Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File:                     Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier:          kqgMdKY+ExxcIvuT1FpgoqqDcZnpcv4gbdjGq8UlB6I=
Subject key identifier:   5E:AE:F0:D5:C7:45:B0:96:E6:DA:78:64:84:B3:2D:6E:65:CF:89:94
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer:       /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial:       019F94A49DDEB62B337BB15952DF3D0632AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 15:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:44 +0000
Files and hashes:         1: 1-ZahvYxgAa5M_mDA6_2eC-rBenI.roa (hash: 978w808DkY3VDvL0hj5f3PlMqWZxHQFkwmbW19+/jR8=)
                          2: 7tiBKXEaHXd2T3JrhotcdPIQdHM.roa (hash: uX2d9uSrsFhlR/nFxsm7FePXc9bNjhHTQMjCrrOLdlo=)
                          3: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: OmQBbxGOf96LhVE+0LALDE+4QcUvbaB1emndpfweJ4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:9d:de:b6:2b:33:7b:b1:59:52:df:3d:06:32:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
        Validity
            Not Before: Jul 24 15:00:44 2026 GMT
            Not After : Jul 25 15:00:44 2026 GMT
        Subject: CN=5eaef0d5c745b096e6da786484b32d6e65cf8994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:ca:30:a5:61:71:dd:79:ac:9d:ea:c3:21:
                    ea:9a:20:0a:2d:96:03:34:05:a1:9b:05:2f:b8:6b:
                    2d:38:07:78:10:aa:e4:d7:23:31:8a:6a:0e:cb:85:
                    25:4b:58:08:16:8d:37:9c:55:90:fc:a3:59:64:ba:
                    4e:b8:8e:6e:2b:fe:6f:4f:a7:bc:97:3e:f7:67:2b:
                    70:58:ba:de:7d:b4:10:02:c0:c5:43:dd:f4:39:98:
                    bb:7c:37:96:18:a3:ba:a1:02:a6:d6:52:77:a6:72:
                    93:3a:35:32:85:e9:70:13:2c:33:71:59:64:69:80:
                    d6:e5:b1:49:22:a6:32:73:7a:bb:81:e4:fb:e5:3b:
                    75:dd:57:1c:ed:c7:ae:9d:aa:a4:49:3d:68:84:c8:
                    4f:62:69:49:17:76:16:80:32:30:aa:e9:64:31:80:
                    50:7e:7a:82:cb:45:04:cb:93:4d:99:e6:3e:a4:5d:
                    86:b6:59:75:1f:08:f7:29:8c:37:b7:d5:13:72:9a:
                    25:b9:cd:c8:53:0a:25:52:05:a5:a4:29:9e:00:6c:
                    35:2a:35:d0:89:ed:38:9d:ca:94:b5:bb:39:34:7a:
                    ad:4d:43:50:0c:60:eb:dd:a6:75:fe:5a:18:43:28:
                    7c:5c:b0:6b:3a:c2:7e:eb:26:57:5e:7e:81:14:8f:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AE:F0:D5:C7:45:B0:96:E6:DA:78:64:84:B3:2D:6E:65:CF:89:94
            X509v3 Authority Key Identifier:
                keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:33:0c:3f:0d:fb:bf:f0:52:87:c4:f5:6d:c7:8b:ca:fb:c3:
         c3:66:30:3c:ae:06:13:10:85:cc:79:fb:18:eb:4e:24:32:98:
         6e:ee:95:71:5b:47:bb:71:24:2c:85:f5:16:24:a8:8d:0b:75:
         4e:a3:2f:2e:fb:b6:44:68:8a:95:e1:a5:24:ae:80:14:f2:ae:
         ff:ca:b8:38:ae:fc:87:dd:ce:7a:b8:dc:7b:94:5e:a8:68:65:
         c8:55:bb:13:cc:04:2a:d8:c5:e9:71:70:54:f5:74:b8:2a:0c:
         bb:6d:0c:bc:cb:de:8b:b6:80:e6:ed:b8:5d:ae:02:c5:02:0d:
         5f:a2:e5:26:57:3f:c0:b4:92:82:bd:1e:52:b9:3c:e1:a2:c6:
         72:57:8b:73:ee:46:88:9d:77:dd:5b:16:a8:c4:cd:8e:c2:f4:
         ec:de:9f:2c:3c:12:72:1f:6f:1e:9b:aa:f5:b9:3b:57:ba:75:
         af:53:f8:50:66:44:d2:e1:80:a5:82:ae:59:f9:12:e8:01:18:
         70:7a:3a:79:3a:01:64:da:57:8c:55:71:c1:c9:22:c1:88:2d:
         f6:00:0e:57:de:8f:1b:7b:15:45:92:ab:b7:af:7c:b9:82:d4:
         ce:cd:e2:7a:94:75:e2:3c:75:a3:6a:23:bc:2c:a4:59:20:cf:
         92:cb:e1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:57 2026 by rpki-client