Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File:                     d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier:          gQvTEw8HoKZRFeV3AG5wTqClvW9pATeA2tDkkGww5Q4=
Subject key identifier:   F8:CE:40:53:CF:DF:B1:03:2F:A1:3E:AC:D3:62:6C:D1:13:10:33:8F
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer:       /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial:       019F92B696C4AE93E9FAADCE526F00BF8C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 06:01:07 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:07 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:07 +0000
Files and hashes:         1: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: JiWBOhnTAslQbLjGphcso1rhWWj94YYbrVOjxL/3wwg=)
                          2: r7X848yOsMLAWCps4RFGUNqeVps.roa (hash: xew4extflEyzwcFzFw7/R0LSDzXNfuSjZMgYv5CBRTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:96:c4:ae:93:e9:fa:ad:ce:52:6f:00:bf:8c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
        Validity
            Not Before: Jul 24 06:01:07 2026 GMT
            Not After : Jul 25 06:01:07 2026 GMT
        Subject: CN=f8ce4053cfdfb1032fa13eacd3626cd11310338f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:15:50:a3:63:b0:99:e0:9f:82:d3:0e:c0:
                    6d:90:ac:95:76:f5:b4:31:c8:7c:84:6b:60:2e:4a:
                    97:37:cd:f4:f2:22:09:83:ac:6e:20:97:7c:18:d1:
                    f4:f3:71:91:a3:d1:5c:09:a1:03:3b:af:ee:da:39:
                    74:58:d5:d3:bc:a0:ec:e5:e7:72:ee:32:9c:1e:23:
                    c7:d0:b8:f7:26:f8:83:e4:d5:10:76:b9:82:4c:13:
                    bc:96:3a:c0:dc:bb:69:09:96:44:d4:47:11:46:dd:
                    52:77:a5:cc:f3:97:22:a4:41:99:48:c7:ee:d4:d8:
                    f8:57:d7:53:28:83:8c:2d:51:2c:3c:09:da:4b:a7:
                    9e:b1:66:2c:11:2f:48:a8:31:a3:1e:a2:cb:d3:9c:
                    e2:d9:21:b4:9a:d1:0f:e7:d7:5d:8d:c2:55:ef:57:
                    69:4a:b2:23:6d:33:95:8e:c9:a5:73:2b:37:10:ff:
                    19:bd:0f:a9:10:91:bd:c2:1a:53:03:e1:31:ab:4c:
                    70:90:2b:48:e4:02:b1:58:05:d9:53:35:64:9f:53:
                    1d:cf:3b:2e:98:8f:37:fb:ba:a5:bd:54:3f:18:71:
                    06:ee:29:bd:2c:ec:82:ad:a8:78:67:2e:e3:94:10:
                    97:7f:34:7c:8c:99:2a:ba:e2:12:51:e4:16:fa:70:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CE:40:53:CF:DF:B1:03:2F:A1:3E:AC:D3:62:6C:D1:13:10:33:8F
            X509v3 Authority Key Identifier:
                keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:85:2f:4a:3f:56:75:7a:6e:47:41:27:f4:a5:55:81:36:de:
         59:4d:c7:9f:f7:40:b8:e6:a3:12:82:82:9e:3a:f0:40:46:e6:
         d7:d8:75:1f:06:21:ee:66:03:49:ef:5d:d6:4c:a9:cf:e9:4f:
         84:29:c5:df:7d:7f:66:aa:5d:ff:b2:7c:27:43:c7:7e:02:79:
         55:2a:2a:f3:ec:55:f2:17:6f:b2:60:fc:10:e6:5a:d3:ae:f9:
         d4:e4:cb:90:93:d2:a9:22:9c:8e:5a:23:f6:9f:0e:a4:0b:c5:
         a9:4c:56:a5:38:f9:14:5a:0d:64:8f:67:19:76:2c:16:28:fb:
         99:24:39:64:ed:c4:f2:71:bc:a6:a9:8c:35:1f:ad:81:03:77:
         99:2f:ce:81:70:3e:50:ce:2e:f4:0f:98:aa:8a:6c:0d:7f:3e:
         e6:68:12:25:5c:55:9b:be:d9:72:69:a4:50:65:d3:83:69:a2:
         31:43:c2:e7:62:d7:2f:5e:fa:12:d7:52:aa:4c:74:4c:57:03:
         b6:a5:68:a2:fe:85:65:31:c5:9b:a9:1d:2f:a0:97:98:46:b1:
         54:36:d0:3a:f1:99:a7:e6:65:ab:95:bd:ab:67:10:5a:6f:fd:
         c4:51:75:6a:59:4d:21:23:a5:3c:33:c7:65:74:e1:9c:13:05:
         6c:c9:97:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:03:52 2026 by rpki-client