Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
File:                     69-nwK1-9nTdW0GUlg8v_UEV8mE.mft (raw, json)
Hash identifier:          m9l/KtobIpDPNNMstcy/iHjxttdXNt4Iks+Gdt0S/xE=
Subject key identifier:   7A:19:0F:ED:55:48:B2:9A:9B:03:4A:05:B7:BE:D8:85:15:B1:6F:9E
Authority key identifier: EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61
Certificate issuer:       /CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
Certificate serial:       019F8531C2EEDE74AA394D37317E56424CC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
Manifest number:          19C1
Signing time:             Tue 21 Jul 2026 15:00:58 +0000
Manifest this update:     Tue 21 Jul 2026 15:00:58 +0000
Manifest next update:     Wed 22 Jul 2026 15:00:58 +0000
Files and hashes:         1: 69-nwK1-9nTdW0GUlg8v_UEV8mE.crl (hash: tzOKId8TI9KO23SZDc+p/3DoY37c6ztFA4qIuVgHwsg=)
                          2: 6DzoadzIvflRSCanXdL7FqtC2L8.roa (hash: sur+A1CIETAgbr0Wn6YpsRLy5mn4DaVVYa9DTnS/yYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:31:c2:ee:de:74:aa:39:4d:37:31:7e:56:42:4c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
        Validity
            Not Before: Jul 21 15:00:58 2026 GMT
            Not After : Jul 22 15:00:58 2026 GMT
        Subject: CN=7a190fed5548b29a9b034a05b7bed88515b16f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:be:3d:66:2c:5a:2e:c6:de:84:84:79:06:
                    9c:8d:ac:c2:1a:1c:d4:5f:07:58:c3:95:64:33:b6:
                    46:75:65:da:0c:2a:e3:a9:82:8f:63:f8:d1:94:83:
                    50:67:e6:82:74:f2:74:96:fd:82:59:70:62:52:f1:
                    ba:55:b3:09:f4:71:0b:1d:72:89:60:cd:b3:44:f8:
                    cf:5f:94:2f:6f:51:d9:17:5b:8a:91:0a:73:bb:ac:
                    a5:84:65:5b:78:ee:d7:7e:3d:a1:42:f2:80:0a:58:
                    cd:19:7d:75:83:5a:84:bf:e5:eb:f7:42:a4:0b:e6:
                    06:f4:2a:f3:aa:79:21:d1:51:02:03:ea:55:81:f2:
                    11:b9:8a:c2:8b:43:94:40:7d:ac:0d:01:05:9d:65:
                    ef:bc:79:af:05:7a:f7:b8:8d:01:73:21:47:0b:73:
                    6b:ca:68:a9:72:36:04:0e:96:2a:7e:b0:08:07:2b:
                    88:3f:da:f6:70:45:10:1f:3e:7c:5f:8a:41:0c:2c:
                    28:b5:20:18:82:3e:e6:15:7d:a6:92:75:37:a5:1e:
                    a7:58:f2:41:c2:fd:01:d6:39:00:b0:16:57:bd:98:
                    38:54:3d:6b:97:c6:69:04:77:cb:0b:46:87:f9:72:
                    d6:33:43:39:84:fe:b5:80:59:92:33:1c:39:7a:30:
                    d6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:19:0F:ED:55:48:B2:9A:9B:03:4A:05:B7:BE:D8:85:15:B1:6F:9E
            X509v3 Authority Key Identifier:
                keyid:EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3e:6c:8f:69:38:b8:3c:98:6a:b2:e8:ea:b9:65:36:9b:20:
         ef:50:08:64:12:6d:f6:1c:5c:ea:86:8e:67:4c:63:70:4b:ee:
         4e:fd:37:8f:40:38:18:db:a7:5f:b3:8d:ad:e6:d7:69:c3:1f:
         b3:1f:32:cb:cd:1b:d2:77:51:52:de:92:ad:32:fd:0a:fe:d6:
         4a:bd:c8:d0:9e:a1:0a:08:bb:c9:27:64:ae:89:c6:af:e2:54:
         de:e0:c1:57:c6:6b:a8:91:62:c2:1b:02:c9:b5:99:98:64:8f:
         25:73:fe:8a:08:de:d3:da:c3:a6:af:50:31:de:ce:bf:82:1e:
         4a:91:06:7c:3c:10:12:25:5e:46:fe:74:c1:fc:07:0f:d7:60:
         a3:fa:04:e2:c9:63:44:04:fa:be:6b:95:ba:fe:1e:0e:c4:ee:
         71:1f:b0:51:ea:08:a6:de:e9:e0:2a:eb:f5:0f:45:49:f1:3e:
         62:2c:a4:cf:1f:65:0c:74:c0:f7:69:3f:41:3b:d3:58:2a:49:
         56:f5:e0:7b:f0:75:57:e1:9e:38:96:87:c1:fd:83:ee:28:68:
         3d:e4:74:fb:d6:af:c2:ba:17:71:93:34:3a:56:93:fb:a3:9e:
         92:c5:03:19:4a:c0:59:1b:45:a1:20:76:8e:b8:40:8b:dc:84:
         3e:bd:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:46:16 2026 by rpki-client