Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
File:                     xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json)
Hash identifier:          2qQ9dYhdiWTB6noLqNDabJ0TL06tKSci2qPOiUJXn8w=
Subject key identifier:   29:39:7C:A1:80:A6:66:1A:D8:B1:E1:8F:90:23:D2:86:4A:9F:BF:45
Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Certificate issuer:       /CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Certificate serial:       019F91A44227C9080EE45E6045E60F6099E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
Manifest number:          1958
Signing time:             Fri 24 Jul 2026 01:01:28 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:28 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:28 +0000
Files and hashes:         1: AfdcY0-Nv9-nDm8D_XhuzGvHs1M.roa (hash: Iln5My7Vy90xzmErWY2q1+QP+/1Vku9eLVf6no/e5Gc=)
                          2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: Pa5xrdY32pw4i0du5RozAZME+v1EfX9XvlcwurlvPh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:42:27:c9:08:0e:e4:5e:60:45:e6:0f:60:99:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
        Validity
            Not Before: Jul 24 01:01:28 2026 GMT
            Not After : Jul 25 01:01:28 2026 GMT
        Subject: CN=29397ca180a6661ad8b1e18f9023d2864a9fbf45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:05:29:9a:5e:4a:09:c4:3e:2a:a8:48:25:
                    cb:f5:aa:86:cb:6a:f5:bb:47:06:a3:a6:64:6c:58:
                    c8:0d:4c:cd:e8:a7:76:f0:a0:59:60:6a:f0:d6:be:
                    01:84:d7:ad:4f:4e:0f:99:76:c1:e9:14:9a:e8:03:
                    8a:02:99:a3:2c:67:01:14:d3:fd:4f:fc:e1:ca:2f:
                    90:e2:05:9f:b2:83:f2:03:48:91:df:0f:dc:0c:f9:
                    80:99:91:99:6d:33:2f:28:bb:0c:09:84:66:d1:4e:
                    53:53:36:ef:d6:e8:27:2d:c0:9e:2a:45:0b:71:49:
                    b6:70:3c:a7:5c:b7:de:5d:de:30:71:e5:20:47:19:
                    38:43:3c:63:16:cb:53:12:c6:2e:80:79:b6:9e:2d:
                    45:12:17:f0:7f:ea:4f:45:e2:46:97:b8:a0:c2:ff:
                    74:cd:22:cf:6a:ac:3d:6b:22:58:b1:85:4f:99:e7:
                    dc:61:8b:c5:ec:5d:55:88:ea:dc:55:ec:05:8c:af:
                    a6:7c:eb:0e:e9:07:bf:5f:22:61:c4:4e:1f:2e:40:
                    e0:b1:e2:a9:94:d4:cc:4e:d5:d8:9f:58:91:5d:e6:
                    97:55:0e:50:03:9f:04:2f:c3:f2:1c:b5:32:0e:84:
                    21:93:c2:c7:9b:52:ef:1a:b0:e6:ef:3d:9a:7d:d8:
                    5c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:39:7C:A1:80:A6:66:1A:D8:B1:E1:8F:90:23:D2:86:4A:9F:BF:45
            X509v3 Authority Key Identifier:
                keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:26:a9:20:60:5c:e0:4a:5b:8f:37:68:54:56:38:d0:4a:f0:
         8c:66:a7:61:fd:a1:b2:81:6c:aa:4c:d2:06:ac:f0:48:7f:c8:
         b9:7e:3b:1f:54:97:ae:b4:66:4f:45:04:08:45:46:0e:3f:79:
         c9:7a:7a:fb:c9:8e:ab:e6:09:67:5a:2a:dd:ce:59:0e:5b:21:
         eb:e8:17:f4:61:c8:e6:6e:09:06:7b:cb:24:98:59:5c:2d:86:
         e4:58:53:40:8e:bb:8e:5b:d2:0c:ee:da:62:a0:48:ff:10:3c:
         ab:58:fe:45:36:9c:cc:05:aa:99:cf:52:46:66:1b:6d:31:cf:
         e9:9c:b8:4e:f7:e9:07:ae:5f:ff:27:b8:7e:6a:8d:4d:65:98:
         7e:c4:ef:43:62:7e:54:89:6c:03:b4:16:53:35:7a:13:2a:5c:
         44:65:b7:8d:ca:2d:34:c0:a2:a0:25:57:56:08:f9:80:7d:11:
         91:02:0f:b4:5c:09:d1:fb:30:50:f2:48:49:3b:cd:56:fc:79:
         2e:ce:8d:ab:dd:f8:26:c4:12:19:14:40:60:9b:47:61:e6:b7:
         22:7b:7b:93:b4:a5:09:c8:29:4c:98:f5:a6:39:33:1c:23:b5:
         27:49:4a:b6:b3:e7:55:ba:f5:22:54:11:5e:12:5d:99:8c:ea:
         e3:60:24:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:30:42 2026 by rpki-client