Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
File:                     7nwowZyp0nBozrxpyBVBZ13BLN8.mft (raw, json)
Hash identifier:          SBrI7P+mFcrw5ABXHj9R74UQ3LkJtRi8DCaD3Tx3xLI=
Subject key identifier:   5E:CC:DF:9C:2F:05:7D:5A:47:0A:6C:6B:42:DD:CD:C8:39:B5:81:61
Authority key identifier: EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
Certificate issuer:       /CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Certificate serial:       01A001012394D7BF09D9C716BA5934F5F578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 16:00:46 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:46 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:46 +0000
Files and hashes:         1: 7nwowZyp0nBozrxpyBVBZ13BLN8.crl (hash: oPbaaB7o0r7x4+6oLPYNjcqaWeFp19jJP4gndZcS5mE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:23:94:d7:bf:09:d9:c7:16:ba:59:34:f5:f5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
        Validity
            Not Before: Aug 14 16:00:46 2026 GMT
            Not After : Aug 15 16:00:46 2026 GMT
        Subject: CN=5eccdf9c2f057d5a470a6c6b42ddcdc839b58161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:cf:3b:3a:96:8f:d7:a4:10:dd:49:8a:4f:
                    9d:6e:95:b6:1a:14:b2:4c:f0:0c:7a:79:7e:a9:37:
                    ca:40:f0:d5:42:cf:88:6c:84:5d:f5:fa:db:63:ab:
                    7d:44:9e:d5:6a:7a:3b:a0:7f:6d:45:97:85:ed:3c:
                    cf:00:f2:91:fb:0a:18:54:06:ae:57:c5:25:98:a9:
                    97:ab:e8:f0:a1:80:ad:94:37:3b:87:55:7f:9a:70:
                    84:f1:b6:b3:bb:b7:7e:b4:9d:46:02:e0:f4:0d:b3:
                    47:19:61:b8:dd:2c:d6:85:18:74:01:ae:33:a9:8b:
                    b2:d3:1c:a6:ef:18:0f:60:85:72:e9:e9:b1:d7:ab:
                    72:18:e5:e4:01:f4:4f:ad:3b:f3:00:93:10:da:c0:
                    d1:d7:0a:76:9e:5a:44:da:2b:df:e1:10:92:1f:29:
                    10:18:d6:3e:bf:14:52:c6:15:51:5d:23:88:dd:31:
                    a4:6b:41:a5:98:df:e7:25:fd:bf:1b:1d:74:c6:79:
                    f6:dd:7f:4a:4f:f9:5e:f4:8d:b6:6c:67:fe:70:d8:
                    13:2a:67:69:03:43:3d:d2:ba:33:cd:2f:3d:15:cc:
                    c6:ec:58:b7:ec:ff:04:38:2e:41:70:60:da:41:b5:
                    b1:66:df:16:5b:30:05:b8:21:7d:9c:82:d1:e9:94:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CC:DF:9C:2F:05:7D:5A:47:0A:6C:6B:42:DD:CD:C8:39:B5:81:61
            X509v3 Authority Key Identifier:
                keyid:EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:88:ef:d3:0a:53:70:b6:fe:41:60:a8:19:06:2a:6b:68:30:
         4b:5d:01:0b:11:0b:80:01:9b:4d:c9:14:5d:1e:b3:d9:13:14:
         29:b0:b9:08:2a:2e:05:d4:d8:f6:b2:59:d6:6c:b0:e0:e4:0b:
         59:55:16:a1:33:16:96:d0:2d:bb:05:24:d9:0f:0c:5f:d5:42:
         44:21:1c:0a:b3:8a:d8:cb:8d:5d:ed:13:72:fd:c4:e7:ca:66:
         2f:d6:0f:88:5b:f3:31:b7:0f:6d:2f:8b:14:ec:24:4a:73:e4:
         5b:ac:2e:3d:ef:8b:1b:15:19:42:40:9f:60:06:78:5d:d9:ab:
         29:bd:27:3d:27:34:19:8f:23:01:0b:3c:2d:36:87:55:ca:b1:
         f7:71:28:e6:c5:91:89:b4:27:7c:7c:c0:3a:42:f3:a9:82:98:
         1f:46:e2:47:66:68:4a:37:91:0a:2e:18:1d:b5:5a:fc:18:ff:
         5d:9e:24:01:05:68:a5:1a:02:d7:9f:38:b4:08:0b:63:00:2e:
         74:73:7b:3e:27:12:f8:47:7b:21:49:80:59:28:f8:dd:27:85:
         5f:3f:3e:2d:89:1e:c3:c5:67:18:b3:ff:a3:22:9e:dc:22:f1:
         f7:0d:e1:ce:1e:b3:ca:10:49:20:16:ac:07:a7:c1:ab:b3:2c:
         1c:83:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:00 2026 by rpki-client