Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File:                     75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier:          fqsjUXJpVeWgtRwdI7t0Doergng/wHB9MDSlBvXC4+s=
Subject key identifier:   84:A7:8C:83:15:E7:CF:91:80:52:F1:23:E2:0A:41:93:03:FD:BC:01
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer:       /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial:       019F916DBAD1A9D66CBA14F9343A9A7260A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number:          0B88
Signing time:             Fri 24 Jul 2026 00:01:55 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:55 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:55 +0000
Files and hashes:         1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: 4eZxK33urXkiX/NTzkAqxs8tQ6Gi8IpOKqOdTZYkRKE=)
                          2: DGYXYWLKOeu5jzMoeESZW6Y77nY.roa (hash: NEwVDGeOxuD3CwmTZN1xHgpekj6E23kVoku+iTke+5k=)
                          3: h1r4ZumAOZuwV9fE7OfAlVgJv4A.roa (hash: boWg3/ilHJUif1jBV2hi//oKfIFrSzEio17woe1bvV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:ba:d1:a9:d6:6c:ba:14:f9:34:3a:9a:72:60:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
        Validity
            Not Before: Jul 24 00:01:55 2026 GMT
            Not After : Jul 25 00:01:55 2026 GMT
        Subject: CN=84a78c8315e7cf918052f123e20a419303fdbc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:60:fb:b2:51:83:64:fa:2d:d7:27:9d:6d:
                    cd:56:48:23:29:47:88:43:01:4a:44:e5:f9:0b:0b:
                    1f:24:38:4b:1a:9a:f8:69:1a:3a:e6:30:0b:0f:b7:
                    58:35:f2:72:02:ac:8d:92:0a:b0:f7:0c:7a:88:36:
                    31:5c:ce:5a:79:73:ac:8a:b8:89:3d:63:76:16:7a:
                    e0:36:b0:e9:d5:58:e8:42:88:66:f4:22:3c:ed:ef:
                    9f:e5:dd:7c:dd:4d:e0:13:e0:86:d1:a5:f7:20:d4:
                    35:8a:c5:83:63:b4:3e:a2:b1:ee:c6:60:84:a5:1c:
                    5d:6a:75:06:e7:63:3a:4b:89:d0:1c:88:30:e3:dd:
                    8e:fe:f6:a0:b4:4e:06:a5:b3:ad:6a:2e:f2:80:55:
                    91:35:80:00:c6:54:d1:ed:8b:a4:ca:f3:af:96:96:
                    33:3d:a1:9d:e4:43:57:2a:0c:8e:e4:f3:3d:46:97:
                    6c:8a:ab:b6:36:46:04:2c:d9:58:71:78:cb:da:1a:
                    66:9e:bc:de:ab:a3:da:37:fc:bf:83:6c:14:eb:86:
                    71:e2:fa:81:aa:e0:be:fc:10:66:4d:5b:b0:fc:3b:
                    c0:5c:d4:2a:c9:b1:ae:d9:d3:58:19:65:af:ae:bd:
                    f4:88:b1:53:f0:f7:38:0f:e8:e3:82:49:39:28:e4:
                    59:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A7:8C:83:15:E7:CF:91:80:52:F1:23:E2:0A:41:93:03:FD:BC:01
            X509v3 Authority Key Identifier:
                keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:11:47:da:b1:9c:f6:41:20:29:c6:89:1d:28:c1:ab:56:61:
         2a:c8:76:1b:ea:21:e1:dc:ff:8b:5c:6b:c4:2d:17:49:45:54:
         21:1b:5f:56:23:5d:56:32:0a:16:05:05:7c:8b:cb:06:7d:70:
         01:1d:bd:5b:e1:64:01:63:d3:80:58:77:70:30:f6:4a:b4:7f:
         ac:de:0f:e4:e6:4d:d1:34:3d:4a:bc:1c:04:ba:43:fb:93:59:
         50:30:a5:13:f5:4e:32:65:01:2b:8e:56:9a:a1:31:3e:e2:7f:
         23:e9:87:f5:35:5a:6c:f3:8c:6d:ff:cc:81:1d:3f:80:9a:a7:
         67:27:65:fd:99:f6:5f:6f:53:1a:38:20:f0:91:33:ed:df:5e:
         dd:47:b2:95:15:38:f0:fb:a2:e9:65:54:38:b4:df:ac:3b:ef:
         8e:1c:14:f2:0a:8e:ca:ec:3e:f4:c1:86:c8:0a:1f:2f:87:83:
         14:c7:51:99:99:13:18:45:9a:e2:d2:93:67:05:d2:6b:2c:bb:
         7f:78:56:a1:06:20:15:9d:2a:16:a7:17:3d:15:61:90:1e:a0:
         0d:82:5b:8d:49:c8:a3:f2:52:4f:ac:29:c0:24:14:11:41:94:
         4d:c1:58:ee:92:ec:df:22:a3:92:57:1b:35:8f:ec:4b:13:8f:
         e2:99:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:04:40 2026 by rpki-client