Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File:                     12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier:          9bpIp8CEx2M5R5IwD2WpAZ5ls2fmkDh8W0GCRP0YIJI=
Subject key identifier:   38:F7:E3:47:D8:63:3E:26:47:A4:36:E2:0F:05:A5:61:FA:23:18:F2
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer:       /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial:       019FA93E41C3F08FFE829A8B2870253F1230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number:          1963
Signing time:             Tue 28 Jul 2026 15:00:57 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:57 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:57 +0000
Files and hashes:         1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: KvKBCD40Avtc1mgYGKjvevVM6XRXnvhbe5m0xFOo+o4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:41:c3:f0:8f:fe:82:9a:8b:28:70:25:3f:12:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
        Validity
            Not Before: Jul 28 15:00:57 2026 GMT
            Not After : Jul 29 15:00:57 2026 GMT
        Subject: CN=38f7e347d8633e2647a436e20f05a561fa2318f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:12:9e:b4:63:8b:63:2e:30:5c:8d:35:4b:
                    94:a0:1a:b5:d9:2a:72:bc:67:60:5c:fa:3e:41:6f:
                    eb:92:7f:76:30:aa:07:e2:9a:02:4f:16:ad:62:26:
                    c8:82:f8:da:49:97:e2:d4:c4:c6:77:00:d7:0a:2d:
                    b7:eb:d3:47:84:96:0e:4f:37:ea:21:ca:8b:34:b3:
                    18:81:2f:f6:1b:ac:2b:cb:fe:54:b6:61:61:02:42:
                    8b:e0:1e:84:6c:68:80:8c:ce:b4:14:30:ec:dc:7c:
                    fc:21:dc:de:68:ea:a1:a6:64:c4:9c:6a:43:78:ba:
                    9c:27:cd:20:65:fe:fa:b7:e5:f1:72:a1:13:d0:b3:
                    7b:67:94:b9:d4:6a:8f:69:b8:3d:a8:32:8f:57:5b:
                    2b:ba:45:06:99:83:29:0a:3e:9e:ae:0f:f8:db:b9:
                    14:57:28:a0:bf:9d:0f:5e:0b:57:f9:d3:5e:d1:9b:
                    a2:c5:c0:1e:e1:12:e7:08:c9:d3:fc:62:48:ed:6d:
                    6c:2c:65:60:ae:ae:4b:b8:aa:f3:e3:7f:68:56:5e:
                    bd:48:52:29:e0:22:9a:98:3e:32:6d:2e:ed:74:77:
                    1f:5a:8a:2c:dd:c2:88:24:e8:6c:c3:36:ef:f7:6c:
                    56:d7:a8:bb:58:1a:42:15:6a:da:fd:f2:2a:d8:65:
                    e1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:E3:47:D8:63:3E:26:47:A4:36:E2:0F:05:A5:61:FA:23:18:F2
            X509v3 Authority Key Identifier:
                keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:28:ee:64:fa:65:4e:8e:b7:1d:92:11:71:78:40:c7:4f:bf:
         76:33:db:f3:25:27:54:ab:8c:a2:3b:19:50:c6:39:d0:08:58:
         2e:e9:be:89:c8:4e:1b:33:31:0d:aa:38:b0:c2:c7:4d:e3:4e:
         93:0d:65:7c:b8:10:51:71:4c:50:0d:3c:11:0f:e9:f7:b6:7d:
         1b:66:6b:69:f8:c2:a1:68:29:d0:7c:37:37:00:f9:c0:c2:0f:
         52:eb:56:a7:05:eb:2a:16:69:19:c9:f3:62:a7:4b:fa:04:c6:
         fa:4e:fd:0a:3a:6b:86:79:a8:bc:00:1c:99:f6:67:c6:d6:aa:
         85:16:4b:f0:c5:21:6a:7b:78:bc:d8:35:c4:56:70:38:ce:c7:
         e3:6b:fc:ab:3d:e4:8d:03:25:71:14:ed:f7:43:ee:fa:19:c2:
         c2:87:82:2e:e3:86:6a:bc:f0:60:eb:23:26:75:c9:5d:12:03:
         ae:f7:1b:3a:26:2a:2c:80:88:88:c8:27:16:93:1d:c8:b9:50:
         d0:aa:4f:8e:aa:1e:b8:d5:96:18:72:1b:64:92:b4:ec:82:e9:
         6d:49:b3:55:c2:18:96:61:4b:7d:82:34:bc:95:fc:97:f9:c3:
         f4:0a:a0:5f:cc:a8:e5:b0:aa:72:a1:51:38:91:c1:d1:6d:30:
         11:fc:fe:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:05 2026 by rpki-client