Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
File:                     2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json)
Hash identifier:          Y7YuTYmkkSndlu5/n8ZmCLYG/XCXF2XYiWoCa8mJNKQ=
Subject key identifier:   1C:C7:C7:65:F3:DB:F7:19:87:C8:E3:4D:89:26:88:F4:33:71:D5:63
Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
Certificate issuer:       /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Certificate serial:       019FAA198C135CA51E5C7CEF758899FB6E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
Manifest number:          0E71
Signing time:             Tue 28 Jul 2026 19:00:28 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:28 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:28 +0000
Files and hashes:         1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: oG17+IUumszEJ+l9uyb7tVpuXiZs8/2cydu2mQJrf2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:8c:13:5c:a5:1e:5c:7c:ef:75:88:99:fb:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
        Validity
            Not Before: Jul 28 19:00:28 2026 GMT
            Not After : Jul 29 19:00:28 2026 GMT
        Subject: CN=1cc7c765f3dbf71987c8e34d892688f43371d563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e5:6f:64:14:76:60:07:95:24:e3:d1:e3:25:
                    e9:52:46:1c:54:70:22:8f:26:10:9a:20:91:07:87:
                    15:c6:99:6b:89:37:da:c7:a5:05:68:1d:ea:0f:75:
                    f0:08:ae:78:b8:a0:cb:60:dc:40:0a:f9:0c:8e:49:
                    60:58:a8:50:5d:ab:88:ac:2b:52:27:c0:ac:e9:34:
                    60:48:65:22:37:dc:e5:53:e7:f1:a0:ad:4c:00:18:
                    53:06:7f:02:a7:5b:f2:f4:45:95:2a:62:06:c6:44:
                    53:8b:c4:97:b7:c3:78:b4:03:fe:17:45:44:92:c5:
                    25:05:7b:d2:57:c6:87:a5:e6:58:a0:e9:3c:fd:a9:
                    f7:e5:a1:5c:b7:e2:b4:ef:cb:d5:27:d5:ce:5a:64:
                    b7:76:90:5d:cd:06:24:67:68:34:6b:80:f4:0b:49:
                    23:c7:e9:b5:b2:b4:76:77:b3:15:4f:80:97:66:f9:
                    a9:ef:56:20:f8:34:e4:37:9f:48:ba:39:68:c8:ec:
                    34:af:dd:3b:16:97:73:98:26:11:e0:36:9b:7a:eb:
                    15:f3:f9:91:74:28:5e:34:6e:2b:e2:da:e0:8d:43:
                    7c:a8:80:3f:44:07:b9:1c:e6:8d:0a:2e:93:ab:e0:
                    ce:db:da:57:5b:bc:ce:38:c1:6f:b1:bf:c8:1d:e7:
                    52:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C7:C7:65:F3:DB:F7:19:87:C8:E3:4D:89:26:88:F4:33:71:D5:63
            X509v3 Authority Key Identifier:
                keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:54:8d:5a:38:2f:d3:6d:54:35:52:30:04:b2:7c:28:df:10:
         1c:50:4f:a8:20:ed:48:d3:64:3b:3b:d5:54:21:09:e2:81:5d:
         ba:1f:bb:84:9a:ee:64:15:f9:3b:76:ad:86:e4:2b:1e:be:bf:
         ca:ac:b8:b9:b2:3d:7c:8d:e3:6f:3c:86:6f:40:82:20:2b:cb:
         b1:38:3f:0c:a0:30:0c:6c:fd:ee:83:fb:a9:f8:d1:90:8e:d4:
         da:b3:cb:56:c1:32:63:2b:36:c5:b6:38:72:47:5a:41:e7:f1:
         5e:3c:a5:3e:bf:f6:0e:d5:b9:01:98:10:df:bd:1c:38:8c:17:
         f0:dd:f7:14:91:99:23:a2:7d:c1:92:43:25:bd:fa:a0:4d:da:
         ac:a3:6a:2e:2a:bb:ae:a8:6f:0b:ca:cd:dd:a1:30:22:12:85:
         61:a5:7a:d0:c2:65:ef:d5:ab:11:78:94:f5:ad:2c:17:a8:54:
         fe:2c:ff:be:fe:1f:3d:b9:34:2d:3c:bf:4d:bd:12:c1:d3:10:
         3a:dc:ba:05:b1:53:bb:8e:9e:c7:94:6a:c5:0c:4e:b4:dd:59:
         85:bd:7e:83:06:34:76:81:48:fd:7f:03:f9:81:33:76:68:c3:
         ed:9e:f0:ab:d9:7c:6d:93:02:41:49:2a:30:9f:e2:ea:db:ab:
         24:03:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:35 2026 by rpki-client