Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
File:                     IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft (raw, json)
Hash identifier:          yHn9aFRoSLNlBB6KyTAxkAA3RIrgryph+MeGcsOA2Mc=
Subject key identifier:   B9:98:07:7D:B0:D5:E6:C2:6A:09:A8:D0:64:FA:C4:A7:40:B4:1F:80
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Certificate issuer:       /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial:       019F927F20D3CB728A370E54F0F2426EC74B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
Manifest number:          19D8
Signing time:             Fri 24 Jul 2026 05:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:32 +0000
Files and hashes:         1: 8yBsAmvcp7MBHKbw3Xh2hY7QY9c.roa (hash: 2gV9CBthLZoGipB+VCz2AMjev6gv/KCt//M1rl+RkXk=)
                          2: IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl (hash: 6Sr/lyUDa74BABu/x5aO0l6HfOdptIGaKsxneEnF3HA=)
                          3: viJ7WfbDNM5esSfJxOqSt5gKGAc.roa (hash: 9+hcCiy0XqJIFSr4FHRADwACNfKMSEAJCGmpy7MhHBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:20:d3:cb:72:8a:37:0e:54:f0:f2:42:6e:c7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
        Validity
            Not Before: Jul 24 05:00:32 2026 GMT
            Not After : Jul 25 05:00:32 2026 GMT
        Subject: CN=b998077db0d5e6c26a09a8d064fac4a740b41f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:99:a0:f9:43:54:28:e2:c7:81:77:51:e4:bd:
                    91:f6:da:8b:ac:89:59:6d:70:1e:2f:b5:4d:07:c3:
                    ca:4e:13:b4:2f:ae:ac:c7:1b:3e:af:53:e3:15:54:
                    b5:f2:9e:2d:39:0b:89:6b:51:f7:11:ed:9d:15:08:
                    6c:50:9e:78:50:3a:54:1f:8a:ec:35:82:44:b3:c0:
                    fc:6e:98:8c:b5:1c:8d:96:b6:10:0e:58:97:2f:e6:
                    65:1c:10:19:c1:03:2c:3c:95:1a:d6:51:fe:76:3b:
                    b4:70:91:25:df:42:77:d2:51:84:10:4a:83:b1:6d:
                    b3:8f:50:75:f5:ca:1f:b0:a3:c7:8e:44:26:6d:86:
                    99:0c:cb:16:9e:c5:82:c8:9b:2e:9d:c2:9c:55:c4:
                    0c:0d:a8:ee:b8:2b:0d:ad:f1:9c:a7:b7:3c:21:bc:
                    b2:60:56:ae:bf:f2:95:31:e5:49:77:5f:b4:12:13:
                    1d:11:4a:cb:e9:f8:6f:45:ec:ec:02:ed:45:55:3b:
                    d8:0a:86:f7:06:3e:fe:a5:53:7b:0e:a8:15:04:d2:
                    21:d2:ba:fd:97:c9:ac:4a:1c:6d:ae:21:ff:c8:9e:
                    50:f9:53:87:58:8e:3e:de:87:e3:76:8f:c6:f7:7c:
                    a7:02:71:7b:6b:87:6b:4c:d6:44:f8:7b:56:cf:99:
                    65:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:98:07:7D:B0:D5:E6:C2:6A:09:A8:D0:64:FA:C4:A7:40:B4:1F:80
            X509v3 Authority Key Identifier:
                keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:2c:d0:4c:51:68:3d:1c:71:e7:bc:8c:47:4b:20:b6:7b:36:
         44:d0:b4:e4:f3:cf:98:e7:c9:0b:90:8c:a3:cc:56:88:7b:26:
         a4:09:47:cf:f3:05:b6:97:1a:04:cb:15:a5:53:df:87:46:3c:
         0f:f7:8c:ed:12:f0:1a:c8:c4:c4:56:a6:f8:51:bc:db:39:49:
         23:3e:e6:36:56:82:66:29:70:68:8f:80:86:61:a5:2a:d8:c9:
         3e:7a:8f:66:6a:8f:ec:03:a2:ba:8f:16:37:83:0f:7a:ec:8b:
         0e:fb:cf:4c:d0:d7:f1:b2:a5:ab:fb:b3:02:d2:c3:5b:0a:76:
         b0:86:4e:81:20:59:30:5f:ab:d6:51:cb:cd:ad:9e:98:6b:c8:
         81:55:ef:1e:90:b9:d2:9c:96:06:1f:31:53:fb:33:14:30:35:
         45:8a:a6:1a:18:63:e8:7f:3a:d7:f8:07:f1:15:82:08:7f:d2:
         4e:f1:7b:b5:5e:90:d7:96:fe:31:49:ca:89:55:d2:16:ff:0d:
         6f:7c:ff:90:12:fa:c8:01:ee:f5:7a:b4:67:91:89:d9:2e:89:
         e1:3e:31:94:dc:d4:c4:e6:be:77:88:6f:bd:b3:1c:2a:bc:88:
         7c:52:cf:d1:c2:bc:b4:7d:c5:b5:b9:e3:3d:76:09:98:89:08:
         0b:b6:fd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:15:26 2026 by rpki-client