Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File:                     cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier:          viwT0HHSyWDPcUx4MnSowYDrHCo1x6K8wf0yIcHIF4k=
Subject key identifier:   AC:92:B8:7D:DF:62:5F:E7:42:62:5F:87:D7:D8:AC:16:05:6C:0F:6F
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer:       /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial:       019F93240695E7CD489E55A213D265C00211
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number:          19E5
Signing time:             Fri 24 Jul 2026 08:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:39 +0000
Files and hashes:         1: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: mbYL69vnqoET9oMfAX8s/dyUQVUURThrYEwNBgIA/mk=)
                          2: ejKA_vlyxDhvn27RS4YsJGzhNdg.roa (hash: XP8ALFzfsLx3L3dQs8deoXxOCZ0VOnD81ZoRuur0rIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:06:95:e7:cd:48:9e:55:a2:13:d2:65:c0:02:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
        Validity
            Not Before: Jul 24 08:00:39 2026 GMT
            Not After : Jul 25 08:00:39 2026 GMT
        Subject: CN=ac92b87ddf625fe742625f87d7d8ac16056c0f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:a4:bd:79:33:f8:41:35:74:65:98:6b:1b:
                    de:1d:04:82:09:e2:b4:e8:b4:2a:82:e5:b5:dd:4a:
                    3c:c5:fb:6d:f8:79:d5:61:9c:aa:28:c4:a6:76:9f:
                    9e:e7:1e:60:99:f5:b7:52:21:27:34:48:6e:d9:95:
                    bb:eb:6e:4e:0a:44:0e:db:43:36:63:64:1e:fd:84:
                    96:bf:f5:1a:08:86:ff:4f:d3:42:2c:ad:18:64:5a:
                    6c:db:f4:db:8c:11:3d:58:71:bb:c4:82:0a:9c:b8:
                    6d:87:69:36:0c:89:cd:73:c5:3d:33:0e:c9:e0:5c:
                    13:59:3e:19:95:3b:b2:ec:d9:ce:69:5a:b3:7b:da:
                    eb:38:84:a2:1a:b8:be:e0:64:ec:a8:8a:47:41:ed:
                    68:d1:9c:fd:ab:40:59:89:ee:0d:f8:90:72:66:96:
                    2f:6d:4b:e9:ae:44:a1:fb:62:eb:c9:d9:ed:ed:8b:
                    0b:30:82:a0:1d:34:57:f2:a1:e5:a0:c1:3c:77:20:
                    15:2e:0a:32:17:e8:ce:b9:af:74:61:65:ac:9f:73:
                    d6:b5:a3:c1:54:9a:fe:a8:e0:f6:8f:b6:63:81:48:
                    8e:d3:c7:69:0e:b7:8c:08:da:61:2c:13:95:9c:0e:
                    9d:0d:64:ba:8c:63:1c:f2:59:e1:23:47:28:65:3a:
                    59:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:92:B8:7D:DF:62:5F:E7:42:62:5F:87:D7:D8:AC:16:05:6C:0F:6F
            X509v3 Authority Key Identifier:
                keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cc:49:3f:81:f5:19:ae:2f:5f:8a:4a:77:6c:c3:d3:8f:e5:
         c8:63:45:35:6b:13:aa:8e:6d:49:bb:ce:be:71:06:f7:4a:65:
         bd:a6:e4:22:e7:5a:eb:5d:ef:8d:aa:83:ff:4b:44:68:87:66:
         d5:c8:ae:9f:9f:92:fb:05:1d:fb:a6:27:8d:0e:02:d2:c5:ab:
         e4:74:0e:05:4b:43:6d:2f:6f:af:32:f3:38:e6:0e:4e:cd:74:
         ca:57:b9:9a:53:63:15:24:80:54:fa:bc:22:80:4f:12:05:47:
         eb:70:bf:b5:5b:08:6d:e1:95:16:ec:49:a7:1d:38:61:81:da:
         9f:04:40:f7:d7:94:03:e9:fe:66:d0:11:b1:6c:ce:e8:17:6a:
         a6:df:c8:2e:73:67:b9:dc:9a:08:08:02:41:a2:23:5e:7a:36:
         91:df:79:b0:b5:16:e3:6d:f5:e0:ce:54:58:34:58:bd:fe:bb:
         00:cd:49:fd:75:f2:e6:1d:ff:02:20:27:c5:04:52:ba:c8:6a:
         99:78:13:75:a3:ec:22:21:c5:45:d3:06:3f:14:f5:e3:f0:41:
         b1:7f:06:c7:d3:fc:0b:c9:cb:40:74:9d:98:76:7c:42:78:e0:
         25:82:b2:a9:e0:56:75:93:2b:b2:65:fd:a5:82:dc:c0:ee:ac:
         90:18:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:27 2026 by rpki-client