Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File:                     MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier:          kpEQ2EcIXzJZ7Lho4ir1RKx0QbxmEmMjcIkQH3Mu+Vc=
Subject key identifier:   D1:11:D6:74:5F:E0:3A:85:62:E6:9E:97:41:D8:95:4D:6B:6E:CF:35
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer:       /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial:       019FCC6F2393FF8F07C773268E7083344755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number:          19E5
Signing time:             Tue 04 Aug 2026 11:01:03 +0000
Manifest this update:     Tue 04 Aug 2026 11:01:03 +0000
Manifest next update:     Wed 05 Aug 2026 11:01:03 +0000
Files and hashes:         1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: tnZNzPDwg2p0vbyPciGPZomiVqo8MRnSfuHLONxxOdI=)
                          2: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (hash: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:6f:23:93:ff:8f:07:c7:73:26:8e:70:83:34:47:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
        Validity
            Not Before: Aug  4 11:01:03 2026 GMT
            Not After : Aug  5 11:01:03 2026 GMT
        Subject: CN=d111d6745fe03a8562e69e9741d8954d6b6ecf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:95:21:0a:fa:47:05:62:30:3c:a8:63:0c:
                    d6:4a:ef:19:1b:fa:e6:fa:91:64:62:58:d7:bc:10:
                    28:84:ba:6f:48:f0:c0:22:26:bd:54:9e:69:94:cc:
                    e1:9d:9b:21:3e:af:f4:17:c5:5d:f4:df:56:d8:a5:
                    ff:93:ed:ba:c6:43:99:d2:a5:40:fb:94:2b:e9:43:
                    f8:76:43:dd:33:46:5e:67:42:ba:b6:4a:84:18:a2:
                    d2:4b:83:24:98:74:55:1e:1c:fd:5a:43:53:2a:2a:
                    93:75:c7:bf:6e:13:0d:79:d4:75:3e:95:82:d4:63:
                    24:da:2d:d4:24:13:ea:61:f9:7a:ea:b1:e1:b8:ce:
                    72:c4:c7:d8:c5:76:48:a2:0e:6a:8f:d2:97:28:81:
                    0a:9b:35:7d:4e:99:0c:16:d7:bb:a8:90:88:8e:39:
                    27:f4:f2:71:53:49:a2:02:91:1f:2d:da:c5:2d:17:
                    dc:f2:f8:8a:34:a3:51:b3:d0:b4:62:0a:87:45:19:
                    74:85:e3:ca:be:5f:b9:9a:41:88:a7:27:58:89:3c:
                    2b:e4:80:42:dd:e4:1f:f1:b4:cb:f7:26:86:f7:66:
                    f0:b9:b8:f7:a8:7d:19:d2:31:9f:7b:a9:51:aa:c9:
                    82:0b:1e:3e:1a:fa:e5:af:3f:0f:9d:8f:5c:ef:7d:
                    ae:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:11:D6:74:5F:E0:3A:85:62:E6:9E:97:41:D8:95:4D:6B:6E:CF:35
            X509v3 Authority Key Identifier:
                keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:8c:7e:6a:13:44:45:22:24:78:e9:74:40:62:28:b8:53:
         61:45:ed:90:55:c5:10:a5:44:88:1c:68:10:34:5e:b5:d3:1d:
         ec:49:3a:5f:f0:b2:c1:eb:68:35:94:43:d4:fb:5a:d5:33:18:
         c3:27:27:52:f4:c0:54:3a:68:ee:b6:32:9c:89:04:d7:91:d0:
         e5:0e:46:ff:44:4b:93:05:a6:ab:e4:2f:e7:88:95:08:70:bf:
         6c:12:32:78:b5:f3:d7:50:69:f7:58:5a:fe:14:41:90:8d:60:
         a7:a8:26:dd:1a:3e:fa:62:ea:89:cb:44:30:d8:5f:38:6d:ac:
         08:6a:05:20:08:53:d1:20:5f:a1:a6:8c:2e:4f:5d:24:b0:0e:
         16:d4:e2:69:04:6e:ae:8c:2e:ed:95:c5:85:8e:a6:24:c9:eb:
         57:3c:db:e4:e9:15:38:36:e5:c5:dd:26:a2:fb:f6:ca:30:52:
         5e:dd:3b:2b:c0:7e:50:40:9a:4a:ce:e0:d3:2a:6f:23:94:b9:
         f2:13:dd:9a:8c:9a:b3:a8:7a:f6:cd:1a:64:ad:ab:8d:04:64:
         95:d3:dd:12:82:6c:b3:9d:f3:5e:3d:72:74:32:cf:aa:2b:c8:
         f5:07:37:b7:bf:e7:c2:70:d5:46:02:d1:84:c5:21:1b:d4:14:
         9f:a9:90:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:38:59 2026 by rpki-client