Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File:                     AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier:          fKYI0XX/g73apYbgpNtdGgmkXFJLmeFILzHKRbZOY2Y=
Subject key identifier:   E5:C3:CD:E5:2F:BE:95:F4:97:06:DF:20:DE:9D:1D:5A:DE:A5:FF:15
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer:       /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial:       019F8F7EC52FC396A6231DC75DDB7BA3CFF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number:          0741
Signing time:             Thu 23 Jul 2026 15:01:17 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:17 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:17 +0000
Files and hashes:         1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: dIulUhHhanQx6GHXRiYjUwGocCVbYC3fNYC2ttNZZPw=)
                          2: Eii8h6uaBr6fEXcjaJ5se8NVU0c.roa (hash: WAw9S4sN6yDFY1nBSSz2zmctfGBwQIAYJa1xn10MbIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:c5:2f:c3:96:a6:23:1d:c7:5d:db:7b:a3:cf:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
        Validity
            Not Before: Jul 23 15:01:17 2026 GMT
            Not After : Jul 24 15:01:17 2026 GMT
        Subject: CN=e5c3cde52fbe95f49706df20de9d1d5adea5ff15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:26:29:8a:97:da:92:bc:75:a5:39:50:6c:
                    8f:3d:1d:72:ff:52:f9:72:db:ff:17:75:ce:a9:a2:
                    dd:d3:96:a9:c7:bc:e0:41:b3:a4:ff:d0:a9:1a:25:
                    50:7d:45:87:2e:6c:97:30:e4:a6:13:aa:c8:af:ef:
                    fb:50:61:87:f1:b3:c0:1e:f6:f4:38:3b:4a:b2:c6:
                    80:ab:d8:82:dd:eb:95:02:8d:be:55:56:e0:b9:02:
                    de:33:58:3f:ac:40:95:e8:eb:4e:e1:d8:8f:b5:f8:
                    8a:75:10:c0:5c:de:b2:83:f8:24:db:17:18:2c:75:
                    80:1f:fc:e4:94:a9:f8:7f:4f:24:30:1a:3b:8f:68:
                    02:31:db:1d:93:29:c4:42:b6:32:3d:05:bf:11:31:
                    c6:c9:8d:be:44:dd:dc:ce:49:c0:f2:91:24:0b:67:
                    b9:0b:a3:6e:be:06:51:64:d2:6f:33:94:97:08:3a:
                    9c:7d:61:2c:85:98:f6:c2:10:c7:0d:35:c6:18:3d:
                    86:ab:1e:8b:e3:51:56:f7:c8:fa:91:64:e8:87:d5:
                    66:98:42:95:72:fa:d3:68:67:e2:fd:5e:db:16:a6:
                    e3:00:45:21:a5:c2:74:43:35:00:6f:49:26:af:31:
                    fe:34:96:52:61:72:65:8d:31:dd:19:39:83:a8:5c:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C3:CD:E5:2F:BE:95:F4:97:06:DF:20:DE:9D:1D:5A:DE:A5:FF:15
            X509v3 Authority Key Identifier:
                keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c2:32:bc:2e:2b:1c:19:01:4b:e3:a1:09:40:25:53:2e:a8:
         b3:47:5a:b0:9d:db:df:c8:df:0f:28:31:29:0d:ca:42:1e:f0:
         04:1d:ce:60:0d:b7:0b:c1:5e:aa:08:56:05:63:76:ec:91:38:
         f9:2d:41:e3:c8:d9:0e:54:0a:69:0e:db:07:c8:d2:42:e1:71:
         ff:d6:e1:87:7f:ad:af:f7:95:cc:85:1c:4f:b5:03:df:be:40:
         2b:96:2d:c9:ca:1a:4d:fb:86:b5:75:55:c9:38:7d:ca:27:5e:
         6d:15:65:2d:c9:d1:38:21:f6:4b:36:37:d3:ab:b4:ca:e2:e4:
         23:a7:b0:99:ea:e5:65:a4:79:3f:b3:25:85:22:80:43:49:9b:
         f3:b2:21:f0:93:c4:bf:c2:2f:ed:7f:ac:a9:4f:1c:ae:61:90:
         0a:d1:b0:4d:07:46:a6:d6:bd:e5:1d:bc:4c:b8:02:90:ba:de:
         b5:5a:35:90:d3:88:52:dd:4d:0f:fc:fb:70:68:bf:67:ea:4f:
         4f:e5:81:a5:2b:b1:db:59:11:98:8f:71:c1:e9:a6:e3:76:b3:
         63:43:b1:ef:33:cd:c0:fd:80:d8:6c:f1:05:7d:25:e4:5b:33:
         85:ec:f3:db:03:6a:85:6b:76:6e:b0:a7:61:80:52:ef:5e:43:
         b9:e4:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:10:15 2026 by rpki-client