Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File:                     7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier:          Gc2+1HyJsPhOEmHSNSvK8FrgiZ2oDZQUYSPSPaXnjJg=
Subject key identifier:   3C:27:E2:41:EA:7C:92:64:A9:84:02:74:99:16:96:57:24:E5:FF:97
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer:       /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial:       019F17555782FCA1F825FE29C58B9428A168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number:          1974
Signing time:             Tue 30 Jun 2026 07:01:36 +0000
Manifest this update:     Tue 30 Jun 2026 07:01:36 +0000
Manifest next update:     Wed 01 Jul 2026 07:01:36 +0000
Files and hashes:         1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: GrQRxSz/f8qx5sjNMEZ1RgRQCF3ygrz0LRJHH8dzIOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 07:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:55:57:82:fc:a1:f8:25:fe:29:c5:8b:94:28:a1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
        Validity
            Not Before: Jun 30 07:01:36 2026 GMT
            Not After : Jul  1 07:01:36 2026 GMT
        Subject: CN=3c27e241ea7c9264a98402749916965724e5ff97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f0:08:1c:ce:ad:57:39:6c:fb:cb:57:d5:78:
                    c1:d8:58:33:fe:7a:72:90:d0:fa:85:d7:7a:ca:f6:
                    29:b8:ed:e7:b6:2c:3a:33:d5:4c:1d:f1:a3:5a:39:
                    4f:4d:1d:a0:e6:c8:a4:e1:7d:c2:0a:f5:e0:23:06:
                    01:49:7b:95:8e:cf:85:df:32:5f:d8:45:50:12:15:
                    3b:48:ca:d5:72:dc:9d:a4:7f:64:2d:e9:05:e0:8c:
                    e5:89:1d:c2:46:f8:d6:91:ac:f2:a1:b1:26:c4:e9:
                    ad:03:4e:71:4e:95:ef:be:5e:60:14:1e:74:86:e9:
                    9d:6c:bf:3b:66:0a:1c:d0:11:ea:1f:dc:b8:44:87:
                    bc:b9:ef:95:b9:44:99:14:54:60:c4:3d:f4:12:bb:
                    cb:7f:24:2f:e5:c3:4d:ea:03:c0:91:3e:26:7d:70:
                    26:6f:19:4d:d7:83:9c:24:75:ad:57:06:0b:12:d8:
                    3a:d9:d2:63:14:b7:9b:5b:c6:39:17:a5:dd:61:ab:
                    80:dd:bb:19:6d:ab:8a:18:b9:68:e0:83:4d:31:0b:
                    4c:07:51:af:1c:3c:1f:a9:27:a7:86:84:aa:aa:d5:
                    d2:d1:a1:4c:eb:a2:4b:53:4e:b3:c1:33:22:05:fc:
                    a5:4c:4d:17:fa:cf:4a:8b:db:5c:6e:bd:57:e4:c7:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:27:E2:41:EA:7C:92:64:A9:84:02:74:99:16:96:57:24:E5:FF:97
            X509v3 Authority Key Identifier:
                keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4a:3b:27:47:9d:a0:6b:be:00:3c:e8:b5:06:c3:de:d8:33:
         5f:f8:97:6e:e8:10:18:d9:ff:e3:29:d0:82:b5:ad:31:2a:a3:
         2f:bc:bc:9a:35:24:0c:19:c0:59:b9:d4:44:50:97:ee:f1:77:
         16:ff:de:c1:e3:cd:10:3f:ab:36:04:b2:90:36:5f:bd:5d:f6:
         4a:50:bf:83:ce:4f:20:ac:a0:f3:82:7d:23:1c:3c:6c:b8:0a:
         80:39:d0:a3:4b:6c:5d:80:73:9d:34:d0:aa:76:51:2f:ec:b8:
         df:c0:c8:d5:d3:2c:20:6d:ac:cb:5b:44:81:58:b6:8f:af:08:
         63:11:a5:ad:36:06:c0:59:f1:22:1d:c6:cb:f0:47:00:15:88:
         a2:c5:43:d1:00:c5:fc:d0:13:05:79:6d:86:9e:3a:12:c1:18:
         ee:47:c9:f3:ed:0b:c0:66:c7:bc:30:4d:6e:08:d3:1d:8b:b8:
         59:e4:99:58:cf:73:6b:bf:7e:8f:7e:c6:b3:91:f1:6f:a6:7d:
         05:f2:86:4c:0a:0d:d7:a0:8d:70:39:56:ca:e2:9c:f6:35:b9:
         fd:50:af:f1:3a:10:b4:c1:9c:11:67:05:5d:45:ea:50:15:cb:
         1c:4d:09:ce:05:b9:b8:25:02:d1:f6:b0:e2:81:d8:4a:33:52:
         b0:9f:c3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:45 2026 by rpki-client