Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File:                     1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier:          c7LOgiE9XQlOS7DlQuheICDPaVb1YjhFo8bpL6WmcnM=
Subject key identifier:   60:C8:FA:5A:66:96:5F:8B:07:83:74:43:F1:64:13:34:B5:93:BF:DE
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer:       /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial:       019F8F7E1A10824169267CA73986373AE76B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 15:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:33 +0000
Files and hashes:         1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: izH4AtVRKm9WiWnXL2rjj0OFM3k1k2Gv438NshU0Y6E=)
                          2: 7uqMUTjf5_dRZtlY5W6uIyVJIBw.roa (hash: +PFpSUBUn21QY3VMxev9eNCTJ4x+TBdranLn3xHpsiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:1a:10:82:41:69:26:7c:a7:39:86:37:3a:e7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
        Validity
            Not Before: Jul 23 15:00:33 2026 GMT
            Not After : Jul 24 15:00:33 2026 GMT
        Subject: CN=60c8fa5a66965f8b07837443f1641334b593bfde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:49:52:8c:c2:d2:b7:46:17:c5:4a:1e:1f:
                    56:8b:68:97:19:6d:d8:6f:f3:3b:5d:87:f0:f2:53:
                    eb:33:a7:0e:24:d9:da:c7:b5:c7:ea:14:5a:55:6f:
                    cd:b9:78:dd:4a:37:61:fa:84:3a:1a:47:3f:bd:d8:
                    41:6d:90:d3:4b:92:b6:87:7f:f6:fa:a9:4a:75:47:
                    40:bf:d4:25:b4:0c:fa:8a:0f:20:5d:bb:ac:ed:de:
                    0e:be:e6:f4:56:a7:30:90:db:3d:83:96:80:81:32:
                    71:7f:34:fb:7a:78:70:83:30:ab:06:5c:ed:b8:c5:
                    41:6d:9d:63:48:df:8f:c8:5f:dd:f5:72:de:01:70:
                    a4:c0:e1:bf:b7:e7:13:c4:03:1a:07:4f:28:1b:16:
                    2d:59:87:b9:5d:6d:f7:8d:32:92:65:0d:8e:d4:31:
                    7b:df:9d:42:46:86:9f:e7:c8:18:de:f8:0a:12:67:
                    7a:84:a3:74:1d:96:39:53:1a:25:e4:f4:db:63:fe:
                    b9:f2:73:5b:66:bf:dd:08:c8:3d:a7:33:a8:db:b1:
                    cb:bd:59:bf:8d:a1:39:8a:2e:84:51:2f:21:1c:53:
                    06:55:70:94:ae:4a:78:16:d4:18:6d:37:f2:ae:89:
                    90:75:b6:3b:fc:7d:11:48:9d:fc:15:06:af:77:81:
                    7c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C8:FA:5A:66:96:5F:8B:07:83:74:43:F1:64:13:34:B5:93:BF:DE
            X509v3 Authority Key Identifier:
                keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:e4:95:03:92:27:11:80:4f:a8:cf:b1:35:ee:ca:66:96:
         70:87:64:cc:f1:62:e8:72:af:60:56:15:00:98:5b:e3:b6:18:
         e9:36:fe:f7:b5:d6:12:11:33:bc:13:35:7b:a5:ea:7b:cb:7c:
         63:43:4b:a2:24:83:58:e9:ff:89:67:06:fc:f1:47:e2:70:2f:
         d0:ab:b1:73:3c:18:6f:b6:d9:26:ec:44:62:61:34:a1:34:36:
         af:b4:8a:f9:b7:13:e3:f6:35:54:2d:f7:a7:e4:30:3e:ff:aa:
         22:62:8a:96:02:0f:3a:47:b8:48:8a:e6:8e:0b:be:45:29:f9:
         9d:21:9a:bb:8b:9f:69:cd:1c:34:ca:cb:ec:c3:ac:e8:a0:b7:
         6f:2e:5b:1d:cd:8c:68:4b:63:60:f9:53:b3:c3:a1:ee:81:9f:
         f1:32:bd:d5:74:23:fa:09:af:fa:e1:30:0f:38:54:ab:51:75:
         88:83:cc:61:f4:26:c5:4c:6c:42:9e:9a:dd:ef:0d:57:b2:1a:
         1c:8c:52:25:b5:56:bf:73:6c:1e:09:00:71:da:48:aa:ff:2a:
         d4:d3:07:86:93:1b:ea:d6:4f:52:d8:a4:1c:4f:4b:3a:2d:f4:
         15:77:ac:56:f0:a7:10:2f:c4:27:bb:2d:b3:76:4b:c8:c4:03:
         fd:ee:86:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:45 2026 by rpki-client