Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File:                     Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier:          qYhRs4mOcpA7iBdI5hYX+J1MfbdaP8oIaieZvsEzjQM=
Subject key identifier:   EE:07:2B:E9:DB:31:33:A3:67:D0:21:8B:58:2D:52:D9:38:A5:99:ED
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer:       /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial:       019F91A42AB6B28294E16F5815401ADF3ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 01:01:22 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:22 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:22 +0000
Files and hashes:         1: 3B1_EUp7x7N1kARo16GQ1nuj9Is.roa (hash: aSJvJUBxwg2ZnRrO3zv+qRAM43Ox0HLnky8GrLpOBIA=)
                          2: NUUQjDeFWzC4FPVGBmAx-z5bJ0E.roa (hash: wnbRGeNLfXYztX1J3cZAfrSN12bQBDpo4cnmGFyaLCs=)
                          3: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: EV8M7HI8E6pz85t81sI2r/OWJ9MPO0Q0gdfSfvsx8lI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:2a:b6:b2:82:94:e1:6f:58:15:40:1a:df:3e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
        Validity
            Not Before: Jul 24 01:01:22 2026 GMT
            Not After : Jul 25 01:01:22 2026 GMT
        Subject: CN=ee072be9db3133a367d0218b582d52d938a599ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:4d:b1:78:2e:c5:c5:e4:53:6f:88:fb:d0:
                    a7:07:7e:2c:ce:cd:eb:b0:9a:31:bc:2a:1e:87:1c:
                    0e:33:00:a2:7f:12:1e:fe:af:12:c9:a3:36:d3:8f:
                    bc:8e:ae:af:87:6e:fc:31:96:f1:f5:92:30:df:03:
                    fc:9c:9a:a0:3a:f4:b7:22:61:cb:ce:77:a2:3f:83:
                    bf:b3:d0:43:d6:54:d9:40:23:1a:7e:23:9d:8d:7a:
                    f3:55:3b:e9:5a:13:07:cf:3f:2c:9d:5d:c1:b7:b3:
                    6c:83:08:b9:6d:89:d0:fc:83:0e:78:1f:be:c2:b3:
                    80:69:40:bc:70:1f:fd:96:1d:1d:e2:03:81:7a:31:
                    97:24:f7:fe:d8:1f:d8:4a:bd:d5:52:21:68:c3:cd:
                    32:e2:c0:12:d5:b5:0f:89:e8:ca:87:49:89:1d:79:
                    25:ca:9e:0b:4a:f3:ae:d8:dc:13:c3:37:d8:8e:17:
                    26:ad:06:d7:c8:62:3f:a0:07:e5:d6:04:c5:90:fe:
                    1a:84:73:06:73:3d:51:f3:6a:e4:60:9c:31:97:e9:
                    79:d3:d8:9e:35:1d:00:f8:b6:a7:f3:d5:00:c9:ac:
                    c0:9b:1a:0d:73:4e:42:2b:f7:bc:bc:80:00:f3:57:
                    c3:a6:c6:b4:f7:e3:00:0e:3b:1f:cc:ef:14:ff:94:
                    81:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:07:2B:E9:DB:31:33:A3:67:D0:21:8B:58:2D:52:D9:38:A5:99:ED
            X509v3 Authority Key Identifier:
                keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:29:b0:63:93:cc:d9:83:44:96:c7:66:ee:32:ce:25:0d:c6:
         3b:25:44:6f:5b:97:a3:a4:28:ca:50:5a:33:d8:ce:93:88:8b:
         c4:7f:cd:92:f1:23:17:2e:ba:e4:03:b5:05:5c:33:3d:bd:80:
         ae:c6:ec:50:22:75:6c:72:b1:ea:88:67:d2:46:87:50:3f:c7:
         a6:33:9d:d1:ff:4c:ff:a9:ff:8f:bf:5f:9f:05:bc:e5:66:22:
         3c:81:fb:6f:10:99:a7:18:6d:0a:0b:6d:dd:f1:ef:a2:ff:1e:
         77:59:75:32:c0:e0:cf:a2:69:aa:8d:19:aa:50:5a:f0:49:11:
         14:a0:8b:df:c5:9b:41:fa:e4:77:80:b8:04:96:84:25:e3:98:
         fa:a6:1f:d2:91:28:70:e6:ed:67:32:98:16:7b:b3:37:42:1a:
         11:4d:4d:73:f7:35:d3:d1:b2:08:64:39:d1:f8:ce:ae:ab:38:
         d3:52:62:76:8d:a8:42:47:36:51:6c:1a:78:a7:fc:db:65:a9:
         d5:67:25:25:7f:cd:be:95:d0:d1:df:ca:ef:a7:61:5e:56:67:
         a0:9b:fc:77:76:f2:d6:2b:a5:d8:67:3d:17:b2:68:0b:be:95:
         29:81:ad:6d:7a:bb:37:47:93:d1:b7:06:15:04:70:55:53:3f:
         b8:98:8f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:41 2026 by rpki-client