Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File:                     0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier:          TQLMupQoeXt6Fq/SwZU9bvklUHmsf9aDU/4M6ivIxJE=
Subject key identifier:   45:FD:F7:E4:A4:7B:5F:93:31:F0:D1:4F:9E:43:91:9C:DA:2A:ED:99
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer:       /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial:       019F91DA9D92BE22CD5C5D1135F64E495852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number:          19C1
Signing time:             Fri 24 Jul 2026 02:00:51 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:51 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:51 +0000
Files and hashes:         1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: ckr5IWYO+MInSR/MjjpiBq5RxA/mAxjgXxv9TqM+mbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:9d:92:be:22:cd:5c:5d:11:35:f6:4e:49:58:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
        Validity
            Not Before: Jul 24 02:00:51 2026 GMT
            Not After : Jul 25 02:00:51 2026 GMT
        Subject: CN=45fdf7e4a47b5f9331f0d14f9e43919cda2aed99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:0a:9f:f5:2f:57:44:92:5d:a3:f0:70:c1:
                    1a:f7:8d:eb:64:99:2d:76:74:35:c9:c8:a6:97:59:
                    ce:0e:b1:e5:47:ef:57:d8:82:64:aa:34:6a:e7:0e:
                    5a:52:fc:34:6a:7c:e8:50:2c:9f:c9:ed:50:b1:9a:
                    1e:65:6a:75:e1:5e:84:39:ae:80:a1:aa:ae:88:63:
                    85:77:01:ac:6b:fd:41:b9:78:f0:0a:17:0c:42:c4:
                    c8:97:56:d1:75:f5:26:63:e9:68:21:2c:a3:df:51:
                    d8:65:da:3d:4e:41:07:d3:29:f7:b5:17:24:a5:a1:
                    76:b1:e7:5c:dd:dd:6c:6b:db:11:18:f9:d9:67:2b:
                    7b:18:86:e1:ab:21:be:5f:e9:75:15:b2:7e:7b:42:
                    41:74:69:ed:0b:de:f6:a7:06:3e:d4:f6:d1:7c:76:
                    fa:57:6b:27:c1:28:e4:0e:02:ce:99:77:0d:a6:96:
                    3c:b9:6d:9e:89:e8:06:51:7f:27:26:e9:c0:13:4b:
                    ee:86:b6:27:ca:1a:92:8e:35:7f:e4:12:f8:ec:65:
                    39:1b:ee:62:b8:d8:64:ae:5f:19:4a:8c:d0:a8:b0:
                    40:00:3d:25:0f:f7:3b:e5:07:c9:56:ab:0b:97:64:
                    05:0c:78:e2:77:50:49:eb:9e:58:a2:1e:2b:39:2f:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FD:F7:E4:A4:7B:5F:93:31:F0:D1:4F:9E:43:91:9C:DA:2A:ED:99
            X509v3 Authority Key Identifier:
                keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ca:97:90:d7:b7:76:c0:ce:07:41:ef:c6:ef:23:36:43:e3:
         cb:38:9c:4d:2f:df:f9:34:bd:39:70:ad:4d:81:76:1a:a4:6f:
         fc:6f:d9:af:e5:92:d0:5b:20:f0:e6:95:06:c5:92:9f:26:da:
         78:0d:fc:81:20:42:e4:db:33:28:ef:90:c9:49:7b:28:62:d6:
         44:4b:4c:e8:cc:df:e0:d5:31:cf:68:c6:44:d2:46:ec:87:16:
         a0:04:a6:3c:9b:45:76:e5:aa:89:64:10:08:70:d3:e6:8a:19:
         2c:ca:d3:77:12:dc:5a:cd:81:c2:08:49:67:c9:00:4a:ac:f0:
         bc:bf:03:21:dc:77:34:e5:97:5e:ac:d5:3c:24:11:4a:49:2f:
         84:e9:1e:91:3c:38:6f:a6:61:12:f6:a9:c1:11:fe:d4:35:55:
         0e:c1:71:cc:43:73:38:81:12:a7:46:ee:3a:40:ba:ce:5a:0e:
         af:7b:ae:c2:dd:87:86:2f:11:20:ad:9c:09:57:4e:de:fd:26:
         9d:96:10:bd:a0:dc:67:a3:64:c5:cf:65:c3:cc:32:30:b8:93:
         07:42:95:31:c4:8b:e1:ac:96:96:24:e4:3f:db:c3:8e:e9:e1:
         11:15:d7:ff:f3:0e:d2:1d:1f:1d:da:0b:fa:c2:77:19:72:b8:
         93:30:13:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:49 2026 by rpki-client