Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
File:                     EVVnl9qc5x7sKV81sAhZuQzoxfA.mft (raw, json)
Hash identifier:          upC1XnZs+GKK2tNIFaEducNdUJqTaUc85LsbVaBhHD8=
Subject key identifier:   B0:FA:C2:6D:16:90:75:29:45:48:3E:97:76:5C:2F:3C:4F:72:97:A8
Authority key identifier: 11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0
Certificate issuer:       /CN=11556797da9ce71eec295f35b00859b90ce8c5f0
Certificate serial:       019F81C24E60D0DE0465051FFE2BC8C12E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
Manifest number:          01D6
Signing time:             Mon 20 Jul 2026 23:00:22 +0000
Manifest this update:     Mon 20 Jul 2026 23:00:22 +0000
Manifest next update:     Tue 21 Jul 2026 23:00:22 +0000
Files and hashes:         1: EVVnl9qc5x7sKV81sAhZuQzoxfA.crl (hash: SkDId3UoS4pANtLR4ooJENUpiseIMxyRXtOCvS8WnPQ=)
                          2: tUtGKToVFVEdLnvzwP_qbyoWrD4.roa (hash: oDawWr/gCtZY5IlLhtFkFwJPnj3rhzKF04OEEY7CZlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:c2:4e:60:d0:de:04:65:05:1f:fe:2b:c8:c1:2e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11556797da9ce71eec295f35b00859b90ce8c5f0
        Validity
            Not Before: Jul 20 23:00:22 2026 GMT
            Not After : Jul 21 23:00:22 2026 GMT
        Subject: CN=b0fac26d1690752945483e97765c2f3c4f7297a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:0b:c3:64:5f:3d:bf:b7:96:13:6a:a4:bf:
                    ad:02:a6:f7:be:29:4d:9f:f3:23:ac:68:e5:8b:34:
                    f1:e4:b8:40:66:bf:08:c4:3c:cf:80:dc:6d:85:7a:
                    4f:96:e7:3b:4b:f6:51:17:5e:14:1f:1c:4b:ba:87:
                    08:4e:25:5a:a5:af:f3:9c:31:83:34:07:c1:b7:a2:
                    e8:84:43:c4:34:b6:4e:ec:62:19:a1:76:07:a7:10:
                    47:77:3c:40:4d:fc:8b:f8:33:29:f4:da:5c:4a:71:
                    59:7a:08:93:85:d0:41:2d:d5:b4:b4:f8:97:a4:ff:
                    c6:25:12:bf:fe:9a:27:0b:e7:ff:5e:b3:ad:c4:60:
                    8a:77:07:96:bd:74:b9:d8:22:0b:76:3b:07:94:50:
                    66:75:db:37:1a:3e:77:7f:74:57:25:02:ae:89:95:
                    8f:5d:04:2d:c7:88:f3:44:8d:0f:8c:9a:af:e9:3a:
                    03:52:dc:4f:8d:18:9d:11:4e:42:11:dc:ae:ee:4e:
                    c6:4f:2b:af:fb:25:d6:a4:35:00:0f:05:e3:a1:a5:
                    09:65:b2:69:79:37:18:17:85:f4:83:69:40:4b:11:
                    4d:5f:6e:91:55:0f:c5:d1:bb:83:8a:1e:8b:99:7c:
                    2c:3d:43:67:bc:4f:96:e2:16:6a:61:ee:d6:0e:79:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FA:C2:6D:16:90:75:29:45:48:3E:97:76:5C:2F:3C:4F:72:97:A8
            X509v3 Authority Key Identifier:
                keyid:11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fd:7c:4b:46:71:30:29:2b:46:8b:8b:cc:89:cd:6c:f7:87:
         ff:eb:07:6c:bc:b9:21:99:04:26:d8:89:d3:d0:43:46:19:ec:
         cc:f4:11:39:1a:59:75:5f:00:7f:05:5c:08:b9:d5:47:35:c4:
         57:c0:73:09:a4:28:22:e0:28:40:b4:98:41:f5:e8:74:51:70:
         04:ec:08:c9:6d:ce:8e:1a:3c:e4:a0:ee:16:2d:af:f5:22:73:
         bf:c1:1b:85:9d:70:a0:f5:ac:c4:5a:c6:9e:47:33:39:73:62:
         c9:73:51:3b:79:48:0a:31:59:74:0e:4d:08:79:11:35:c3:77:
         d7:d7:53:49:d7:03:91:ef:c2:ce:df:a4:fc:2c:ab:fc:92:b8:
         63:01:fc:23:ca:a6:e0:64:3b:97:09:37:1c:92:65:ca:48:f1:
         58:38:ce:16:fc:80:1f:24:6a:90:01:85:a1:5d:5f:0d:4f:dc:
         85:a5:66:74:a2:3d:58:ca:59:cc:5c:c4:c3:f0:a9:92:f4:c0:
         de:a4:cc:c2:62:dd:f6:f4:31:09:1a:4d:ce:0c:d9:94:a0:04:
         45:85:4e:27:10:74:e6:54:ca:a6:5d:4e:d7:16:cc:97:04:fd:
         39:c5:6f:b4:12:28:3f:d0:b8:04:17:c0:c4:f0:42:8a:ad:15:
         92:b4:e4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:06:24 2026 by rpki-client