Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
File:                     7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json)
Hash identifier:          DR4WYc0HYBFi65G5Tzm9xwmodW2KNBkJMsFNG/dVyYI=
Subject key identifier:   6A:D4:1C:64:C2:9B:BB:2A:A3:72:57:4B:67:FD:FF:E6:22:A4:0A:54
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Certificate issuer:       /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial:       019F72BDFAAD23F6397DB7D3773489290E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
Manifest number:          19B6
Signing time:             Sat 18 Jul 2026 01:01:20 +0000
Manifest this update:     Sat 18 Jul 2026 01:01:20 +0000
Manifest next update:     Sun 19 Jul 2026 01:01:20 +0000
Files and hashes:         1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: +AFt/yxV+RoJZ5YBXzthnMTe2G18j6YGvnWZubNG0IQ=)
                          2: edQgb1OKZzdIqpTZCvd7y06flso.roa (hash: YslE6ABxgM2nK0S1WncJ01AbUDV4x4LC73+qD5UxVEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Jul 2026 01:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:72:bd:fa:ad:23:f6:39:7d:b7:d3:77:34:89:29:0e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
        Validity
            Not Before: Jul 18 01:01:20 2026 GMT
            Not After : Jul 19 01:01:20 2026 GMT
        Subject: CN=6ad41c64c29bbb2aa372574b67fdffe622a40a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e1:5f:ed:99:81:6f:f1:75:6d:01:d3:df:15:
                    75:21:d5:ac:3f:fc:2a:54:e9:5b:63:27:e4:a3:a0:
                    8b:35:e3:08:c8:88:b0:8a:4e:83:90:cb:ca:3f:e0:
                    34:8f:de:51:ff:cd:91:b6:ce:8e:a8:26:65:70:c2:
                    e9:20:50:43:f4:fd:7d:6e:89:44:f9:a3:e8:9e:97:
                    3f:9e:56:23:03:a6:b4:e7:63:15:a8:b9:b8:02:a6:
                    92:e4:ed:28:96:7e:ef:da:96:50:2e:37:0a:0b:c7:
                    fb:0a:ad:bc:65:ba:1e:36:04:3d:83:47:fa:ab:4d:
                    4e:0c:e6:c4:52:00:9f:7a:73:d3:65:ff:b4:7e:33:
                    64:13:d4:37:4d:4a:db:b4:75:22:ee:df:27:c3:65:
                    25:ec:21:6c:ec:74:ae:c2:20:d7:cc:89:45:16:66:
                    c6:f5:c0:d8:6f:bd:83:f2:cf:43:2a:cf:b6:af:8b:
                    ce:3d:cb:ed:0c:35:8f:e3:2f:f7:78:87:14:53:77:
                    49:ec:96:a1:0e:df:31:94:a3:38:52:8e:d8:17:88:
                    d9:b2:6a:23:cb:33:f7:39:d5:42:4b:71:e4:a9:cb:
                    6e:a0:6a:2e:f0:dd:d5:e2:ff:54:86:24:8c:c0:fb:
                    41:a6:65:5b:64:5f:f2:33:0b:09:00:6c:0d:b5:63:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D4:1C:64:C2:9B:BB:2A:A3:72:57:4B:67:FD:FF:E6:22:A4:0A:54
            X509v3 Authority Key Identifier:
                keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:d9:6d:c6:33:20:84:66:9b:74:85:ea:1a:dd:a0:6c:08:
         be:41:1e:69:57:0a:95:a6:c3:db:81:37:43:f1:73:df:c7:07:
         2f:aa:81:21:75:9a:8e:d7:a8:a1:58:75:10:52:af:8b:b3:7d:
         db:e0:66:bc:bc:cd:d6:16:08:6c:f3:71:6c:d4:a6:48:29:86:
         52:4e:51:9d:c3:f8:96:3d:4b:83:ad:cf:62:94:a1:51:e3:5a:
         e0:24:0f:2c:b3:e4:21:37:97:d9:7c:59:f2:81:3c:be:76:15:
         53:f5:b9:c6:aa:f1:9f:1d:9e:b8:9b:a0:63:fd:59:74:72:1a:
         ca:f7:aa:49:75:6a:d9:8a:4e:2a:54:90:ed:60:b4:c7:82:3d:
         f4:44:9f:9b:68:fe:35:d5:af:e9:8e:ca:53:d0:bd:85:29:69:
         d8:81:02:46:59:a1:3c:c6:2d:db:ff:a4:5c:96:43:b3:75:85:
         ce:a1:bc:b0:c2:dc:34:8d:42:15:19:23:62:45:ea:ea:4d:31:
         76:eb:11:e9:d5:d4:0c:ea:de:60:98:b6:5e:00:6c:a5:d7:a7:
         65:94:c5:c5:80:03:e1:cf:bd:b1:db:6f:9b:21:49:8e:56:9e:
         00:22:cb:d6:bd:a1:6a:46:6d:2d:12:ed:1f:91:66:86:bd:d1:
         a4:0f:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:44:56 2026 by rpki-client