Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File:                     564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier:          HhORzdHD6z4Ohn08bCPowB88L7ujoH0ftJHlCEMzLNU=
Subject key identifier:   24:04:21:B5:67:DA:FB:73:18:50:DF:7C:79:24:FC:E8:69:55:F9:93
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer:       /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial:       019F190C8D46C6B04FFDFE7563CB9C60CE34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number:          1985
Signing time:             Tue 30 Jun 2026 15:01:20 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:20 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:20 +0000
Files and hashes:         1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: 1Dnn5F75JnAQnecGW9hX7OoEWYz0FQBczMrhPjvKJI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:8d:46:c6:b0:4f:fd:fe:75:63:cb:9c:60:ce:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
        Validity
            Not Before: Jun 30 15:01:20 2026 GMT
            Not After : Jul  1 15:01:20 2026 GMT
        Subject: CN=240421b567dafb731850df7c7924fce86955f993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:24:35:b5:71:a0:a2:55:9f:7e:38:70:bf:
                    d1:81:f5:fe:70:8b:18:03:a6:c9:5b:47:7b:a3:94:
                    8e:04:20:f5:d2:23:bf:d5:c8:09:ff:0e:07:b4:54:
                    a8:d6:ff:6e:9b:cf:ca:f0:1c:5b:cb:44:0a:4f:74:
                    1f:fd:a7:65:c8:44:a5:7c:75:c5:d0:4d:38:b1:95:
                    a2:70:4f:fb:1a:6e:d1:1e:e6:12:48:8c:20:89:5a:
                    e2:18:df:15:2d:50:7f:a3:bc:d9:a7:e2:3d:4c:ab:
                    53:91:90:f2:8e:c5:36:f9:02:fc:8a:76:bb:d9:4c:
                    bf:18:3b:cc:0b:6c:dc:c9:5c:9b:7a:c6:a3:9a:af:
                    12:11:8d:8e:15:ca:a6:d0:6a:ac:a1:90:9c:a1:a5:
                    12:72:1c:47:25:3d:c9:35:0f:fb:48:b7:db:5e:f5:
                    be:11:c8:4c:2d:e9:53:e1:11:a7:cf:49:c6:0b:37:
                    5f:02:5c:5e:4d:c0:43:f2:fb:b8:74:c7:43:87:52:
                    16:1f:1d:c5:9d:e6:57:20:f2:26:e6:44:fe:85:f5:
                    c2:df:c2:92:70:a6:97:a4:f9:f5:0c:d6:29:11:40:
                    dc:4d:92:05:4f:d8:c2:3c:2b:e3:b8:52:e3:e2:ac:
                    1f:e8:77:3f:b8:35:87:68:73:d9:04:49:85:1e:40:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:04:21:B5:67:DA:FB:73:18:50:DF:7C:79:24:FC:E8:69:55:F9:93
            X509v3 Authority Key Identifier:
                keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:90:e0:8e:12:7f:e5:f1:ce:6a:0f:6c:fe:26:ad:76:f8:
         63:53:a5:37:c0:70:bb:25:9d:65:19:c7:1b:f3:c0:cb:b2:41:
         8f:f0:be:40:ad:d8:85:e3:4a:77:d3:79:17:3f:33:73:d4:12:
         45:35:17:de:c3:cd:52:78:1d:03:98:25:32:f9:07:b4:b6:e8:
         0f:34:37:b7:71:a7:e8:d5:78:8b:5e:05:5a:00:f4:09:71:85:
         4f:d3:5f:98:56:c9:a5:bf:0f:15:69:4e:75:05:7b:4f:f5:36:
         9c:59:6e:14:4d:20:80:d8:70:c8:8f:89:f6:bb:a8:f3:35:6d:
         84:22:e2:80:15:26:26:fe:a9:a1:78:40:fa:b9:24:79:36:cb:
         34:81:eb:43:2f:64:52:f6:a2:51:7e:19:19:40:44:d3:64:03:
         9e:46:09:e5:38:01:34:6f:46:55:39:06:2c:09:c6:6a:fb:6c:
         a4:7d:c8:9e:0c:b2:eb:06:26:88:5c:74:ab:c1:36:d2:ba:a3:
         3a:23:87:03:d8:5a:0f:da:c4:bd:c4:79:d3:be:e8:b8:75:1f:
         ef:d6:59:19:cf:77:4a:ae:a3:86:16:53:26:a8:32:94:39:fa:
         a3:22:59:d4:dc:43:24:34:5a:4f:bf:86:aa:a0:34:6e:a8:25:
         98:a9:69:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:29:58 2026 by rpki-client