Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File:                     Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier:          k4gmKXIYeE/jV2X2bgRvLLYIp3EiY6vHXbPX5KGaT5E=
Subject key identifier:   51:54:EC:CE:04:77:09:8D:EA:F0:36:58:AB:50:68:C7:97:BF:86:4F
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer:       /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial:       019F935BF52BD670F7407D1887332159B951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number:          19DD
Signing time:             Fri 24 Jul 2026 09:01:44 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:44 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:44 +0000
Files and hashes:         1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: 5vjJIVLzYCxOa9pWJW1iJuKQm6m3lB0ynidXljiUc4Q=)
                          2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=)
                          3: hsTKNuFtecu81R43BCP7v63FtKE.roa (hash: Jfq06SGiKWbDyYONhWT4ALN3kqL199bV3kH8pBzjomI=)
                          4: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:f5:2b:d6:70:f7:40:7d:18:87:33:21:59:b9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
        Validity
            Not Before: Jul 24 09:01:44 2026 GMT
            Not After : Jul 25 09:01:44 2026 GMT
        Subject: CN=5154ecce0477098deaf03658ab5068c797bf864f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:bc:26:9e:59:e9:bc:d1:0e:e5:d9:a1:ed:
                    d9:bb:d5:67:77:12:86:5b:61:5e:95:17:fc:ec:e0:
                    6b:af:f6:0b:3b:a8:fb:72:52:69:9d:37:7c:7f:9a:
                    d1:20:6c:ce:c3:bc:52:ac:d6:ac:85:4b:74:a1:7c:
                    22:8a:58:eb:43:9f:a4:bc:a4:0c:c2:02:f2:94:cb:
                    ce:cb:9a:ca:1d:e4:80:6c:65:30:4d:4a:bc:09:67:
                    31:b0:be:b8:ad:5c:78:e0:cb:28:8e:09:fb:ce:8d:
                    c5:42:e2:9a:7b:71:74:bd:2f:50:3a:ce:42:80:29:
                    a5:a5:26:95:3c:ab:7f:04:cf:66:1b:cc:9b:fe:0f:
                    49:8f:12:91:77:34:e1:bc:ef:a6:14:60:70:cc:e9:
                    95:f5:26:38:f4:3d:ad:96:6d:3d:84:19:04:37:60:
                    bf:1c:8c:f5:17:4c:d4:8f:3e:5e:49:da:55:d6:ca:
                    63:56:c4:96:c3:70:0d:f1:dc:3b:9a:64:ba:e3:f2:
                    b8:ed:e9:d9:97:ad:5e:ef:86:b3:a7:d8:6f:b0:16:
                    9d:2a:0c:40:79:8e:24:ac:6b:e8:73:68:3f:2f:b6:
                    4b:96:fc:f7:a7:a4:b0:36:73:3f:17:cf:ad:85:c3:
                    28:0a:a1:ca:78:83:5a:f0:5d:ac:2e:c9:a9:3d:49:
                    d9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:54:EC:CE:04:77:09:8D:EA:F0:36:58:AB:50:68:C7:97:BF:86:4F
            X509v3 Authority Key Identifier:
                keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:df:e5:da:d3:b8:7f:57:0f:db:6e:32:c9:63:08:5d:c4:ec:
         35:35:84:fe:4e:a3:93:13:37:04:3a:db:fd:a7:e4:59:90:a1:
         a8:64:3d:da:50:e3:eb:62:de:ed:6d:43:2f:27:f1:0c:56:c3:
         bd:06:5c:cc:7b:ce:39:01:fb:79:2a:62:68:2b:3a:b2:08:82:
         e1:e6:03:82:2e:87:01:4a:75:f4:fd:6d:10:55:46:2d:ce:79:
         b5:36:c7:46:85:48:79:13:08:ca:42:c2:c5:a2:1a:90:ca:d8:
         82:79:14:0a:08:4e:6b:3a:ad:e9:f4:e8:60:cf:c7:32:4e:51:
         ba:85:d1:27:fa:d5:ce:d1:12:92:32:c7:33:80:b7:11:d3:28:
         39:8b:9e:ac:75:32:48:69:80:e5:e0:e7:54:55:5e:76:a0:89:
         ef:d5:36:db:ad:db:f5:89:26:1c:bf:c0:14:84:2d:0a:bb:0f:
         9c:48:46:63:b4:f6:e6:a1:76:a8:3c:8e:69:ef:7b:97:9c:86:
         c8:b5:3d:4d:00:f4:c4:2c:5f:76:27:d5:ab:12:27:7f:e4:e0:
         52:70:48:01:e3:59:89:e1:09:5d:21:a5:7f:1b:d9:d7:c7:9a:
         b8:79:61:36:b7:19:38:f5:cf:c1:2c:6a:ee:6a:a8:85:d1:f6:
         40:0d:4e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:50:24 2026 by rpki-client