Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File:                     639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier:          c/vYMl8O+1+cl7BsxjxRe+05FbY44KOo2NSIqoRXs5s=
Subject key identifier:   B6:00:02:42:F3:0A:77:BA:FA:25:A9:E8:3C:D3:86:A6:1F:DD:94:BA
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer:       /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial:       01A00101E064D120E3268A6F0163312BAD84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 16:01:35 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:35 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:35 +0000
Files and hashes:         1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: 0YZ8u6eks95pX3DIuGP1L305cMmW7ujsR+VsMN3h2PI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:e0:64:d1:20:e3:26:8a:6f:01:63:31:2b:ad:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
        Validity
            Not Before: Aug 14 16:01:35 2026 GMT
            Not After : Aug 15 16:01:35 2026 GMT
        Subject: CN=b6000242f30a77bafa25a9e83cd386a61fdd94ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:33:7d:b6:43:4a:1c:91:45:98:4e:aa:20:
                    75:35:9f:49:c5:0e:2f:de:40:07:0f:4f:8d:35:bc:
                    bc:23:11:b0:72:ad:38:12:b8:7b:e5:1e:19:a4:ff:
                    39:76:7b:07:a3:c4:fb:66:5e:42:16:aa:e3:3e:54:
                    77:01:c1:10:da:b8:51:56:8a:b5:79:e0:a1:be:fa:
                    e2:49:6e:bc:fe:27:ee:a2:36:b2:5a:78:ab:11:2b:
                    b9:99:f9:b6:0d:1c:fc:ae:fd:4b:6f:88:4c:37:18:
                    25:4a:79:e4:90:1b:b6:bd:2e:2f:d4:9b:7e:20:ae:
                    68:86:f2:68:1b:e1:fc:b2:cc:97:a4:48:17:27:be:
                    93:89:c6:05:6b:da:80:9e:b1:d3:e4:56:aa:9a:f0:
                    16:20:5e:01:ee:55:e3:4f:80:37:60:f1:2f:b8:60:
                    29:2b:69:ed:8f:45:b0:56:8a:8a:96:f1:24:f3:80:
                    af:84:20:ea:a4:5c:ec:2c:f8:4a:65:c7:db:bc:5e:
                    08:79:87:17:43:a6:13:16:60:96:80:5c:bf:8a:9c:
                    f1:bb:36:3f:e6:fa:e1:bf:9d:c4:9c:23:85:8c:d9:
                    fa:63:3f:d6:02:5b:17:b9:8d:e9:e1:2b:b1:43:66:
                    77:b8:3a:a3:d7:9d:77:72:7e:9e:d0:b7:09:dc:de:
                    83:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:00:02:42:F3:0A:77:BA:FA:25:A9:E8:3C:D3:86:A6:1F:DD:94:BA
            X509v3 Authority Key Identifier:
                keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:48:1d:cd:7b:a3:7e:86:7b:09:bf:95:e4:54:e3:04:8f:18:
         8e:80:ca:00:36:16:e0:f0:1e:a6:03:e9:19:43:48:4c:ca:fa:
         03:c5:ea:3e:31:fc:c5:3a:a5:db:47:7f:86:1d:ee:b1:b6:81:
         88:7c:9c:ba:d9:90:d4:a7:35:72:7e:4c:d6:8c:02:57:4b:ec:
         ed:42:9b:fa:7d:14:36:61:f7:f1:e3:63:69:f7:74:13:c0:5b:
         d5:10:bd:70:2d:40:63:45:b6:e9:75:90:64:be:38:55:07:57:
         da:cf:da:ce:a8:64:5e:c9:55:69:17:fd:57:2f:1b:c3:cc:b9:
         eb:0b:7b:c2:4d:93:13:2f:43:4d:5e:97:ce:62:d0:42:cb:56:
         a3:81:a1:25:18:fd:e8:61:ec:83:90:c1:e5:95:ef:a0:7a:91:
         23:93:e7:02:cf:d0:a0:b5:93:a7:3e:d3:72:39:f6:d8:6b:05:
         c8:77:b7:3b:1d:73:a6:30:6b:14:20:e0:7c:bd:0f:07:41:1c:
         d0:b7:6b:f6:1d:b4:f3:34:ab:89:a3:7b:21:82:a9:c7:72:a1:
         fd:32:b8:9b:56:f5:77:b6:7d:1b:64:6a:33:7d:3e:08:87:f9:
         8a:71:30:a0:ae:35:77:41:bb:4a:b3:53:46:da:a7:e4:8b:7b:
         d3:f6:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:10 2026 by rpki-client