Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          2SCn0JedoBy5iKzMKu86e9GEngQtvJNyxOzpY1pms8s=
Subject key identifier:   E4:FC:75:8E:1A:1B:7B:CE:39:7F:AC:53:2C:05:85:FD:42:4F:EA:83
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       01A0016F768F162B826F3728D8409B6620D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 18:01:17 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:17 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:17 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: 1D/MRjd5UriXFANvKKtXeRFwdb+g8oBM/N1X5m9jFF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:76:8f:16:2b:82:6f:37:28:d8:40:9b:66:20:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: Aug 14 18:01:17 2026 GMT
            Not After : Aug 15 18:01:17 2026 GMT
        Subject: CN=e4fc758e1a1b7bce397fac532c0585fd424fea83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9a:9f:65:00:69:e4:c0:19:34:35:0d:61:1c:
                    5c:cc:c0:5a:37:af:33:85:0b:a8:47:2a:25:0f:b9:
                    cc:ad:7c:7c:2c:b8:1a:f7:18:13:bf:4c:80:ba:dc:
                    fa:4d:fd:e2:8d:ae:17:25:31:9d:e6:34:c5:fb:8d:
                    27:5d:31:5f:6b:7b:35:ac:95:7c:21:99:c6:52:43:
                    db:c6:18:ce:e8:86:aa:ae:fe:dc:ee:49:cb:9e:ac:
                    d2:2f:42:46:80:01:d6:3d:49:73:88:c1:fd:da:21:
                    c6:1b:3b:66:2c:12:d6:b6:fa:44:71:d3:a9:7f:ef:
                    58:eb:11:37:c8:b8:92:27:73:2a:92:bd:a8:6b:77:
                    e0:a4:fd:73:61:2f:48:31:6c:99:21:e1:19:24:69:
                    ba:11:e0:50:ef:4d:3a:ab:0a:39:f0:a6:09:fc:58:
                    1e:b5:2e:bc:9b:85:ed:38:57:84:7c:fd:de:99:d3:
                    7e:3d:ae:cc:62:f0:23:79:59:6d:88:a2:42:16:c3:
                    3e:ee:eb:91:e7:b1:53:87:fe:81:b1:5f:1d:3c:12:
                    94:73:e8:25:47:43:e5:97:00:74:c1:01:fe:8d:15:
                    0c:cc:89:1a:a4:5f:54:f8:81:45:04:ad:25:16:9d:
                    a1:c8:6c:05:f9:c1:29:62:4a:b6:3d:20:71:15:4d:
                    51:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FC:75:8E:1A:1B:7B:CE:39:7F:AC:53:2C:05:85:FD:42:4F:EA:83
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:d3:60:1a:e1:d9:56:1c:d7:e5:64:39:97:a3:c4:9d:2d:54:
         e8:b1:f4:6f:a9:af:78:58:9f:2a:0f:e3:5b:c3:7c:ea:48:0a:
         da:8b:5f:94:07:02:e1:07:ba:60:c1:2f:3f:e4:27:04:09:48:
         c4:b2:ea:2a:46:01:bf:91:58:50:c7:19:70:14:ba:95:45:a8:
         8a:d4:3c:ea:d2:de:d9:67:81:e1:37:87:6d:30:39:ba:67:4f:
         be:69:87:ed:57:73:aa:66:18:63:bc:ae:9c:d4:9e:8e:74:0e:
         2d:fa:71:83:3a:d6:61:d9:ef:88:2b:7f:f5:d5:98:ab:76:81:
         23:2e:ce:f2:5a:20:15:0b:b8:78:b1:3e:be:49:fc:7a:5c:75:
         25:53:7d:f8:0f:c0:d9:ff:31:bd:21:ed:45:18:d0:cd:57:21:
         82:80:4f:1b:36:43:30:c2:7d:6f:1d:5b:af:60:f8:4f:a4:17:
         7f:1c:7c:a0:80:f2:77:20:e6:44:f2:e1:0f:54:aa:97:ba:2d:
         e5:db:4c:e1:18:dd:11:7c:88:d9:dc:ad:f5:e4:d6:81:3d:94:
         9e:14:8a:0f:d8:ac:91:5a:f4:45:68:f4:b9:21:f4:ad:4d:c4:
         a8:8e:4f:7d:1d:9d:1c:55:78:45:d5:82:63:86:3a:bc:e1:63:
         86:11:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:28 2026 by rpki-client