Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
File:                     VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json)
Hash identifier:          bZNBUbmqX5MbIHAI61Gzmq0Bgimo0m83oEf+MDAYh50=
Subject key identifier:   CE:AB:B9:93:0B:5D:22:90:61:1F:77:A2:7D:D1:08:4F:CB:76:0E:3D
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Certificate issuer:       /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial:       019F859FAD32C88A2AC7B26F71B4B8972149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
Manifest number:          11EB
Signing time:             Tue 21 Jul 2026 17:01:01 +0000
Manifest this update:     Tue 21 Jul 2026 17:01:01 +0000
Manifest next update:     Wed 22 Jul 2026 17:01:01 +0000
Files and hashes:         1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: n+6zvztwFitnRgOztQsVWQsR37k3YrUfcblNI6F5dZw=)
                          2: qwRgsQyWceddvM_GZ0mcBzGmfsw.roa (hash: u5m7OeUQAJztt6tYqPBa102kwAghmU7lU7GBR2CQZGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:ad:32:c8:8a:2a:c7:b2:6f:71:b4:b8:97:21:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
        Validity
            Not Before: Jul 21 17:01:01 2026 GMT
            Not After : Jul 22 17:01:01 2026 GMT
        Subject: CN=ceabb9930b5d2290611f77a27dd1084fcb760e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:ef:79:4a:bf:5b:b0:b1:4c:9e:72:69:d7:
                    38:70:c1:a9:72:81:d9:b3:9e:15:c7:e2:53:84:49:
                    ef:3d:8a:bc:ae:4a:6d:2b:b5:31:74:7d:35:d0:78:
                    b3:42:ff:4d:8f:c9:8f:a2:e7:7b:01:d8:c3:09:fd:
                    04:c8:0f:45:5c:2e:ab:35:fa:5f:db:b0:5a:b1:2e:
                    aa:c7:67:7d:31:a2:1f:5e:0c:04:e4:8e:e0:65:32:
                    fe:4f:ab:e1:d4:81:7c:d2:69:17:b0:1e:dd:6b:ac:
                    a1:1b:b5:e0:e3:04:2c:37:5c:48:87:22:99:76:d3:
                    c7:5a:54:f5:af:cb:9e:47:1d:1e:0a:2d:7a:1d:c3:
                    13:a3:2a:b6:34:70:a5:fc:d2:da:c3:bb:99:71:48:
                    75:3b:c1:97:fb:cb:1d:25:5e:f4:5b:68:91:2c:a3:
                    d3:6d:f2:c6:3e:92:a1:c7:c9:e5:e4:d5:6a:4e:43:
                    0b:56:59:9e:de:a1:90:55:ab:24:d2:1c:f7:ae:56:
                    34:ad:f6:6a:bb:6d:0e:af:45:97:9a:48:61:53:7a:
                    52:af:00:80:ef:ec:54:a7:5b:60:cf:64:4c:d9:e4:
                    d9:8b:a7:7d:1e:4d:8e:ea:84:d3:d7:3d:73:07:94:
                    6d:77:be:f7:1a:d9:bb:04:b1:22:d5:df:5a:b0:bb:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AB:B9:93:0B:5D:22:90:61:1F:77:A2:7D:D1:08:4F:CB:76:0E:3D
            X509v3 Authority Key Identifier:
                keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:5f:a6:9c:b6:2a:6c:5a:89:3e:58:2c:61:72:ab:16:6c:ec:
         e7:29:f1:b6:67:86:94:6c:ab:0d:3d:7e:20:d1:bf:be:85:58:
         53:29:df:a5:6c:f4:a7:14:ba:ac:dd:70:7c:3b:1f:93:76:32:
         3c:fb:a2:82:00:cb:f6:6f:27:66:b5:a9:d8:03:40:d8:11:54:
         28:75:c4:4a:d9:b4:97:f5:87:ea:97:cf:6c:29:af:8b:16:6a:
         1c:6e:36:64:88:d7:00:1b:cb:77:d9:fc:8f:5d:96:39:61:53:
         05:93:8d:c1:05:42:f1:52:77:31:bd:6c:f2:6b:f7:f5:89:65:
         bd:22:33:2a:4f:32:79:41:da:60:25:5a:48:5a:7d:e8:58:e6:
         7d:64:a5:8c:35:74:c8:17:fe:9e:af:ac:f3:96:e4:4a:67:9d:
         66:f6:47:e7:76:d9:75:5e:f3:57:43:08:1d:86:99:01:38:ed:
         82:6d:75:15:99:bf:dd:ed:cb:37:e3:fa:c7:a1:42:1d:d0:7f:
         99:d8:6b:fa:f0:71:b3:41:a8:7e:6b:2c:ab:3f:3b:82:2c:40:
         a9:88:84:3f:31:b4:db:ec:11:a2:1b:bd:1f:3c:08:ed:66:ce:
         92:fa:36:b1:bf:c2:0b:95:38:4c:65:5c:d9:b5:34:4d:c2:c4:
         1a:ee:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:23:03 2026 by rpki-client