Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
File:                     pj6AVRuSNrvAzXHFHRlZGA58j3w.mft (raw, json)
Hash identifier:          rELDX2obfG7rJbQ/yv/PtSEJ+yTyssO7J9nX7i6G++k=
Subject key identifier:   41:E0:8C:7D:DB:8B:78:A0:0B:D1:31:EA:4C:93:72:6E:50:64:CA:C3
Authority key identifier: A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
Certificate issuer:       /CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Certificate serial:       019FA071FD432856B321463ECD47F5FA4D80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
Manifest number:          170F
Signing time:             Sun 26 Jul 2026 22:00:52 +0000
Manifest this update:     Sun 26 Jul 2026 22:00:52 +0000
Manifest next update:     Mon 27 Jul 2026 22:00:52 +0000
Files and hashes:         1: pj6AVRuSNrvAzXHFHRlZGA58j3w.crl (hash: KUIfdwE+I44cnqoIKS6nvotNIdRzRHJqdq1PTAH1eWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:71:fd:43:28:56:b3:21:46:3e:cd:47:f5:fa:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
        Validity
            Not Before: Jul 26 22:00:52 2026 GMT
            Not After : Jul 27 22:00:52 2026 GMT
        Subject: CN=41e08c7ddb8b78a00bd131ea4c93726e5064cac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:f2:0c:86:a8:4b:b0:7a:d1:04:16:4f:be:
                    3f:ff:6c:06:ec:fe:12:cf:5e:66:f1:18:b4:3b:3b:
                    c0:2b:a7:ee:d0:42:dd:38:ce:ae:b6:82:bb:9f:ae:
                    2c:19:c1:60:8a:b9:14:63:a0:b9:f3:63:24:bb:61:
                    ec:12:9d:17:a4:1e:08:b9:4d:b5:a4:0b:58:c5:18:
                    0d:03:98:91:ae:b9:2a:8e:27:88:ac:c9:84:d9:05:
                    17:31:2d:43:cc:33:38:02:c7:bb:db:d5:40:54:04:
                    64:1a:5a:2a:c5:70:fb:f1:95:99:28:bc:d0:92:d7:
                    2d:58:b6:d5:de:c2:76:e1:a0:0a:62:1d:83:c5:f8:
                    e2:64:13:75:55:48:c6:ee:48:57:b1:55:c1:d9:29:
                    fd:0c:0a:42:d7:48:1a:b4:02:89:7f:0d:d9:46:26:
                    39:57:4c:ce:df:6a:37:c0:09:49:3c:c4:d7:3b:ea:
                    2c:f1:b3:a9:10:7d:ab:db:be:16:13:b9:b0:64:c7:
                    ea:ee:72:52:09:2c:38:a4:72:b5:b6:dd:b1:4e:6f:
                    20:10:1b:61:b5:5f:41:01:9d:39:52:7a:ac:2c:1a:
                    64:90:bc:71:2f:3a:82:39:63:53:03:28:12:d3:e6:
                    2f:21:87:7b:bb:a4:a7:f8:85:40:21:14:54:e6:73:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E0:8C:7D:DB:8B:78:A0:0B:D1:31:EA:4C:93:72:6E:50:64:CA:C3
            X509v3 Authority Key Identifier:
                keyid:A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c7:7e:c1:5b:6b:b2:46:82:0c:b8:2f:c5:f0:21:bb:b9:dd:
         5e:38:90:ff:e4:4e:0f:21:b0:b0:c6:95:00:d6:4b:65:8a:9f:
         45:8e:f3:4c:b8:d7:77:31:a4:21:4c:7f:f7:32:52:ba:a0:0c:
         b7:cb:5f:cc:d7:04:e5:ff:35:cc:23:5e:91:a8:8c:66:8c:aa:
         c7:17:b1:4d:17:97:10:ff:d5:57:cb:21:d9:89:c0:f5:97:69:
         14:da:8b:ae:e3:89:ce:38:3f:3a:0d:37:83:3b:80:71:a4:45:
         33:10:dc:c4:30:94:28:ce:e2:25:3c:b5:2d:5c:cb:06:49:fd:
         bd:98:29:ff:ac:7a:e1:c1:da:cb:5a:fb:3b:db:85:6d:15:02:
         c0:29:90:a9:ed:58:53:4b:2e:f8:56:4d:ad:c4:4d:43:7f:19:
         55:d9:5c:74:14:af:b4:2b:27:7b:37:61:67:4e:29:87:64:c7:
         a9:f5:ea:a8:95:fe:a7:37:88:9a:cf:35:59:c2:f2:f1:d6:45:
         a1:5b:77:4e:76:23:51:ff:25:78:a7:22:f5:8e:e9:38:4d:4f:
         de:37:f6:ac:0d:41:e8:a2:0b:40:ce:bb:77:c2:88:ec:fd:85:
         8a:86:9f:e7:97:e2:4c:58:b0:cd:37:73:d1:32:8e:6e:c0:dc:
         a9:84:78:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:25:30 2026 by rpki-client