Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
File:                     zltHouqq5MEDTJEAPnz-PTjR5VU.mft (raw, json)
Hash identifier:          vbF0tZ++9adB3tXLtw3AQ1zb5Vd+G4CwZ6lSftZE/Wc=
Subject key identifier:   8F:71:28:D8:DA:F1:8E:65:C0:F3:14:18:5B:1F:D3:D9:84:78:84:78
Authority key identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55
Certificate issuer:       /CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
Certificate serial:       019FA1164E59FB7BBD5A2706B404A326C0DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
Manifest number:          0B0D
Signing time:             Mon 27 Jul 2026 01:00:21 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:21 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:21 +0000
Files and hashes:         1: zltHouqq5MEDTJEAPnz-PTjR5VU.crl (hash: O2uEu4V7v4t8Cz/U3v7627d+n/TjENy4W8mnSZ1QiIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:4e:59:fb:7b:bd:5a:27:06:b4:04:a3:26:c0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
        Validity
            Not Before: Jul 27 01:00:21 2026 GMT
            Not After : Jul 28 01:00:21 2026 GMT
        Subject: CN=8f7128d8daf18e65c0f314185b1fd3d984788478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:55:c8:83:15:69:f1:36:fc:66:10:02:d2:
                    0c:6a:45:8b:0e:fd:8f:2a:e1:25:ad:ad:c2:88:e9:
                    35:78:65:74:84:f8:2d:7d:06:2d:6a:4c:ed:ee:0b:
                    a8:03:2e:32:5d:5b:3f:e8:2d:6f:c6:7b:2b:d4:78:
                    77:66:69:ac:bc:ad:9d:70:08:1f:1f:e1:d2:8b:42:
                    45:16:de:cb:05:41:49:f9:76:7d:9c:ef:b7:31:f2:
                    c5:2e:15:32:0d:4e:17:98:22:16:46:c3:2d:65:8d:
                    c1:75:3c:00:c5:40:b3:54:48:f3:3e:e4:42:01:af:
                    24:48:7b:2e:82:2c:f3:da:79:e1:1a:8a:95:c1:6f:
                    b7:f4:01:a1:f4:b4:8d:7c:6d:b2:df:1d:e2:46:66:
                    de:ee:d6:c0:b7:fb:92:80:f6:2b:74:89:5b:95:19:
                    d2:de:27:df:b0:55:fb:a5:22:3d:75:ff:03:1f:bc:
                    8e:9c:21:ef:35:80:44:52:a2:0e:73:75:36:49:2c:
                    42:0e:54:bd:b2:a5:c3:86:68:63:ac:8f:cc:85:63:
                    49:11:d5:08:ff:1a:af:51:b0:2c:1c:11:96:8f:e3:
                    7a:ef:24:5f:de:1d:f4:d3:bc:01:9f:67:5b:a4:d6:
                    08:37:de:cf:5d:d1:29:8f:84:9a:fb:2c:50:26:91:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:71:28:D8:DA:F1:8E:65:C0:F3:14:18:5B:1F:D3:D9:84:78:84:78
            X509v3 Authority Key Identifier:
                keyid:CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e4:15:2e:00:94:71:c5:e3:cc:e1:50:ba:80:00:4c:0d:56:
         ff:df:51:0c:39:ed:49:a8:05:56:0a:69:90:7d:2e:36:66:51:
         51:98:c8:c0:c4:69:59:33:22:44:5a:76:f5:7f:fc:ff:f7:21:
         46:4e:31:4f:22:83:48:23:2a:2b:4d:fa:34:a0:50:05:60:b4:
         5d:dd:a0:b1:fc:a4:98:e1:c5:79:9d:83:69:6f:9f:71:2c:fb:
         14:4a:12:0c:e1:68:f0:89:75:ec:6b:9e:15:18:27:9e:7a:5c:
         e4:1b:bd:96:c3:cb:7f:7c:9c:f9:28:a3:9f:0f:c4:b2:87:2d:
         fd:d9:bf:0a:dd:5e:fd:55:30:9a:8d:9c:79:65:de:27:57:78:
         92:e4:7e:0e:8d:fd:e3:62:60:a9:99:06:2c:fc:e0:3b:7e:c0:
         65:43:85:3e:6e:ba:2b:92:01:fb:9a:e0:cf:f9:a1:ee:e1:bb:
         9f:75:58:83:93:5f:35:83:c6:f1:4c:af:8f:2c:16:7a:51:ea:
         aa:b2:34:44:b2:ba:4e:7e:7d:a8:81:34:60:85:ec:28:98:50:
         58:e8:7f:c1:2c:5e:75:30:84:bf:b9:0f:a4:f4:53:d8:31:b6:
         5e:7b:a3:88:d9:ee:83:22:b1:2e:bc:8a:77:df:66:8b:69:20:
         a0:94:44:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:11:39 2026 by rpki-client