Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
File:                     fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft (raw, json)
Hash identifier:          EBk0CUoZu3YZXPtuAzV+y7IaznQ2UDAUEY2FGlM7A0Y=
Subject key identifier:   25:CE:BF:66:89:25:D1:1B:3E:54:82:3D:42:81:BD:B5:5E:0D:2E:7E
Authority key identifier: 7F:10:B4:B6:2F:14:E6:16:EF:6F:E5:7E:CC:D1:B8:F8:18:24:8B:AA
Certificate issuer:       /CN=7f10b4b62f14e616ef6fe57eccd1b8f818248baa
Certificate serial:       019F90229E33F72746CD4805E7493E79E717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
Manifest number:          0103
Signing time:             Thu 23 Jul 2026 18:00:15 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:15 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:15 +0000
Files and hashes:         1: fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl (hash: pIbl6e1DMy/hLjZgheSTiue3Yr3l5baP28yl2KkfoOQ=)
                          2: qNO-vqMo6CUKbBad3Z7RIqx2J8c.asa (hash: BRtlygNOpn1uRvLhqR+yBcBHhopuo/nmc11EsjchCV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:9e:33:f7:27:46:cd:48:05:e7:49:3e:79:e7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f10b4b62f14e616ef6fe57eccd1b8f818248baa
        Validity
            Not Before: Jul 23 18:00:15 2026 GMT
            Not After : Jul 24 18:00:15 2026 GMT
        Subject: CN=25cebf668925d11b3e54823d4281bdb55e0d2e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2b:a4:b5:13:1e:66:1c:f8:60:fb:d5:da:66:
                    bd:2f:9a:dc:25:67:a8:86:9e:ab:d4:1c:65:63:94:
                    15:7c:a2:f9:47:72:e1:57:69:80:4f:60:45:e9:8c:
                    41:92:9d:0a:7d:b1:f8:f1:03:da:0e:d1:3c:43:e9:
                    89:dd:54:2a:59:f0:7c:7c:f8:a6:f8:90:a5:4e:85:
                    ab:d2:4a:95:05:ed:b3:bc:56:4c:b3:39:35:04:9a:
                    77:35:0e:11:d5:48:38:6d:13:dd:77:46:a8:44:c5:
                    8f:53:6c:d5:3a:e2:39:74:c5:fe:8c:ef:6b:89:78:
                    b1:1d:8e:d9:5e:7a:86:72:ed:01:84:c4:f4:17:45:
                    c6:7e:1e:ef:d9:24:36:ef:62:77:cb:bc:26:5d:9c:
                    b5:67:e3:71:77:e3:dd:ab:69:b7:9c:6d:6d:ad:28:
                    51:1d:24:ce:01:32:24:09:3f:14:d8:f6:38:ba:f5:
                    a3:ee:56:c9:b2:17:26:1c:59:03:59:21:5f:51:2d:
                    f4:48:91:d2:92:a6:ab:ee:a5:18:53:0e:68:99:93:
                    43:9d:fe:11:a4:dc:ae:3d:8b:54:0d:99:04:d0:94:
                    7f:07:24:96:f7:84:05:20:df:5e:35:77:74:eb:e6:
                    a0:21:9b:32:16:5e:6c:e2:eb:43:82:c1:06:24:cd:
                    2c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CE:BF:66:89:25:D1:1B:3E:54:82:3D:42:81:BD:B5:5E:0D:2E:7E
            X509v3 Authority Key Identifier:
                keyid:7F:10:B4:B6:2F:14:E6:16:EF:6F:E5:7E:CC:D1:B8:F8:18:24:8B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:78:01:b0:09:ef:81:8f:52:d9:24:8e:e6:af:0c:04:0d:4e:
         80:f9:16:87:11:a6:44:0f:79:8d:a7:42:d2:0e:42:3f:7d:05:
         86:39:6a:9e:00:9e:b4:77:bb:90:a3:ce:71:88:c3:c8:32:b8:
         0c:bc:c8:33:c1:44:58:e0:f3:6b:1d:80:5b:a2:9f:d0:16:72:
         de:e8:e0:c8:c8:f6:e5:cd:20:90:b4:f7:8a:a5:51:92:98:75:
         d8:59:c0:10:2f:6d:ee:f7:d1:46:77:d3:80:20:dd:0b:4e:d7:
         6e:6c:72:7b:56:df:86:cf:08:7f:6c:48:35:a5:36:66:9d:e5:
         e6:e5:fc:0f:05:76:09:2a:99:36:10:a5:68:cf:a0:5d:5e:f0:
         6d:d5:bc:d6:12:18:95:45:03:00:fc:63:be:3a:46:4a:1b:9a:
         f9:52:db:64:ce:98:87:d7:31:db:ac:50:38:06:aa:70:f5:94:
         b5:a3:be:cc:6d:82:4d:a9:df:07:5f:a1:87:d5:1b:98:aa:f6:
         f1:51:03:50:5a:21:c6:32:d1:40:fd:92:36:0e:e1:ff:13:41:
         2b:e3:67:9f:b3:c9:09:76:5f:73:d4:b4:d8:87:c3:35:e7:9a:
         7d:7d:92:7a:5b:5c:77:a3:ec:a2:0c:01:bf:b4:14:2d:bd:58:
         c6:05:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:41 2026 by rpki-client