Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
File:                     _P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft (raw, json)
Hash identifier:          TEWFaj0xoXMSr6Ow5m9k0L7SFp6662XArdYzgeQ5hGc=
Subject key identifier:   F6:E5:24:9D:2D:7B:95:9D:D0:6F:BF:79:CE:63:22:13:18:94:C0:27
Authority key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
Certificate issuer:       /CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Certificate serial:       019F9FCDC0C2A01DC51D8604F19C5ACEDA14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
Manifest number:          10D6
Signing time:             Sun 26 Jul 2026 19:01:29 +0000
Manifest this update:     Sun 26 Jul 2026 19:01:29 +0000
Manifest next update:     Mon 27 Jul 2026 19:01:29 +0000
Files and hashes:         1: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl (hash: Koh2JeLZmmXuKDkub1Y9XavwIDPevqdRotvAaR1OJrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:c0:c2:a0:1d:c5:1d:86:04:f1:9c:5a:ce:da:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
        Validity
            Not Before: Jul 26 19:01:29 2026 GMT
            Not After : Jul 27 19:01:29 2026 GMT
        Subject: CN=f6e5249d2d7b959dd06fbf79ce6322131894c027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:79:64:e8:42:c2:75:47:60:c7:7b:c2:3b:
                    86:d6:8d:54:32:5f:d8:68:81:4f:c8:0e:30:77:42:
                    e6:00:f0:3f:5f:d1:68:f5:0f:5c:fc:6f:55:21:34:
                    e5:1f:ad:f4:d8:84:40:f2:02:83:f9:3a:47:9a:39:
                    a4:49:23:9e:68:93:c8:33:96:cf:bc:d6:98:ab:0b:
                    be:c5:3c:fc:48:db:e7:6b:9b:9a:23:8b:46:a1:04:
                    26:51:a8:d6:7d:a7:e4:8a:00:a7:d4:be:3c:e4:62:
                    d8:03:4d:24:be:42:66:67:2d:02:f9:6e:a0:41:03:
                    62:c1:64:2d:e8:a9:98:ae:b2:2f:83:56:9d:70:26:
                    8c:9c:e3:48:86:9b:26:7f:e8:8d:c7:af:5f:09:ed:
                    87:0d:ef:89:1d:99:14:44:8d:97:6d:7d:d6:a2:68:
                    f5:91:4c:7d:ce:0c:4e:f8:1b:ed:61:9e:a3:53:19:
                    59:3b:c5:3c:06:95:47:90:75:30:58:9d:24:bd:66:
                    01:4d:cf:12:fd:46:c0:fb:9a:11:ea:d6:57:ae:b7:
                    fe:f3:d2:02:58:d4:0d:6f:bc:cb:dd:a0:d5:18:64:
                    3c:c5:58:01:58:c1:fb:8a:a7:8f:12:90:5c:f3:2e:
                    d6:3b:39:ce:41:f7:1b:15:f7:03:7d:43:64:bc:34:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E5:24:9D:2D:7B:95:9D:D0:6F:BF:79:CE:63:22:13:18:94:C0:27
            X509v3 Authority Key Identifier:
                keyid:FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:99:28:63:a5:4a:2a:01:b1:db:24:57:5b:66:1e:d7:4b:
         f4:d0:2f:d4:e5:91:e6:9e:40:67:7e:53:a6:6a:cc:0f:ee:9a:
         57:96:2c:13:2b:19:f3:fb:d8:4f:6c:04:c6:47:c2:2c:8a:a3:
         57:65:35:2c:11:9c:4f:51:de:37:80:43:33:18:61:3f:51:86:
         5f:1b:65:0b:9b:ea:05:07:8d:20:67:a1:74:26:ae:1b:26:61:
         cb:c5:fa:77:5d:1c:81:f0:d8:53:f2:5a:7a:46:b1:19:aa:e9:
         fc:d1:69:98:ec:83:d4:36:cb:cb:65:05:fb:bc:e5:64:d9:f5:
         19:2a:36:e3:c6:c5:49:60:94:01:47:14:86:c4:f9:fb:50:62:
         19:9b:3b:20:a5:80:f5:73:b7:54:46:fb:d4:b6:a1:d1:73:13:
         d2:a6:01:c9:1a:f7:3d:38:22:1b:3f:66:d6:ac:f1:b8:43:13:
         bf:d7:68:f4:c7:64:7a:3f:69:79:f0:ff:c8:c4:72:52:69:12:
         ba:13:a2:8e:2f:0a:b3:f0:a4:38:71:5b:70:34:85:42:de:44:
         b4:7a:2b:42:52:e3:82:73:dc:9e:8d:ef:8d:3e:1c:a3:91:2e:
         38:71:df:59:85:35:86:02:1c:05:b5:26:c9:9c:e0:e3:ac:c2:
         aa:63:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:11:09 2026 by rpki-client