Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File:                     0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier:          fMPULIFz+GDmAHxnbDEPsrnFnZU9ETMxwcw/314NAto=
Subject key identifier:   CA:D4:16:A7:5A:06:35:6A:EA:AA:BA:AD:23:5A:2F:C5:A0:D1:82:7C
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer:       /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial:       019F90C777529788827FE1C0A9628723FDE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number:          19D1
Signing time:             Thu 23 Jul 2026 21:00:18 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:18 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:18 +0000
Files and hashes:         1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: 6Y5EKPnPtisGLe9CXigb8HX1W15tO3oyb7rMzGlU5g0=)
                          2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=)
                          3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=)
                          4: I3Xhf2DzPC_yDF7Ep7YzBMFMy9c.roa (hash: lZPJ4+UTAfzaBn1qvEutfPFu9s5OmtvAwYfd82jbQxI=)
                          5: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=)
                          6: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=)
                          7: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=)
                          8: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=)
                          9: zX39p8hPMLMogAvQxpt7zlkHVdA.roa (hash: bJcnLltJJ72buWp7XshBBRT58VrzJdJnDzL7OsGRoZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:77:52:97:88:82:7f:e1:c0:a9:62:87:23:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
        Validity
            Not Before: Jul 23 21:00:18 2026 GMT
            Not After : Jul 24 21:00:18 2026 GMT
        Subject: CN=cad416a75a06356aeaaabaad235a2fc5a0d1827c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:8e:9d:da:ea:22:d1:03:27:23:bf:06:c6:
                    98:03:f4:f2:7d:b2:d3:1d:ec:8c:05:ca:cc:99:b1:
                    f2:8f:af:8f:fb:70:5d:34:34:b9:e9:cd:19:f7:39:
                    c2:93:e1:00:20:7f:11:a2:05:7c:67:77:b5:5a:89:
                    b9:89:bd:4f:f1:8b:78:c3:5d:e7:b3:77:5c:1e:06:
                    34:0d:7a:72:a1:22:b6:83:d5:07:1a:8f:c9:5c:d5:
                    5e:cd:62:87:8e:34:37:00:4b:bc:7f:e3:d0:af:ae:
                    a8:ec:a5:92:cc:99:3a:8a:c9:a2:5e:65:29:49:a0:
                    5a:96:b9:0f:fd:78:67:b5:ad:29:cc:c4:1c:63:f5:
                    2a:15:8d:68:c4:83:ee:2e:16:bd:d2:c0:d9:29:ac:
                    96:70:a4:b3:25:88:ad:ba:a3:07:7b:66:da:56:98:
                    7f:87:a0:09:cd:de:4f:4e:93:ce:f1:7f:3c:03:8e:
                    c4:98:d1:03:6e:f8:ed:17:4a:68:d5:11:37:7e:02:
                    2b:a6:61:c7:5d:79:01:1e:b4:c4:17:e2:7b:35:42:
                    51:0b:77:16:74:79:74:9e:0f:72:4d:8a:18:62:f2:
                    8a:80:d1:79:aa:ab:2a:51:48:79:f2:19:1c:01:2f:
                    a4:39:a4:1d:c5:d6:9a:56:06:f5:32:c2:53:ca:80:
                    ea:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D4:16:A7:5A:06:35:6A:EA:AA:BA:AD:23:5A:2F:C5:A0:D1:82:7C
            X509v3 Authority Key Identifier:
                keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:fa:6c:8c:78:bc:a7:c0:f5:10:29:3e:d1:50:d4:ca:42:44:
         42:df:16:b5:b6:64:92:20:17:fa:5c:2a:9e:9a:fe:b5:29:72:
         2c:07:41:7d:42:cd:82:12:b3:99:1c:16:b0:e2:de:77:64:ad:
         e3:b8:8e:6a:48:23:b0:93:7d:af:11:12:4e:a2:05:90:7b:b4:
         5b:ed:8e:bf:d2:95:a7:a2:4e:e3:76:cb:07:6f:81:75:80:55:
         a2:ae:6e:2d:83:3a:76:03:12:20:5c:70:d0:94:c6:bc:c0:8c:
         48:ee:53:fe:8a:71:ed:e1:d9:da:92:60:df:61:a4:10:58:7b:
         1d:18:8f:b7:16:73:93:48:60:f5:9e:da:37:2c:6f:3b:5c:bc:
         31:b8:22:3c:47:3f:10:b7:b1:4e:52:ea:2e:71:35:14:b8:de:
         ec:7b:18:60:74:a6:7f:1d:58:2f:42:3b:8a:71:ad:5e:56:dc:
         98:8a:8e:04:94:1f:e1:08:7b:98:ff:a7:31:87:79:a9:05:94:
         dd:34:97:4a:19:e5:ad:8b:bb:ab:3a:75:8d:58:8f:86:ea:7e:
         70:fa:69:a3:ad:56:d4:8b:f6:dd:02:8c:86:66:e9:a6:b4:b1:
         45:b6:07:79:3b:87:0e:80:af:21:fe:3f:1d:3a:30:40:d7:c6:
         dc:a1:cc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:58:02 2026 by rpki-client