Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
File:                     7x8BiBtzyOm12SI5IppuUS7KTnw.mft (raw, json)
Hash identifier:          +o12DdymO+5Wrem3GCbRkLSwFboD2m9xoRkQWEggoI8=
Subject key identifier:   F6:52:77:65:81:5F:BB:8F:23:45:65:F8:52:87:4B:31:5D:C8:60:81
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Certificate issuer:       /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial:       019F8F7DFF9E691F2967746B273C008C8925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
Manifest number:          19CE
Signing time:             Thu 23 Jul 2026 15:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:27 +0000
Files and hashes:         1: 7x8BiBtzyOm12SI5IppuUS7KTnw.crl (hash: /Wpq88c/3pxEoYB8nvkDYH0yuJkkVAEbTK0EnJORydM=)
                          2: Y7mpLNYAxNrmVFE668fj26_4slk.roa (hash: sStKHdLvZFVko1S3+XaMnFnoZ14/U/Jcc7V7adFjD7Q=)
                          3: cCf8bwDm6OZbLKRo45eN0GsYupo.asa (hash: pEXggXokDbhwnLHVuScY4TqYFat6YIVQQnhip9Py3E4=)
                          4: yOLIkYkij4lfgAP24UayKikeBzk.roa (hash: 7gmVoPjBYJzfEDhfSMctp0lOvJ+CyhzzxGbFh2ljSD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:ff:9e:69:1f:29:67:74:6b:27:3c:00:8c:89:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
        Validity
            Not Before: Jul 23 15:00:27 2026 GMT
            Not After : Jul 24 15:00:27 2026 GMT
        Subject: CN=f6527765815fbb8f234565f852874b315dc86081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:a0:ac:1c:0a:e7:0e:85:95:28:d9:8c:fb:
                    1b:8c:0c:ba:02:e6:bf:93:ad:ac:38:07:c2:3c:08:
                    5f:3d:cf:99:19:c1:f5:43:82:06:b0:11:d7:d1:58:
                    ee:79:4d:96:7a:c7:55:53:7b:80:b5:87:58:6c:c0:
                    9c:9c:fd:6a:43:60:86:99:b7:cf:18:0a:4c:ee:7d:
                    11:ef:bb:89:23:51:e2:bc:b7:17:62:dd:a6:c2:91:
                    03:81:54:ae:c9:87:61:89:0b:5e:12:47:23:a1:8c:
                    88:2d:d3:23:9d:12:b1:0a:7f:22:06:0e:56:58:b6:
                    2b:06:d1:21:21:11:88:4f:09:f9:a6:89:90:58:78:
                    bf:d6:45:78:ff:09:a4:56:3e:de:13:e0:f0:5b:2c:
                    6c:93:66:b6:a6:eb:72:0b:fd:ce:84:80:7c:74:c4:
                    46:23:7d:2f:97:5f:ae:33:10:9a:ff:36:ab:b6:6e:
                    78:0f:5f:59:e7:76:db:a0:03:e3:92:95:72:4b:15:
                    86:19:d5:05:50:0c:59:92:a2:f0:f1:15:2e:c8:87:
                    11:25:82:09:13:7d:5d:1c:a3:71:69:9b:f1:7d:a0:
                    20:0f:36:a1:df:28:90:36:65:c4:a7:fb:fd:2b:14:
                    d0:8c:cd:46:40:41:e2:06:a3:d0:31:4f:ab:9d:42:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:52:77:65:81:5F:BB:8F:23:45:65:F8:52:87:4B:31:5D:C8:60:81
            X509v3 Authority Key Identifier:
                keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:44:b6:33:e6:36:87:42:a7:58:38:4a:8b:60:48:26:b7:53:
         30:df:3e:51:f4:4a:2f:47:e2:d2:0d:ee:63:c4:fd:c8:c9:1e:
         4f:f3:2c:d1:e1:92:98:8d:20:26:e7:a9:3c:9f:7d:74:87:24:
         ad:6d:04:be:e0:05:93:a4:dc:38:aa:21:d9:f5:5f:fb:4c:0b:
         ad:e1:df:f4:9b:a9:2e:ca:85:1e:71:7a:e4:86:d4:dc:0b:64:
         34:1b:7f:f6:28:83:67:1e:61:82:84:64:77:50:e3:6c:66:88:
         5f:5f:34:98:58:d8:5a:06:58:0c:df:f1:8c:c7:df:3f:3b:91:
         85:c4:83:e9:51:38:d9:19:db:c7:d8:70:9a:63:ba:d2:da:e1:
         31:5c:22:c1:e7:28:f7:e3:ab:d2:03:db:9c:b2:33:ea:c5:be:
         6f:98:84:0e:d5:50:51:7b:35:c7:d5:b9:f8:ee:a3:d0:8c:f7:
         c0:e0:f3:a9:50:32:30:8a:e4:ba:47:78:70:27:9c:af:6c:71:
         5e:c3:b2:d4:e4:51:24:bb:e0:75:9e:92:cf:0e:52:15:1b:b4:
         f8:3e:d7:2b:31:b0:bb:0b:23:cc:91:96:f7:af:b8:f2:e5:69:
         c0:8f:82:54:95:e2:24:8e:6b:53:66:22:76:81:54:28:dc:e4:
         3d:83:4f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:30 2026 by rpki-client