Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File:                     1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier:          Odwmr5Ln8JT1eVe721P6VRhJ7sXELCFh2xKfeF2w//Y=
Subject key identifier:   E6:9E:2C:15:57:FB:88:49:5E:3E:36:07:6F:70:6C:B4:FD:20:2A:7B
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer:       /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial:       019FAA884185123CDE7DD87362211440098B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number:          19CF
Signing time:             Tue 28 Jul 2026 21:01:23 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:23 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:23 +0000
Files and hashes:         1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: yrv0eBepIidcyWByYEFN0vq7VFbZLbayVnKd9SJs/Y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:41:85:12:3c:de:7d:d8:73:62:21:14:40:09:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
        Validity
            Not Before: Jul 28 21:01:23 2026 GMT
            Not After : Jul 29 21:01:23 2026 GMT
        Subject: CN=e69e2c1557fb88495e3e36076f706cb4fd202a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:8c:00:c6:d2:8f:42:df:0f:45:c6:c0:ed:
                    bb:66:f7:0d:dd:f5:81:ac:a5:91:2e:88:b7:71:b8:
                    63:8e:86:db:bc:53:38:06:a1:0d:af:05:97:fe:84:
                    5e:0c:2b:e2:95:4e:b0:ee:c1:bd:7b:ab:30:94:76:
                    a8:77:09:0d:9f:1a:bf:4e:81:b2:4d:31:97:c2:f0:
                    78:a1:f8:d6:8a:31:ef:a1:48:db:b1:6a:26:fa:c7:
                    f1:28:84:9f:af:e9:0a:86:33:f3:fd:f2:77:7c:1c:
                    ac:06:1a:12:ce:bf:22:b7:a7:fa:4c:a8:f9:02:09:
                    fb:8e:50:5c:03:b6:a1:cc:56:7c:30:e6:54:8c:ae:
                    b8:94:76:09:07:d0:fc:cd:ae:32:17:ab:26:ff:61:
                    40:79:c4:c9:3a:aa:0e:59:b3:95:3c:e8:6a:e8:5a:
                    3a:36:29:36:ee:87:6a:42:5b:fd:39:91:0b:1b:45:
                    a7:b4:d6:af:c9:54:3f:c9:c9:00:aa:a0:36:ba:41:
                    12:04:c2:b6:f1:b9:83:f1:2a:89:4e:3a:0e:f6:37:
                    cd:17:76:03:3b:ce:66:51:27:bd:9b:27:dc:11:ee:
                    18:e1:3e:95:21:91:0b:8c:df:f9:1e:85:ea:81:91:
                    d7:76:79:c5:20:c5:d4:a5:be:70:e4:55:2d:fd:af:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9E:2C:15:57:FB:88:49:5E:3E:36:07:6F:70:6C:B4:FD:20:2A:7B
            X509v3 Authority Key Identifier:
                keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:53:12:31:51:83:0b:7f:b8:7b:ff:37:1d:8b:13:de:c4:77:
         e7:4b:60:4e:37:da:1b:cd:83:eb:aa:49:00:a1:b4:f0:05:4d:
         5c:c9:83:d8:4a:69:28:91:96:1f:96:76:4a:77:bc:2c:28:e2:
         3e:f1:17:8a:13:9f:cd:8d:25:56:8e:00:91:43:c6:09:ee:03:
         f2:93:24:6d:1e:d7:2e:1f:e6:ed:f2:06:52:ec:8b:d7:23:1f:
         38:12:d8:5f:5b:8b:67:ed:af:78:cf:94:f6:f3:99:1d:08:3c:
         d4:c3:6f:a8:69:24:81:8a:49:b8:f1:40:83:ee:50:95:23:c8:
         42:fa:89:bc:f9:26:1c:e9:18:ed:e2:a9:b2:22:d7:a9:a5:48:
         43:9a:83:1e:66:79:91:0f:13:f3:1b:e5:bb:d7:2a:47:14:f0:
         1c:8c:61:69:b5:9d:c6:73:d0:4f:01:61:14:26:a1:58:1f:ea:
         cf:d8:2f:bc:1d:ad:ff:43:1c:48:e7:e4:ac:d3:d1:70:a3:4c:
         61:83:ec:e7:88:17:45:51:bf:e0:0e:30:42:3a:fd:24:8d:7a:
         41:58:c7:43:e1:7c:77:d5:4f:19:d7:39:f2:d3:fb:a5:50:db:
         5e:61:ca:75:20:de:3b:3e:a8:a3:2c:d7:11:c0:c2:af:ee:62:
         ae:14:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:45:44 2026 by rpki-client