Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
File:                     tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json)
Hash identifier:          RvefJw0QqutNWCD7KBvL+ncWKqNfsb/qpC93HFjJo3w=
Subject key identifier:   5C:A2:7C:D8:42:BD:A1:9A:5B:CD:C5:53:A3:1A:13:99:71:19:7E:CF
Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
Certificate issuer:       /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Certificate serial:       019F9091174FBBF06C367B5820A38314F937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 20:00:55 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:55 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:55 +0000
Files and hashes:         1: 7S2yeHR4bFiFyxZbbPP_sYHQp2w.roa (hash: VNevD8nKtYDVh3U0iiaGr0TdZvD9DviTbw2gv5/lGDA=)
                          2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: dMKyb5gkMsARApDoftv3aTj392Amd/bb/nVLJna6KoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:17:4f:bb:f0:6c:36:7b:58:20:a3:83:14:f9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
        Validity
            Not Before: Jul 23 20:00:55 2026 GMT
            Not After : Jul 24 20:00:55 2026 GMT
        Subject: CN=5ca27cd842bda19a5bcdc553a31a139971197ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:dc:e2:f9:f0:84:18:01:a8:55:7a:d2:dd:
                    fe:52:55:b4:c6:df:c8:4d:77:97:73:43:fb:8d:7f:
                    a5:8d:9e:3e:1e:b7:70:77:b5:75:d5:12:ca:96:52:
                    3a:15:e4:b0:a0:24:00:dc:ff:9b:2a:5a:57:8a:59:
                    07:45:f1:5c:42:0d:9d:05:37:9e:37:96:5e:40:bc:
                    eb:14:d2:5c:dd:e2:47:49:e3:de:eb:f7:29:04:d3:
                    db:0f:9a:fb:57:c4:0f:eb:29:c6:3a:5b:5e:6d:4e:
                    53:74:db:7d:c5:4b:9c:cd:e7:60:6e:fc:89:c5:6f:
                    74:de:fd:0f:16:62:3b:6a:3c:f8:55:49:1d:8b:bd:
                    5b:ed:8f:1e:9a:06:46:a1:4d:2f:50:e7:6b:a1:c5:
                    1d:e8:0b:57:04:51:51:3e:20:65:0a:4f:88:16:96:
                    49:2a:ff:42:93:b5:aa:e7:fc:3c:68:a3:68:d0:15:
                    b1:64:8b:6f:29:32:61:74:27:25:1d:22:ec:a2:2a:
                    c3:3d:26:59:c3:1f:ac:2a:35:cb:fa:47:82:9f:0b:
                    52:a6:7f:ba:94:60:6d:6b:a1:9b:59:89:65:05:db:
                    d9:ba:5b:01:cb:b2:f7:37:cc:02:71:11:46:62:00:
                    da:2b:d3:47:3e:35:af:ab:46:30:b8:29:80:1d:21:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A2:7C:D8:42:BD:A1:9A:5B:CD:C5:53:A3:1A:13:99:71:19:7E:CF
            X509v3 Authority Key Identifier:
                keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:63:14:97:87:6e:81:95:0c:35:d3:41:20:2c:79:02:35:4d:
         7c:e4:76:43:9a:1c:d2:27:35:94:24:dd:3c:8e:f2:32:cd:c7:
         2b:e4:51:2c:3c:ff:d6:9b:67:f0:7a:6d:df:32:fd:31:85:07:
         d7:b5:3d:c4:77:d4:ed:cc:9f:ab:aa:88:77:6c:01:10:46:f1:
         57:1a:6e:2a:6b:d6:5c:15:08:4c:7f:f7:e4:94:9f:8e:de:7f:
         0f:27:20:af:0e:41:d1:70:bd:ed:fd:fc:a2:db:58:79:43:a0:
         d1:c6:62:b7:93:2f:55:72:36:77:76:d4:e3:6a:2c:0b:18:7f:
         4f:67:85:ea:df:87:86:1b:75:f5:32:b2:43:d9:e8:a1:ed:c4:
         8f:d5:74:a2:3b:2e:c4:8e:e9:9a:f8:21:a5:5d:7f:9d:df:1c:
         57:25:7d:06:a9:3c:d0:34:2c:16:e9:b9:d1:a4:c6:a9:82:60:
         ed:79:27:36:59:7a:37:07:f9:9c:50:a2:ba:4b:28:ea:e6:99:
         cf:9c:42:69:fc:95:cd:69:04:40:e4:fa:1e:16:92:ff:8a:60:
         d6:05:6d:1c:9b:c8:8b:d8:90:3c:b2:1c:d1:b4:9b:a0:76:02:
         32:54:e2:f4:af:e2:52:3a:5d:89:4e:06:ae:6e:82:39:27:6e:
         1c:d0:26:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:00 2026 by rpki-client