Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
File:                     0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json)
Hash identifier:          qD5NtDu+4vTqijFgGOkJqR78itWnvxrNyrlrDJ3/Z64=
Subject key identifier:   92:6C:B4:A0:9B:40:4F:11:AC:C6:8A:2F:D8:3E:43:05:F8:5D:96:20
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Certificate issuer:       /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial:       019F8FEC3C38902BF4E0D1830A806B87E369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 17:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:51 +0000
Files and hashes:         1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: Y7na1ceDr3iYmxq2JDAfAs5jwOJniY5dP8EOAebysV0=)
                          2: gYB58AsOtwXPnPMNlPV8Y_Ufqsg.roa (hash: WyEGcdxX1fE4gxlSc9tIw2aO8N6fipj9ySbKblEWZfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:3c:38:90:2b:f4:e0:d1:83:0a:80:6b:87:e3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
        Validity
            Not Before: Jul 23 17:00:51 2026 GMT
            Not After : Jul 24 17:00:51 2026 GMT
        Subject: CN=926cb4a09b404f11acc68a2fd83e4305f85d9620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:fb:84:1f:1c:de:65:f1:b4:e7:ad:e8:82:
                    91:a7:0c:ec:0a:07:39:0d:ae:54:2b:9f:b5:62:d6:
                    21:d4:2d:6d:55:fd:5c:51:14:11:f0:fd:c6:b5:47:
                    6b:8b:8f:6e:a4:ba:fe:c7:2c:31:d8:7a:f5:4e:42:
                    e0:cf:1b:a2:36:30:0d:02:61:14:03:35:51:61:bc:
                    06:8b:b1:fe:9f:2b:b9:ea:2c:59:1d:c8:ac:bb:69:
                    79:64:3c:65:c4:b3:2f:34:27:36:43:59:8a:79:ec:
                    e0:27:c6:ee:9b:6f:4b:9d:0d:dd:24:ff:8b:a7:1b:
                    d6:d7:e8:74:86:c6:42:df:26:38:88:9d:eb:7b:95:
                    a1:68:47:cf:73:29:f0:d7:90:e8:89:90:24:ec:8a:
                    e3:ce:89:4b:16:94:00:1f:97:8e:73:9f:14:96:b6:
                    12:01:29:c0:69:e7:88:6b:37:91:0a:99:e7:e9:31:
                    63:cb:2f:2f:71:32:f0:d3:c1:e6:9f:8d:10:14:9d:
                    ea:96:22:44:67:90:60:0a:c6:eb:68:98:a3:5a:a6:
                    05:d8:05:3d:12:72:bc:96:e7:6a:de:b9:d3:b3:f4:
                    09:0a:1b:ee:8e:69:fd:eb:ce:39:42:9b:f3:58:68:
                    bd:60:01:dc:c1:7c:c4:c7:6a:8f:de:37:62:e6:fd:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6C:B4:A0:9B:40:4F:11:AC:C6:8A:2F:D8:3E:43:05:F8:5D:96:20
            X509v3 Authority Key Identifier:
                keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:4b:34:15:2c:16:84:fb:39:73:e8:c2:4b:60:09:4c:5b:
         47:09:78:f0:92:74:26:cc:27:a3:bf:e5:1b:d2:18:4d:ec:9e:
         18:eb:4f:c9:d1:1a:b2:9b:3a:48:eb:2f:1e:cc:a1:c5:73:29:
         0e:95:af:4e:6b:d3:94:c2:f2:f4:b3:d0:75:33:2b:67:d8:53:
         dc:f1:96:b2:0e:07:31:c6:51:2f:c0:96:11:10:8b:a4:bf:04:
         53:15:db:4a:ff:b7:82:48:ab:0e:d8:13:8a:27:f2:c1:e6:7e:
         38:49:8d:6d:16:32:dc:ac:0e:61:99:ac:30:1c:41:04:dd:07:
         96:be:81:8f:45:e6:36:92:5c:36:07:c7:cd:22:2b:d6:94:00:
         ff:19:33:e4:47:96:d1:e1:0a:89:ce:35:11:1b:c4:36:b0:cf:
         4f:8c:64:b3:f5:cd:e8:ea:50:cd:38:e7:10:b3:7d:17:0c:57:
         cd:7c:3b:a4:09:a6:83:79:e8:57:f3:56:0e:c2:b8:98:55:c3:
         c5:07:9f:95:00:06:6d:88:db:57:98:ed:9e:ca:03:51:68:30:
         4c:f4:60:2a:35:4e:25:44:53:13:35:d3:e1:a6:2b:2e:25:7c:
         49:0c:cb:a0:17:63:4c:74:2a:13:a8:40:1f:26:4f:e0:45:9b:
         67:49:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:02 2026 by rpki-client