Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File:                     mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier:          6Glv0uXoIyXJniz+e/bu8QNh2AMaGYF5nKcxK/Lsc38=
Subject key identifier:   47:5F:2B:D5:8F:13:36:8A:0D:16:9B:98:FF:83:53:CB:D4:21:5E:FC
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer:       /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial:       019F9436DA4D706B9BE61DB2BBC49502FF1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number:          10A6
Signing time:             Fri 24 Jul 2026 13:00:50 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:50 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:50 +0000
Files and hashes:         1: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: 25uWB5XXeTn7IhULUkdhJvZV8/wY4bPYBz/NL5v7X/o=)
                          2: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (hash: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:da:4d:70:6b:9b:e6:1d:b2:bb:c4:95:02:ff:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
        Validity
            Not Before: Jul 24 13:00:50 2026 GMT
            Not After : Jul 25 13:00:50 2026 GMT
        Subject: CN=475f2bd58f13368a0d169b98ff8353cbd4215efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:41:cf:93:e8:d2:e2:6d:68:5e:c9:ff:b8:
                    af:35:4e:37:e8:60:a2:98:51:77:28:23:46:e4:fc:
                    ea:9c:77:cc:56:23:08:f6:db:4d:13:b0:b8:21:b8:
                    dd:65:32:8a:4c:a8:76:2b:5a:cc:32:74:a3:4e:6b:
                    9a:93:1f:d7:ad:43:c4:d3:62:45:f4:17:a2:fd:a5:
                    df:8a:b6:5f:72:e1:be:79:48:b3:25:67:e3:cb:f6:
                    8a:7d:e5:bd:e0:64:be:e8:70:1b:eb:ba:49:3d:4e:
                    d8:4c:32:ce:4f:b9:18:bf:5c:ff:9d:3b:7b:0d:35:
                    9b:ba:5f:0f:e7:a1:81:66:5b:86:11:3a:16:47:99:
                    6b:77:38:15:79:e0:18:8b:4a:a2:ea:cd:48:51:30:
                    ec:cf:83:ec:03:24:a3:8b:e1:35:83:2f:ca:ea:75:
                    83:fb:53:2e:39:d3:2f:96:4a:70:e3:8d:26:fd:70:
                    2c:43:95:15:7d:58:1c:89:f3:57:86:f8:be:5e:c6:
                    0e:44:71:9d:74:1b:23:0c:cb:ab:e5:a8:ff:cb:45:
                    94:cd:38:b4:21:f9:39:20:fc:91:7a:9c:08:db:aa:
                    a1:85:d8:3e:33:0f:22:9a:91:6a:5a:5e:87:89:6f:
                    46:d9:bd:10:52:ef:b6:91:49:fa:88:62:49:93:3b:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5F:2B:D5:8F:13:36:8A:0D:16:9B:98:FF:83:53:CB:D4:21:5E:FC
            X509v3 Authority Key Identifier:
                keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ea:3c:7b:ec:39:1d:6d:5b:28:d4:81:d5:3c:d7:96:a7:4f:
         d1:b8:c5:22:12:c6:74:47:f4:5b:4e:ff:5f:e1:20:b8:5b:5d:
         60:77:35:ab:ee:7f:4f:c1:1a:12:d8:d7:0e:42:24:59:e8:39:
         79:79:52:04:22:2e:0d:e4:32:7d:fe:76:6f:3c:fe:a0:44:98:
         ee:d3:47:cd:5b:80:7d:d9:6b:a1:00:af:1a:c7:84:50:e7:87:
         27:fd:a7:bd:9c:cf:ff:6b:15:0b:02:aa:63:d1:46:62:7f:29:
         0c:de:97:43:3f:c3:f3:5d:19:7d:a9:dc:e7:f3:29:d6:44:9e:
         30:67:e1:95:5b:0a:c9:1b:9a:8e:d3:a5:a2:05:99:ed:08:17:
         4e:93:02:5f:fe:d7:3f:13:e9:bd:9b:70:5a:b1:35:9a:d7:8f:
         f7:0d:1d:77:41:c5:9c:7c:b7:57:7f:ac:68:07:73:9e:8e:73:
         bb:b9:fd:a1:06:7a:de:e9:21:94:88:f8:35:12:03:7b:aa:56:
         1c:7d:c7:e7:4d:15:89:2b:86:e6:f9:5e:24:83:79:08:84:6c:
         d6:b6:db:80:70:73:ff:ef:06:3a:59:70:06:ba:5d:79:ce:42:
         93:1b:53:5e:44:76:00:c0:73:6a:8f:51:42:bd:9d:94:80:82:
         0c:29:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:28:00 2026 by rpki-client