Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
File:                     DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json)
Hash identifier:          fb9uhYufda/XhTlgDP510axZBHdtovsJJCumlztTFYI=
Subject key identifier:   17:ED:FA:AC:F7:D0:D5:6D:10:D8:B8:51:A6:52:77:6E:E7:59:32:22
Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Certificate issuer:       /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Certificate serial:       019FA97506D22E648FD44A89A4904159820E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
Manifest number:          19CF
Signing time:             Tue 28 Jul 2026 16:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:46 +0000
Files and hashes:         1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: uAhLcRHx9Q4fY+y4GpdxZ2M+s6ox1OXyOBmHSo0OLXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:06:d2:2e:64:8f:d4:4a:89:a4:90:41:59:82:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
        Validity
            Not Before: Jul 28 16:00:46 2026 GMT
            Not After : Jul 29 16:00:46 2026 GMT
        Subject: CN=17edfaacf7d0d56d10d8b851a652776ee7593222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:c4:2b:bb:82:82:5d:ac:cd:bb:ed:97:73:
                    b9:55:1d:9e:1c:e6:1f:a3:e4:96:fe:cb:fe:81:8b:
                    a9:07:90:0c:66:e5:8e:4f:f6:b8:53:2e:a4:50:6b:
                    ae:47:3d:57:d7:1d:77:75:67:91:78:5a:d4:fa:df:
                    76:c9:4b:09:bb:fe:85:d4:59:8b:4b:b1:c4:cd:d5:
                    66:53:c2:0a:8c:dc:c1:46:99:a8:55:b6:1e:9c:c6:
                    e7:db:9d:cb:89:ce:0f:1e:37:32:ad:12:31:63:8d:
                    2b:8c:3b:35:19:05:43:c0:c7:86:ec:34:45:5c:e3:
                    1a:5a:93:08:2e:19:76:44:76:d9:5b:f2:29:73:19:
                    02:77:9a:5e:0f:3a:40:53:50:61:61:6c:4b:8a:4a:
                    e1:ed:96:ab:ed:b8:0b:77:51:d6:f0:09:14:9f:f0:
                    6a:88:87:70:fd:57:3e:63:a1:d0:21:aa:f5:44:e8:
                    14:cf:05:bd:8b:81:09:41:78:7a:16:1e:6d:67:0e:
                    06:13:dd:c1:0b:be:f5:b3:a7:a4:35:2d:ea:40:39:
                    b3:80:c9:85:fd:50:1c:17:be:56:f5:d2:49:8c:53:
                    d2:b9:31:2e:ef:96:eb:d6:c0:db:d9:72:a6:4d:63:
                    a1:75:37:79:26:af:21:ab:c8:c1:4a:ff:51:69:43:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:ED:FA:AC:F7:D0:D5:6D:10:D8:B8:51:A6:52:77:6E:E7:59:32:22
            X509v3 Authority Key Identifier:
                keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:08:e9:f6:cc:d1:61:7d:9e:e4:43:03:ad:f8:b1:eb:36:01:
         51:15:91:53:3b:67:7a:1e:11:ea:b1:3b:d6:08:a8:93:0c:9b:
         61:46:80:b6:d6:2b:6b:0b:fc:46:b2:0e:d6:88:e6:9e:c3:ba:
         a4:dd:77:c2:cc:d6:2e:b3:52:15:c1:94:34:70:c7:57:b0:bc:
         f9:66:dd:c4:61:66:91:ec:57:79:60:91:84:08:29:fc:8c:04:
         90:e9:60:c8:75:fa:b8:95:76:99:60:3b:53:9b:d1:79:90:7c:
         fd:a2:04:7b:63:94:72:ad:7f:5a:c6:ed:2a:66:dd:fd:39:5a:
         95:24:48:28:83:8a:4d:c8:c5:cd:d1:8f:78:55:8b:19:95:e8:
         5f:19:a6:32:91:92:1a:aa:a8:2b:5c:29:67:66:75:40:25:0f:
         a1:92:03:e5:81:a8:ba:85:d7:d8:bc:c3:98:ea:72:ea:1d:3f:
         0f:bf:27:2b:56:c0:96:51:45:78:55:d8:6e:d1:cc:f9:f2:af:
         8c:d2:3b:38:cb:ff:0e:9e:fd:d9:0f:5e:45:72:96:fc:0d:54:
         13:ae:8c:aa:89:57:5f:62:16:b3:69:83:81:ae:27:5a:89:52:
         d7:8d:ec:d8:5a:9e:7f:2a:13:66:fd:1d:c3:62:f8:9a:f0:0b:
         46:58:9d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:06 2026 by rpki-client