Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
File:                     fEn63vQJ71hdX0o1su85SbWZxUc.mft (raw, json)
Hash identifier:          CMVWG8axZ1qrN2E+ARsG9oBrpYjg4tV+tipG0Ei4Jj4=
Subject key identifier:   58:B5:9F:E1:F1:D0:0E:36:96:06:DD:3B:A8:15:EE:A8:65:E2:AE:14
Authority key identifier: 7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47
Certificate issuer:       /CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
Certificate serial:       019F90230F2DB87BBF5B81F18E88FC443F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
Manifest number:          011B
Signing time:             Thu 23 Jul 2026 18:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:44 +0000
Files and hashes:         1: Kfv8pSzvP6yGqpNKWB0u9MATNiE.asa (hash: K8Z32NZvPzbYmVaeeJNzMlZvkbrlXgcqv646vOrcs/Y=)
                          2: fEn63vQJ71hdX0o1su85SbWZxUc.crl (hash: X65U53u6yiNxRFMuq8YpI3UgC1QPl863MUq0efIZ3XI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:0f:2d:b8:7b:bf:5b:81:f1:8e:88:fc:44:3f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
        Validity
            Not Before: Jul 23 18:00:44 2026 GMT
            Not After : Jul 24 18:00:44 2026 GMT
        Subject: CN=58b59fe1f1d00e369606dd3ba815eea865e2ae14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bc:06:1d:c7:33:81:70:8c:69:9d:02:5e:cf:
                    cc:f1:56:a4:2b:f8:fa:7d:be:5e:1e:36:57:b3:26:
                    9a:42:24:68:30:06:a9:7f:dc:96:43:13:a1:60:dc:
                    92:e1:d1:3c:0b:fe:33:5d:b3:b0:62:24:89:21:92:
                    06:14:de:cd:50:d3:98:be:1d:af:bd:61:37:6b:00:
                    38:40:d1:7e:6f:f5:ae:bb:e3:03:0b:4e:ff:5f:dc:
                    70:1d:1e:a6:e1:71:29:da:31:7e:e9:d8:b0:3b:11:
                    33:68:d4:2f:36:ed:67:7e:d9:d7:c4:63:59:06:47:
                    10:2c:00:e0:c1:f1:1a:76:73:ab:e3:8a:7b:f9:59:
                    b4:85:42:15:4c:48:9e:ad:98:af:4d:09:d7:37:97:
                    4f:d0:6e:fd:72:b6:a6:0d:21:3a:e9:16:89:c7:a8:
                    e8:16:d7:ef:d1:db:3a:db:50:4b:be:7c:f5:6a:42:
                    e0:be:dd:87:c6:82:1a:7e:54:d2:4b:bb:9d:e7:cb:
                    09:36:da:c7:29:b6:02:f5:b0:a9:1e:21:ff:ab:cc:
                    9f:23:5c:e5:46:7c:bc:a2:58:c8:d0:aa:86:07:fc:
                    a3:24:06:81:73:19:7a:57:28:33:ff:59:e4:92:2c:
                    68:78:4c:d5:fe:9d:eb:45:5a:2f:ce:13:b0:83:b3:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B5:9F:E1:F1:D0:0E:36:96:06:DD:3B:A8:15:EE:A8:65:E2:AE:14
            X509v3 Authority Key Identifier:
                keyid:7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:95:8a:a2:29:75:e9:9c:5c:32:c1:77:b6:fd:f8:e5:82:38:
         9c:0d:ed:d6:32:6a:0b:92:8b:e5:ac:da:7c:27:d4:fa:fb:88:
         92:af:6f:dc:ac:9a:19:aa:94:78:f5:58:ea:f9:07:6d:1b:f3:
         b4:12:bb:3e:cb:4c:30:b4:aa:fa:6d:4e:74:d3:5a:37:d9:c4:
         e6:88:52:44:f4:ce:7e:42:65:95:69:a9:ff:1e:18:99:7b:4a:
         b1:d1:cd:9b:55:f6:2b:db:28:bd:45:ee:a2:a5:32:01:48:52:
         b9:a9:6b:d1:15:9a:aa:cc:ab:b5:d5:4f:66:14:4a:7d:ce:42:
         2b:e9:59:39:7f:e6:56:83:b1:83:84:34:87:a0:8e:c2:60:34:
         62:1d:d4:3d:1a:e6:b6:b4:19:96:6d:01:30:1a:c5:a0:82:1c:
         51:33:7c:3c:1f:8d:0f:c3:3d:00:61:48:ab:73:c4:03:0b:d8:
         72:bf:c1:fc:43:ae:47:fd:ca:12:06:7a:be:51:6a:68:e6:a8:
         76:bd:99:1d:32:20:d0:f5:80:d2:ff:f9:01:9c:5d:fb:33:53:
         03:36:db:d9:d8:6b:4e:17:04:43:64:f6:db:f1:72:39:4b:70:
         94:80:f7:ac:19:92:c8:32:db:08:69:62:ba:18:69:a5:2e:42:
         09:61:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:23 2026 by rpki-client