Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.mft
File:                     7-DrSwEUGfhPh2kuTLRvZgsAPIE.mft (raw, json)
Hash identifier:          wafTnAtyKjRX4cNHxFTGfKRBjEaU3N/3wY8qE2huCW8=
Subject key identifier:   45:A5:B5:3B:D8:3E:B3:F2:36:CB:DA:3D:18:C9:9A:6F:5E:07:23:A8
Authority key identifier: EF:E0:EB:4B:01:14:19:F8:4F:87:69:2E:4C:B4:6F:66:0B:00:3C:81
Certificate issuer:       /CN=efe0eb4b011419f84f87692e4cb46f660b003c81
Certificate serial:       019F442DCF3E8B4242D8282401071A544DCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-DrSwEUGfhPh2kuTLRvZgsAPIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.mft
Manifest number:          18
Signing time:             Thu 09 Jul 2026 00:01:20 +0000
Manifest this update:     Thu 09 Jul 2026 00:01:20 +0000
Manifest next update:     Fri 10 Jul 2026 00:01:20 +0000
Files and hashes:         1: 7-DrSwEUGfhPh2kuTLRvZgsAPIE.crl (hash: oJGJJJN9F7DkuiNONqwlVIEJLV25alWikQ8gg1BWVgI=)
                          2: XfXKJkxPG06sw6h0P3SlK66eCuw.roa (hash: O3XiKqUB1dU7QPT/bz3OAjXUnuYby2LWoaEHC76J3tY=)
                          3: u6PBAFOdsBFAZRaMYmhuAYBCw3s.roa (hash: AwxT7UyPMX5wEE4yK7hkSv3T75Lk6d5jT46lBhEBIUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-DrSwEUGfhPh2kuTLRvZgsAPIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:44:2d:cf:3e:8b:42:42:d8:28:24:01:07:1a:54:4d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe0eb4b011419f84f87692e4cb46f660b003c81
        Validity
            Not Before: Jul  9 00:01:20 2026 GMT
            Not After : Jul 10 00:01:20 2026 GMT
        Subject: CN=45a5b53bd83eb3f236cbda3d18c99a6f5e0723a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:d5:6b:0e:a9:04:24:d0:d4:8d:df:53:21:
                    84:37:25:31:36:17:f8:4b:78:1b:29:2a:c3:6f:70:
                    2b:35:be:da:c3:cb:db:c4:40:9e:89:18:4b:23:35:
                    ce:e0:3e:09:af:b2:83:6d:78:16:fb:76:af:b4:f1:
                    24:d2:85:9e:a7:6b:7e:1c:dd:36:c2:d2:9b:1f:f4:
                    78:bd:eb:20:46:70:b7:71:a0:1e:b9:3e:ea:27:16:
                    57:75:59:bf:8a:03:d1:87:e1:a5:ff:0c:d4:45:ab:
                    7d:25:7e:bd:a3:06:4f:fd:59:08:93:a1:e2:c3:9a:
                    dd:bc:00:dc:e9:65:aa:69:7d:b8:87:f3:30:7e:03:
                    0f:84:c9:2e:4f:4f:7d:12:11:a5:c6:e8:bf:69:05:
                    1d:09:f3:54:62:a6:f0:f3:5f:73:03:a1:f9:8d:26:
                    52:dc:50:0f:db:07:40:38:6f:80:b2:62:ab:d5:62:
                    61:fe:74:05:b2:6c:86:9d:8b:37:75:e9:5d:02:24:
                    fc:16:70:f5:46:f0:72:69:42:12:a6:3d:cf:2b:9c:
                    9e:0a:68:65:59:95:da:77:e8:bb:76:7f:e4:6e:99:
                    74:32:1f:f9:4b:0e:4c:d9:8c:7a:1a:7a:49:89:de:
                    99:87:dd:a5:74:6e:dc:b4:e7:19:5d:51:9b:b4:8d:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A5:B5:3B:D8:3E:B3:F2:36:CB:DA:3D:18:C9:9A:6F:5E:07:23:A8
            X509v3 Authority Key Identifier:
                keyid:EF:E0:EB:4B:01:14:19:F8:4F:87:69:2E:4C:B4:6F:66:0B:00:3C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-DrSwEUGfhPh2kuTLRvZgsAPIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7a:d1:37:b0:63:b4:06:00:c8:96:e4:d2:81:0e:09:44:c0:
         82:dc:ff:85:ac:ad:02:e1:fc:e2:a1:d4:b7:ea:c6:93:e5:cc:
         d7:20:0a:23:ca:c9:64:f7:5c:89:2e:b3:df:1f:81:ac:6d:93:
         05:4a:a0:9d:16:33:6d:07:f1:dc:eb:35:5b:38:17:f5:cf:65:
         54:b8:32:38:5d:eb:ef:6a:ae:c5:2a:8e:ae:5b:d9:50:fc:20:
         43:fb:99:92:9f:2b:eb:c2:20:b8:f9:09:08:64:28:cc:74:16:
         83:1c:37:c6:c6:70:e2:f4:c1:c3:6a:83:15:3f:30:4f:e2:d6:
         c0:40:0e:fd:e9:a4:66:41:a2:a8:db:8b:d6:d2:b1:2c:a3:df:
         21:48:2f:92:c7:f8:54:83:f3:ee:f8:5e:65:bc:3a:05:0a:b5:
         1a:a9:34:ec:5f:05:9f:ed:ac:98:b4:0b:27:16:03:62:ad:78:
         33:39:65:e2:af:af:af:cb:f3:12:ee:f3:19:09:56:67:eb:8b:
         6b:06:b4:68:71:1e:c2:1d:35:ec:72:70:1e:38:66:a3:dc:4a:
         a0:bd:55:9f:23:1f:cb:24:d7:bc:e6:20:dc:dc:65:bf:57:9c:
         c2:a5:25:9f:31:6e:ed:02:7c:dc:3b:5d:f9:39:5f:4a:29:32:
         9d:c1:c6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 06:48:01 2026 by rpki-client