Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
File:                     y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft (raw, json)
Hash identifier:          GwHYOS1qVqHoSnRNh62lnJX9ePWYjyHZcr4yGBDpVuQ=
Subject key identifier:   EE:27:77:EE:12:5C:E1:59:02:26:50:12:85:BF:19:7B:32:B3:3F:C5
Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Certificate issuer:       /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Certificate serial:       019F91DAA12150C14BDD396C0B573633744F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 02:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:52 +0000
Files and hashes:         1: fuY0eZiF4-D_oLwAbv6Pt7dkgQ4.roa (hash: WEfF3aWq5wfrlLHXB6G+0nEFtQGvIp+E7rPqEt3iqlU=)
                          2: y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl (hash: lEQAxcxJOo/zn1LUBFqa8jtxLVYT3nq21oZpRawPdtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:a1:21:50:c1:4b:dd:39:6c:0b:57:36:33:74:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
        Validity
            Not Before: Jul 24 02:00:52 2026 GMT
            Not After : Jul 25 02:00:52 2026 GMT
        Subject: CN=ee2777ee125ce1590226501285bf197b32b33fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:53:c7:d8:8a:7e:58:ee:36:f9:c8:ee:2d:
                    b7:7e:90:02:4f:0c:f4:4d:a1:71:66:63:44:49:4b:
                    20:e8:7f:e4:4c:dd:b5:cb:73:d9:19:e0:7e:ee:a8:
                    97:8e:c4:ab:94:04:d1:1e:95:bb:f0:3c:75:eb:3e:
                    59:d2:83:23:29:03:cd:14:6c:7a:9b:7d:6e:7f:a3:
                    7e:04:f2:89:19:99:2b:2d:5b:62:f7:96:5d:6f:37:
                    ba:1f:b4:3e:79:6e:d3:c8:b0:75:1f:82:d1:29:2c:
                    5c:93:b1:75:55:03:7f:f5:c3:8b:9e:8d:56:c4:ec:
                    32:4f:b6:00:5d:4f:e1:5c:c5:cc:3b:7a:75:23:9a:
                    1a:8b:94:be:dc:9f:2c:44:d6:f6:28:5e:24:c4:46:
                    e3:9d:fe:d2:0a:f8:a7:32:28:5a:b4:f5:66:95:98:
                    2d:14:de:b0:c5:8c:c2:37:c8:37:a4:d0:c0:9c:0c:
                    ac:40:f7:e4:63:9b:d7:55:26:f1:ce:03:92:96:11:
                    ae:83:e6:b6:4b:83:7a:62:3f:b3:f0:9c:6e:c1:61:
                    6b:40:bb:6b:b8:89:2b:2a:4c:b8:b4:91:26:50:d0:
                    35:df:4c:9a:40:77:7d:1e:f6:0c:8e:e2:df:a5:7c:
                    31:59:40:1f:29:83:fa:ba:13:01:1b:fb:39:b5:c4:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:27:77:EE:12:5C:E1:59:02:26:50:12:85:BF:19:7B:32:B3:3F:C5
            X509v3 Authority Key Identifier:
                keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:ba:a9:ee:3d:8e:ca:01:ec:3b:53:93:91:eb:0b:40:92:
         df:18:63:55:5e:76:53:bd:57:36:89:db:52:99:49:2b:92:c3:
         0b:97:f5:eb:a2:da:41:36:5b:79:09:43:db:1a:50:6c:a1:fd:
         94:99:3f:13:70:96:92:bb:e3:f2:36:32:80:5c:10:13:7a:ac:
         11:21:a5:1d:cf:48:58:fe:88:6c:82:5d:1d:38:97:ab:78:de:
         4c:8b:12:ff:f7:4f:a6:1d:e3:61:5d:af:41:12:82:b5:bf:56:
         bb:67:f5:4a:02:26:4a:8f:7f:95:61:7a:0a:2a:9d:37:0d:86:
         2a:fb:f6:6a:4b:b4:77:de:d7:bb:fe:22:58:1f:ee:ff:76:0c:
         70:4f:f4:5d:80:e0:82:a6:92:67:ef:40:ee:72:bc:86:67:c9:
         ad:c3:c7:56:c3:3a:6d:f0:68:aa:8a:3f:39:45:ac:50:23:8e:
         d0:c8:ce:55:6e:4b:87:36:a1:87:96:a8:17:ce:c1:b0:b9:f0:
         aa:9b:e0:d4:8f:20:94:f5:62:33:8e:5e:ff:d4:6d:7c:8c:b9:
         13:97:66:44:8e:58:19:bd:b2:b9:e2:de:ce:ea:f2:40:0a:bc:
         7f:d1:a2:29:30:b7:6e:d5:ef:46:ee:07:d0:f9:95:8b:4f:71:
         45:19:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:05:36 2026 by rpki-client