Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File:                     e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier:          dXj+x1PHBRKYkFM49gaEQahw0f4EYWG9tKzhHoJe9Fk=
Subject key identifier:   AD:B8:03:FF:55:DF:24:03:06:72:D9:3B:7F:62:D8:53:9A:81:76:6F
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer:       /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial:       019F954909ABB8A84C9506C42C5ADA2BFE48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 18:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 18:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 18:00:19 +0000
Files and hashes:         1: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: QpHhAQ+Az8AkUXfJWiVUmWO3tKup8uw7gIiId86jlo4=)
                          2: rBb-Zp2DN1YryszXlTcGsxUi8kg.roa (hash: VjavbSWKLaeBoYTEkUDvu679eNkgyVWO00COvRWyhp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:09:ab:b8:a8:4c:95:06:c4:2c:5a:da:2b:fe:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
        Validity
            Not Before: Jul 24 18:00:19 2026 GMT
            Not After : Jul 25 18:00:19 2026 GMT
        Subject: CN=adb803ff55df24030672d93b7f62d8539a81766f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:7b:82:bd:63:cf:b3:85:0e:a7:e7:1b:e8:
                    6e:28:37:5a:68:b6:dc:06:92:9b:1a:96:dc:de:3d:
                    be:6f:44:a2:4c:3b:e1:9b:a1:e4:85:92:5c:5d:09:
                    72:cd:af:ce:08:d2:5e:5f:7a:de:a0:9f:ea:51:56:
                    f2:14:7e:21:d8:f2:0a:4a:a7:40:20:99:bf:9e:38:
                    88:d2:7d:9b:fe:33:f5:6b:c7:7d:23:3a:91:3d:8f:
                    63:11:4e:28:00:d6:38:9f:34:56:de:a5:1b:cf:12:
                    36:dc:a6:f6:3f:46:68:37:a0:bb:ea:82:07:7a:6c:
                    dc:ed:8b:08:07:9c:93:83:e8:e7:a3:1c:d5:fc:ce:
                    1b:20:81:e4:43:20:a7:8c:a3:5f:c2:b7:82:15:09:
                    ed:0f:ca:90:b6:cf:c4:e3:cf:c0:a4:bd:8b:d3:76:
                    34:0c:fe:82:73:51:8f:17:4d:0e:bc:06:a6:ed:77:
                    5e:ab:fe:18:56:e2:72:64:63:fa:90:d1:26:42:01:
                    3e:b7:ef:27:6c:ee:d1:b6:6a:5b:53:71:94:0c:f5:
                    5b:3b:5b:e1:3f:81:7b:9d:89:8c:de:07:52:97:c1:
                    53:da:49:8a:e4:b4:f2:44:12:d0:ba:2f:cc:84:1a:
                    c3:a1:52:e3:62:d2:bf:c8:2d:ad:4e:07:5e:52:b9:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B8:03:FF:55:DF:24:03:06:72:D9:3B:7F:62:D8:53:9A:81:76:6F
            X509v3 Authority Key Identifier:
                keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:82:ba:42:ab:2f:41:bf:fe:11:0d:fd:a5:1c:3d:6f:fd:16:
         dc:01:88:00:9f:9d:2d:69:e8:10:34:41:96:f1:a4:9d:4f:f9:
         1e:34:22:4f:26:b0:86:e9:45:52:b2:ef:13:15:c3:76:71:19:
         eb:65:70:87:25:0a:b8:df:17:34:d2:da:f6:4a:12:e6:ab:f9:
         2f:b0:45:e6:bc:2c:94:34:ec:1f:72:84:77:d8:b6:a0:36:73:
         5d:67:7c:25:1f:c0:b8:ab:c8:b2:2b:09:87:40:d6:77:e5:cd:
         2d:f4:fe:fd:26:cc:7f:ab:a3:67:c5:a3:95:24:a0:cf:3b:2e:
         69:34:5f:f8:d1:fc:1d:19:ac:23:44:72:53:83:ba:f2:24:e4:
         e3:32:fc:d4:72:2d:92:3d:74:7e:d5:20:12:86:09:66:d7:6c:
         a1:ca:00:2d:9d:38:11:13:04:e0:df:f2:33:a8:d4:66:5a:1b:
         25:a8:5f:13:a0:3a:ca:9e:ef:80:a4:35:00:38:a6:5a:0c:30:
         d1:67:a8:57:7f:5f:2d:99:01:e5:87:45:a0:1b:8a:5d:7a:ea:
         19:5f:20:ad:08:c2:18:9d:eb:64:f1:e3:30:a7:81:2a:ed:91:
         76:85:05:9a:cd:d5:f0:84:8d:92:f9:67:f6:ad:7c:99:a2:9e:
         75:f0:8e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:31:28 2026 by rpki-client