Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
File:                     56lS7y1xM0iHgHhFONttuGLsBAg.mft (raw, json)
Hash identifier:          rJ3irPpLWBhVVInM9lOCf/1cxj7L2MAM5fWYiPkyjWg=
Subject key identifier:   A7:5F:FF:5B:EE:7A:24:79:93:25:BD:97:FB:2A:C1:23:54:21:83:D7
Authority key identifier: E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08
Certificate issuer:       /CN=e7a952ef2d7133488780784538db6db862ec0408
Certificate serial:       019F7287600AF2052E3C5C53974938130D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
Manifest number:          30
Signing time:             Sat 18 Jul 2026 00:01:42 +0000
Manifest this update:     Sat 18 Jul 2026 00:01:42 +0000
Manifest next update:     Sun 19 Jul 2026 00:01:42 +0000
Files and hashes:         1: 56lS7y1xM0iHgHhFONttuGLsBAg.crl (hash: 3+DlVGxcv/MJacrZjfhdeuBh5PujRj12RliIu1eT2bw=)
                          2: f1R_KVw6pDr-4luASuZxDgTRs54.roa (hash: pyivi44WDU8Xyy/kj2UqLPdU3p7h7jqHwHgFp3gleyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:72:87:60:0a:f2:05:2e:3c:5c:53:97:49:38:13:0d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a952ef2d7133488780784538db6db862ec0408
        Validity
            Not Before: Jul 18 00:01:42 2026 GMT
            Not After : Jul 19 00:01:42 2026 GMT
        Subject: CN=a75fff5bee7a24799325bd97fb2ac123542183d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:31:1f:6f:5d:a7:73:dc:ef:74:49:0f:fa:dd:
                    55:e0:2e:b5:54:e6:4d:c0:de:f0:b0:77:5f:54:c9:
                    6a:7c:92:62:31:bc:77:65:49:ea:d6:72:6d:a4:a0:
                    30:7d:40:1b:b0:f5:3c:2f:63:af:d3:7f:cb:ab:c5:
                    02:50:82:0b:79:13:e0:95:4a:83:ee:91:61:21:4b:
                    9e:90:44:be:98:a7:be:80:94:ae:1d:80:a2:e5:5b:
                    1c:9a:56:ff:d4:6c:8b:24:4f:f5:d3:bf:b8:bf:38:
                    fa:cf:32:cb:45:5b:e5:ba:5a:6c:fd:0f:14:7a:4a:
                    38:61:aa:19:51:c5:ea:5b:82:94:bc:97:e8:6c:ab:
                    56:7e:63:86:c7:4f:ad:d3:c5:09:c9:01:8e:91:18:
                    0d:80:cf:85:1b:02:51:f5:8d:cb:2a:b5:9b:f9:d5:
                    11:31:96:9e:a7:de:f9:f9:da:e7:af:e9:61:92:f7:
                    d9:24:a5:1d:a6:9c:15:cb:71:15:b6:7b:dd:41:96:
                    e0:e3:9d:57:25:b6:4a:9b:6c:3e:1c:b8:47:6d:ac:
                    90:57:60:50:b1:36:89:d0:ea:ff:10:02:2b:1b:f0:
                    d1:10:e3:13:91:6e:21:56:a2:95:09:c8:2f:84:e2:
                    cf:51:91:41:f6:a4:b6:14:d3:38:5e:b9:9c:8a:ce:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5F:FF:5B:EE:7A:24:79:93:25:BD:97:FB:2A:C1:23:54:21:83:D7
            X509v3 Authority Key Identifier:
                keyid:E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3a:16:e1:50:12:77:ef:18:bb:2e:9f:de:7c:4e:9f:b0:d0:
         7e:4a:0c:54:61:cf:37:06:c0:33:f9:7e:a6:4d:a9:99:63:80:
         65:ca:e9:e2:80:02:34:9e:eb:39:3f:f0:87:a2:a5:58:e8:03:
         31:10:0d:7d:98:fe:b8:43:90:7b:2b:ec:4c:e2:01:ab:3d:e2:
         a2:bd:5a:a3:87:4e:c2:f0:69:9b:74:af:f6:40:e9:d2:27:eb:
         b5:94:4e:62:64:f3:cb:10:2b:41:1a:12:c8:1e:2c:fc:71:08:
         1b:cf:35:4b:7c:19:00:87:c4:38:cc:3f:3d:c2:cb:39:70:cc:
         f3:fe:02:cb:a6:9d:f9:8c:21:8d:d4:13:d3:c9:c4:e0:66:28:
         8e:12:ec:fa:42:df:f2:f6:1e:47:b7:4d:3d:2b:37:d2:c4:e7:
         d2:4b:38:9f:81:4c:46:93:22:ee:46:87:4e:4b:88:10:b1:0a:
         43:b1:21:c2:3c:6f:65:16:21:2d:2a:03:0f:fa:c6:1b:a2:74:
         84:cb:f8:a0:6d:ad:a0:e6:ee:2a:72:84:d9:33:5a:cf:32:ee:
         b5:66:26:48:6a:e0:78:eb:68:d0:35:c2:3b:6b:41:a7:36:57:
         fc:2b:ef:e5:c9:d7:34:60:24:57:a6:76:7c:b3:50:db:a1:eb:
         ed:70:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:12:00 2026 by rpki-client