4:c1:7a:38:70:c8:b0:20:d8:0b:ac:86:e2:da:
                    a4:7a:28:9a:58:f8:9b:d7:f6:d5:f8:f6:2d:c5:96:
                    15:0b:30:47:16:c1:8a:e1:ab:f3:51:79:0e:39:a1:
                    c5:6e:05:b0:c1:0a:a1:43:4b:cc:04:87:4e:c0:ee:
                    f7:1e:1f:90:ee:0f:9d:41:3b:05:07:80:46:49:a5:
                    88:7d:63:6e:2d:7e:74:00:8f:5d:3e:31:cc:18:1b:
                    8b:c0:05:49:56:90:d4:3b:9e:a8:a2:be:2e:1d:40:
                    cf:2e:3a:b2:cf:03:80:0c:64:c1:05:27:88:da:62:
                    0f:32:81:62:e8:8f:52:41:54:63:07:74:71:e3:9e:
                    51:5c:eb:a0:5c:ef:3a:af:21:d6:14:22:30:6c:f5:
                    02:a1:45:15:2a:51:1c:1c:80:22:8c:c9:9b:fd:19:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:61:53:B8:AF:EE:66:EF:77:9E:84:7A:6B:80:D2:81:E8:BB:2D:17
            X509v3 Authority Key Identifier:
                keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:47:4b:ab:68:b2:f8:3e:1a:5a:f1:48:5f:92:7f:d8:d5:a6:
         09:99:1a:56:27:d1:f6:6c:13:26:f4:70:15:8a:eb:03:bc:f2:
         12:eb:ff:48:5c:e2:a8:d3:75:77:07:50:a1:f8:5d:1e:96:63:
         c1:7c:36:e7:f4:ce:36:6f:e1:84:a0:fa:2d:41:e1:51:00:0d:
         9d:2f:df:b0:fa:bd:6a:4d:05:4c:42:d4:92:84:6b:93:4b:54:
         9f:db:a8:fd:d5:91:a3:40:8e:40:64:29:c5:b8:71:77:d1:cb:
         35:1d:58:50:dd:2c:c4:f0:29:0a:a5:21:b2:78:ed:23:a2:b2:
         7c:ba:29:00:a8:33:2d:b5:77:fb:41:bd:e3:cb:26:6c:75:e8:
         da:2c:c1:9b:79:f3:78:9f:bb:15:cd:c8:72:f5:6b:f0:fa:7c:
         bf:af:c8:3c:8f:29:21:03:78:9a:ba:df:86:a2:12:cf:70:df:
         ba:8c:38:d9:5a:3a:40:81:45:8e:61:1c:7d:ea:4b:ae:f8:9d:
         a6:ce:73:63:f2:6e:2e:8b:24:4d:15:e2:a3:de:b0:0e:93:fe:
         36:43:79:5b:b3:9f:fa:dc:37:f2:eb:c1:fd:88:be:e6:44:6e:
         02:ef:b8:ea:f0:ef:a3:de:20:33:58:fa:83:fd:3b:54:3b:7e:
         e3:78:85:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:51:52 2026 by rpki-client