Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File:                     urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier:          HkJyHG3t9Ykdnap5PV7r96A3hGFKdg5jVttuoaeQ0kQ=
Subject key identifier:   1F:C1:6B:28:C4:75:6F:FD:48:C8:F2:44:D8:A1:A5:ED:2F:1F:95:C7
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer:       /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial:       019F954905BD26C4ACFEC32D255E66E0DA51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number:          19D5
Signing time:             Fri 24 Jul 2026 18:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 18:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 18:00:18 +0000
Files and hashes:         1: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: 0qbHotYA87iRE0/ctVeA7MFrsDvIN4UMfX1fIA/WqGk=)
                          2: y7cO-uvd-g6IKXPnSmNUZia9w1s.roa (hash: aa7Xz8229L+R/TET5wKLzyMqkiPkHrosbEK4nrHeitk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:05:bd:26:c4:ac:fe:c3:2d:25:5e:66:e0:da:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
        Validity
            Not Before: Jul 24 18:00:18 2026 GMT
            Not After : Jul 25 18:00:18 2026 GMT
        Subject: CN=1fc16b28c4756ffd48c8f244d8a1a5ed2f1f95c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:fa:cb:83:1d:2e:d3:72:56:4d:05:84:23:
                    e2:35:30:87:ab:a7:35:39:4b:07:c1:01:39:f4:d3:
                    95:18:0a:cb:cd:34:8b:53:d4:23:6c:ed:fa:d7:7b:
                    20:92:98:4b:d9:a4:59:8a:63:68:26:5f:d9:9f:ff:
                    54:10:eb:08:1c:8e:a9:06:8a:35:bf:2d:75:9b:10:
                    3a:17:37:b3:60:80:99:b8:9b:7d:93:ba:69:0a:df:
                    92:d1:15:a9:8a:aa:39:5d:d0:47:fa:59:3b:ad:ec:
                    67:c2:89:f8:a7:bc:a4:2f:ec:ec:5c:86:6f:92:b2:
                    54:a7:e3:a9:4e:0c:5c:18:58:df:fc:36:85:7e:a4:
                    62:05:e3:78:5a:0f:d7:80:fd:5a:61:12:95:8d:61:
                    e3:db:84:d2:d2:de:88:ee:79:e1:e6:39:26:7f:2c:
                    0e:4c:71:c9:a7:47:34:4e:a2:65:90:03:ff:0f:b0:
                    0c:b9:2d:ba:95:fc:db:e5:92:25:c3:2c:2c:b9:27:
                    fd:68:30:d7:70:cd:47:69:52:62:76:39:a1:ff:8c:
                    37:49:76:c0:5b:8c:b6:52:a7:9a:9a:f7:2e:32:c9:
                    66:7e:50:9f:7f:f3:b6:fe:03:ec:15:1d:c6:89:24:
                    cd:01:a0:a7:8b:df:dc:15:b0:ba:14:71:fb:35:b0:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C1:6B:28:C4:75:6F:FD:48:C8:F2:44:D8:A1:A5:ED:2F:1F:95:C7
            X509v3 Authority Key Identifier:
                keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:3b:bf:b4:06:fc:ca:5a:36:5a:90:07:b7:0c:0f:a6:58:
         7b:29:e0:10:7d:6f:9f:52:13:9f:bd:2d:d0:80:a4:45:c6:17:
         e9:e8:f3:eb:6e:17:ed:3e:b5:36:bc:34:80:f6:ac:af:13:93:
         ee:67:86:2e:0f:40:11:5d:9b:87:d6:1b:1e:23:04:ab:38:45:
         d3:5e:55:e6:13:14:3a:62:ae:6b:78:ba:e5:91:8b:31:f2:67:
         a0:a8:32:40:39:cd:a4:c5:c8:bc:43:f2:41:ee:6d:9a:2c:6b:
         df:77:51:92:62:33:2a:2f:ee:28:53:25:5b:57:b8:e7:5f:92:
         36:24:25:d5:89:98:72:bb:aa:a0:f3:4c:7f:3f:48:ae:55:24:
         3c:be:85:df:4b:dd:fb:a6:aa:e6:08:0e:36:55:68:d4:78:f3:
         2d:7b:d9:c3:9a:3c:d5:0e:88:8c:f7:17:0b:12:b5:26:3e:2f:
         f8:bd:49:55:2a:e2:30:d1:a9:8d:c0:e5:d0:22:f8:7a:a4:70:
         8e:45:4a:0f:b6:45:ce:bd:9a:e1:e1:49:2f:5b:07:bf:2d:c0:
         d8:0d:3f:e8:f9:73:6c:77:ea:1c:d2:e6:00:70:15:5d:93:92:
         a2:aa:8b:f7:29:67:60:89:f0:b3:18:da:a7:cf:91:ea:7e:5a:
         84:ed:50:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:38:59 2026 by rpki-client