Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
File:                     71j4Vyvdd9mBQRGA4u-aioAsdqw.mft (raw, json)
Hash identifier:          PO7SwsJTFHvE6rJhMvAjQBuHLG5vaWxlO7kpWyrIXEk=
Subject key identifier:   7A:43:76:E1:2C:88:80:22:F5:3F:CA:BC:D0:4E:E5:7D:CB:E4:1E:50
Authority key identifier: EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC
Certificate issuer:       /CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
Certificate serial:       01A04017BD40881D3CAFD320051D11B513B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
Manifest number:          059C
Signing time:             Wed 26 Aug 2026 22:01:32 +0000
Manifest this update:     Wed 26 Aug 2026 22:01:32 +0000
Manifest next update:     Thu 27 Aug 2026 22:01:32 +0000
Files and hashes:         1: 71j4Vyvdd9mBQRGA4u-aioAsdqw.crl (hash: p9g8y54hi2EgedBI+sHpUFDYaCwfA6KxkA+2EpRGK6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:17:bd:40:88:1d:3c:af:d3:20:05:1d:11:b5:13:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
        Validity
            Not Before: Aug 26 22:01:32 2026 GMT
            Not After : Aug 27 22:01:32 2026 GMT
        Subject: CN=7a4376e12c888022f53fcabcd04ee57dcbe41e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:0d:b9:80:02:f5:13:84:5e:ae:ce:1f:d8:
                    86:0b:c4:08:0b:71:b4:9a:bb:13:1f:19:80:b9:56:
                    9a:e6:65:7d:8f:f8:c6:0d:3d:3d:61:6d:e4:3e:3a:
                    fc:64:41:10:01:11:a9:37:43:2c:42:b1:fc:49:70:
                    c1:a0:d9:75:59:a3:c2:27:90:bc:93:6e:40:36:d9:
                    32:6e:b3:2d:81:24:c4:76:ab:f5:83:59:5f:dc:93:
                    58:a7:d3:77:5f:a3:ad:43:05:11:84:43:ba:36:0d:
                    d9:5e:a6:43:24:70:ac:a8:80:c7:92:ee:a1:07:dd:
                    1a:28:04:24:1c:40:58:b7:35:b4:0f:35:17:b8:ac:
                    ee:13:2b:4f:98:a0:c8:7a:eb:64:f7:bb:34:96:98:
                    32:dc:e4:5c:f8:90:7b:73:b8:6c:4d:bd:c4:29:03:
                    21:fa:91:1f:0c:3d:92:81:44:64:42:70:06:ec:1e:
                    19:54:9a:30:9c:13:4d:90:a8:3e:d0:97:f8:df:50:
                    3c:f0:88:3d:77:d5:03:7c:34:d7:2a:62:5f:c0:0f:
                    7d:5e:d3:11:81:eb:e7:12:6b:fa:a4:9a:0f:b2:20:
                    12:b8:32:c3:ee:eb:ab:dc:59:cb:fb:2b:96:d3:e6:
                    99:f0:af:c7:87:aa:8a:f0:3c:43:5a:7f:f4:50:61:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:43:76:E1:2C:88:80:22:F5:3F:CA:BC:D0:4E:E5:7D:CB:E4:1E:50
            X509v3 Authority Key Identifier:
                keyid:EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e8:e1:77:31:03:4f:a5:74:9b:9d:f7:9a:1c:0f:f7:81:93:
         61:1e:6a:00:42:e5:0a:0c:f0:22:42:9d:2b:88:ea:62:e1:10:
         cc:db:48:83:1b:d9:ec:7a:f7:68:ca:96:13:8c:57:fe:e8:44:
         58:ae:52:9d:f0:4c:97:7a:94:2a:6f:7b:d0:d8:59:9d:47:36:
         77:b5:04:b8:98:ca:ab:62:58:5b:6b:d4:b6:be:a4:3e:e4:69:
         2b:51:3a:b4:80:dc:0c:9f:f0:6c:92:e0:30:20:1b:4e:b3:64:
         c8:98:96:f4:f9:c0:9a:62:c4:c2:35:4c:e3:fb:1c:ed:34:95:
         fe:d4:1a:ad:96:d3:64:e8:a5:0a:9b:bb:ff:37:e8:70:aa:50:
         49:75:eb:4a:a4:98:ca:06:12:14:22:ea:e9:6b:43:2d:f1:82:
         b1:68:72:7f:a4:e5:b9:68:b9:ac:2e:3a:56:0b:ca:1a:ab:1d:
         f3:97:78:11:0e:84:36:38:81:a9:7c:94:3f:f4:5b:24:4e:3c:
         18:76:6b:9f:d1:a2:eb:c5:0c:b6:bd:35:e9:05:ca:fc:0a:71:
         71:72:91:4a:40:33:46:5c:13:ac:79:33:1e:66:b1:be:1f:35:
         77:07:1f:38:4e:64:28:b3:c7:c7:7b:ce:22:e5:37:c2:fb:cd:
         e4:d1:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:22:16 2026 by rpki-client