Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File:                     7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier:          ZBK2D/CsjfN3CO4ctECeOFDTlYFYst3UdX2vq9ZrjRU=
Subject key identifier:   7D:7A:CE:01:F6:90:54:27:73:A3:63:FF:DB:7D:B8:E2:D7:7B:CD:19
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer:       /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial:       019FA2CEF424924725B4843EE111A5F188EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number:          19D1
Signing time:             Mon 27 Jul 2026 09:01:39 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:39 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:39 +0000
Files and hashes:         1: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: Yd2KvqnXGSxT3GyE7So+GCo7XcWOSFPKCCFyROiXKyY=)
                          2: krZVBDiWkvm4PD1vJnwzxrmFRBs.roa (hash: U9k/zcmCxVKcnCozIhgmcwJH3uFDUp/Q9q36sgU5rBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:f4:24:92:47:25:b4:84:3e:e1:11:a5:f1:88:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
        Validity
            Not Before: Jul 27 09:01:39 2026 GMT
            Not After : Jul 28 09:01:39 2026 GMT
        Subject: CN=7d7ace01f690542773a363ffdb7db8e2d77bcd19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:f6:82:57:65:4a:e2:37:dd:56:d3:8a:01:
                    22:32:e6:74:9d:87:4b:f9:ff:c2:72:29:bb:61:9e:
                    7d:48:44:69:19:8d:8f:0d:99:45:4d:8a:d4:ce:9f:
                    25:b3:e3:2e:82:d9:3a:05:70:b3:a1:de:79:d9:82:
                    54:2f:0c:0e:2a:ff:32:78:ae:6d:a9:a2:c9:e2:f3:
                    c0:be:59:37:5f:f4:e3:6d:d3:b9:c0:f4:27:59:85:
                    de:86:82:8c:2a:10:fc:ef:c9:ff:bf:77:46:76:ec:
                    a8:dd:c4:7e:87:82:bb:4d:78:96:48:3d:78:00:e1:
                    19:b4:b0:86:e5:3c:7e:f3:cc:1b:e7:8a:1f:b0:43:
                    99:96:3c:2b:1a:05:f9:b6:44:de:0e:cc:7f:ad:82:
                    11:46:64:03:71:a0:5a:7a:53:83:68:04:09:8e:ca:
                    a7:2a:f7:9a:8d:57:96:b4:d4:37:85:ce:8b:57:1a:
                    73:21:b5:2e:a7:a4:57:7a:99:74:c3:cb:56:99:99:
                    3f:9a:13:2c:14:cd:aa:ae:6c:1b:ee:e8:bb:a7:82:
                    a0:ed:67:87:0c:00:67:91:b2:b6:9d:5f:b9:64:67:
                    6d:3f:9d:5b:6c:a9:ac:53:b1:a0:f5:cb:e1:37:3f:
                    9f:d7:9a:9e:42:5d:c5:dd:20:a0:ee:61:ff:6e:ae:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7A:CE:01:F6:90:54:27:73:A3:63:FF:DB:7D:B8:E2:D7:7B:CD:19
            X509v3 Authority Key Identifier:
                keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1b:3c:b5:e2:77:d1:2d:34:65:a6:d0:15:a1:4d:73:03:78:
         a9:df:50:2a:98:91:1b:ab:30:93:4f:06:86:d7:58:58:95:f9:
         03:e2:fd:37:c3:b1:1a:c6:04:ba:fe:e0:64:66:9a:42:77:a7:
         05:44:50:52:6a:0e:42:d1:4c:a5:e5:fc:6e:6c:12:9f:db:2c:
         55:8e:55:62:08:e4:3f:ad:fd:f5:54:95:8a:14:b3:5a:44:a3:
         7a:e7:41:45:83:f8:a7:ac:20:a2:61:b4:1d:b3:1a:6e:13:97:
         11:a1:cb:15:e5:47:08:33:90:81:e0:9a:42:b8:b0:93:f1:00:
         98:11:a6:50:85:08:61:ee:5b:03:b7:7f:9c:06:c1:d9:f8:ca:
         58:25:94:ec:a5:9f:a6:57:31:66:a0:8f:52:98:93:55:10:2f:
         92:80:53:52:f2:f8:db:94:84:c3:8b:4c:6a:21:cd:43:14:35:
         50:8d:1b:09:75:3b:c3:75:c6:9b:76:36:5f:26:7d:56:9b:fc:
         6b:d9:73:fe:37:06:05:6b:6e:6b:c0:13:bb:ab:0e:a9:00:7b:
         ae:07:7a:a7:25:67:71:c9:54:e3:a3:52:fd:bf:2f:3f:51:dc:
         82:ae:98:41:0a:d4:5b:e8:26:7a:0f:a3:5c:c8:ea:94:ac:18:
         b1:4d:1f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:20 2026 by rpki-client