Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File:                     1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier:          o5//t8HRlIJXMyTyh900fw1pNsHGhmr23XQhltApZck=
Subject key identifier:   DB:5A:74:B5:D6:AB:5F:C1:55:14:01:C2:D0:B2:22:45:31:54:9E:38
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer:       /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial:       019FAA1A61F757C9BB0E491C597C568F5480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number:          19D1
Signing time:             Tue 28 Jul 2026 19:01:23 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:23 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:23 +0000
Files and hashes:         1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: qLmabpxduYxyMcqNjomgrFSgouI8PJAmGTVhyPdEFZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:61:f7:57:c9:bb:0e:49:1c:59:7c:56:8f:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
        Validity
            Not Before: Jul 28 19:01:23 2026 GMT
            Not After : Jul 29 19:01:23 2026 GMT
        Subject: CN=db5a74b5d6ab5fc1551401c2d0b2224531549e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:70:db:93:2e:f1:31:79:d5:43:8d:ef:d8:
                    9c:74:d2:30:68:ed:1d:33:2e:35:4f:dc:36:b9:12:
                    94:8d:0c:b3:79:17:b9:8d:97:38:b1:74:86:00:92:
                    32:70:11:19:74:24:91:71:84:93:91:66:c9:b4:90:
                    4e:eb:24:0a:0e:d4:0a:bc:92:b4:d0:52:4f:49:6d:
                    5d:29:74:1b:b7:fb:e1:98:7b:7c:5c:74:62:32:27:
                    38:9d:0c:a4:cd:80:c0:13:fc:8c:a0:11:14:75:29:
                    1b:33:e1:54:55:50:61:0b:19:73:9a:14:78:b7:0c:
                    e2:bb:6d:ec:6f:95:2c:19:ae:56:e6:91:bf:4d:45:
                    9b:b9:98:ba:23:34:c8:18:6e:eb:53:b4:8c:e7:74:
                    15:4e:24:3e:f6:04:0f:60:fd:36:d5:51:1e:a3:7c:
                    1a:cd:a7:c1:51:82:05:0f:e4:ac:95:7d:6c:36:b9:
                    70:65:7d:d8:ec:a9:b5:df:88:00:15:de:72:94:e3:
                    1f:f9:2c:1e:d4:0e:e9:e9:17:79:dc:47:78:7d:dd:
                    00:a9:2e:f5:67:2d:fa:cf:fd:58:44:8f:48:8f:7d:
                    71:e7:36:db:28:aa:d3:3a:c6:dc:ff:c2:83:f3:b7:
                    c4:42:20:63:ce:17:c8:84:ff:74:56:18:60:cf:e6:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5A:74:B5:D6:AB:5F:C1:55:14:01:C2:D0:B2:22:45:31:54:9E:38
            X509v3 Authority Key Identifier:
                keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:75:af:5a:de:36:8e:d2:16:72:b4:9a:45:c1:00:3d:6d:8f:
         6b:95:ff:69:df:93:a2:8a:7a:e2:7e:e9:f6:5b:a7:e0:c8:73:
         4c:53:5c:64:e5:3d:8b:ea:51:26:ee:18:73:ce:94:70:6f:b9:
         ee:8a:d1:ec:d7:a4:b9:33:22:b8:aa:cb:5d:59:ee:78:1e:f2:
         cc:47:4c:cb:3b:c6:31:1f:90:43:17:eb:33:90:43:ee:2a:19:
         c6:c8:f1:a1:21:9a:88:d8:b4:50:1e:e1:0b:ed:c4:b9:b5:4f:
         52:04:49:64:7c:69:b5:60:4b:c9:a3:eb:0a:44:9c:a3:fa:fd:
         38:e7:8f:dc:2d:20:3f:06:d0:93:14:80:40:db:fe:22:8d:67:
         22:61:53:87:60:16:05:f6:43:12:b1:c2:a1:c6:5a:da:50:01:
         26:f7:08:68:e8:48:8a:96:66:95:62:db:0a:5f:ea:fb:8d:e6:
         3d:7c:b8:46:8a:9a:aa:c7:ee:9e:7e:69:65:66:36:ff:fe:f1:
         77:26:6a:80:c4:63:21:69:07:06:99:9f:83:d5:e1:30:75:c1:
         8e:fb:82:06:84:dc:18:13:2c:df:1d:fd:ff:d4:2b:58:ce:51:
         3e:39:0f:47:48:34:22:99:5f:7e:fc:19:65:c2:53:1c:d5:ec:
         dd:71:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:43 2026 by rpki-client