Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File:                     7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier:          IEeSzBKHbUrUmTFt0t7QHOOMPG29npcrU8WUKJoouo4=
Subject key identifier:   59:D9:EA:50:87:62:57:75:AB:17:A3:85:A7:14:22:0C:0A:F7:79:32
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer:       /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial:       01A00101BFBB72F10D01ACBFD9659F459FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number:          0C76
Signing time:             Fri 14 Aug 2026 16:01:26 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:26 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:26 +0000
Files and hashes:         1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: hobEg+XkJQOLK+blfPeXjIJyhq3jEe4ObBJX440HhQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:bf:bb:72:f1:0d:01:ac:bf:d9:65:9f:45:9f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
        Validity
            Not Before: Aug 14 16:01:26 2026 GMT
            Not After : Aug 15 16:01:26 2026 GMT
        Subject: CN=59d9ea5087625775ab17a385a714220c0af77932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:63:2e:c2:1f:37:b8:2f:39:29:0d:45:88:
                    b9:96:df:e2:aa:37:54:c0:54:c8:b4:00:c2:cf:d7:
                    44:2d:37:cb:eb:ae:ab:02:83:d6:1a:f3:9f:71:dd:
                    53:1b:67:7a:de:e5:9b:8f:9a:75:2f:ba:73:50:1d:
                    be:b2:50:c8:dc:5b:75:a6:42:78:fb:1d:df:34:20:
                    2f:b1:1f:c8:3d:ea:71:a5:1e:9e:9e:11:56:8e:0a:
                    f0:22:e6:d4:95:63:81:d0:e1:e3:0c:0c:6e:fc:44:
                    58:9b:9f:7c:a3:f4:0f:c8:1b:db:dc:71:13:9b:13:
                    85:9d:24:66:48:da:1c:79:2d:97:8d:e4:e9:a6:03:
                    21:65:9d:a4:0b:e7:3f:a2:e2:e4:13:bb:15:4d:aa:
                    d2:28:c9:98:37:77:29:7a:d9:49:4e:98:a2:aa:a4:
                    74:e8:e7:e1:be:75:b0:08:a7:5f:85:8c:24:f5:c5:
                    6b:59:c0:0a:4c:af:52:2e:e2:dd:c7:ac:20:01:0d:
                    37:2a:23:ac:eb:35:3a:ec:0b:f2:23:59:c8:10:62:
                    67:fa:01:db:71:0e:ec:80:f8:46:dc:2d:f3:ae:63:
                    cb:61:3c:ed:b7:75:77:60:6c:c9:1f:a8:e0:3a:33:
                    21:f0:31:7d:29:cc:44:a8:f4:89:a5:e6:e0:27:f5:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D9:EA:50:87:62:57:75:AB:17:A3:85:A7:14:22:0C:0A:F7:79:32
            X509v3 Authority Key Identifier:
                keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:63:91:85:06:8e:41:49:b7:d8:f1:6f:90:40:52:cb:22:
         fd:24:8e:e9:bb:b0:e8:8c:3c:3c:42:bd:48:dd:e6:0f:70:21:
         db:78:48:91:98:43:95:9c:ee:95:3e:12:7f:2f:ea:0c:f6:f3:
         2d:6e:1d:fc:b7:28:62:f8:ad:ff:9b:43:c1:5c:0b:86:c9:a2:
         c2:bd:14:93:f8:d2:b7:2d:e4:e5:eb:14:76:71:94:b5:5e:1e:
         99:61:58:4a:2a:4a:3c:7c:d4:23:d9:72:8c:82:22:69:c8:c7:
         7a:cf:f2:c0:98:49:75:55:a0:a8:bc:5c:1b:e8:8d:e2:bb:dc:
         4b:ae:a1:d2:f0:75:b3:c3:02:f9:a4:c1:52:75:c0:7e:07:7b:
         4f:51:ed:0e:da:de:aa:28:3b:5d:41:5a:fd:c8:aa:bc:c9:93:
         97:eb:58:33:52:96:e9:b2:69:9c:d9:93:0e:9f:c7:4c:69:5e:
         25:3f:ad:1f:0f:ef:6f:ea:42:ba:68:ea:20:7f:34:69:5b:0e:
         e4:bb:75:2c:f7:10:7f:5f:76:29:86:d0:27:73:05:d8:e7:64:
         9b:2e:33:29:fd:32:f2:7a:37:83:f9:e2:b8:1e:52:22:0b:a6:
         c1:40:f1:34:24:3f:1d:02:42:23:40:d3:b0:80:2a:60:7e:3a:
         78:af:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:57 2026 by rpki-client