Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File:                     mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier:          wa/qnZd2KY44ttKuT7LaBKlnaBCj3xokbdkDic91m0E=
Subject key identifier:   7B:14:E1:59:E3:B2:CE:8B:AA:DF:F1:86:DE:0F:D0:E4:F7:36:3E:22
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer:       /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial:       019F9135FBD748C9AC2A5E989BC1FFC55C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number:          093E
Signing time:             Thu 23 Jul 2026 23:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 23:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 23:01:01 +0000
Files and hashes:         1: aVRqpMHpdie8kn2Zv8LidnFaG0U.roa (hash: WAT/5tpdgHMh60hpQbSEIRGs2arCro1xYD6u1qjuT7I=)
                          2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: xvThT4dagNi88YblmSsaGa+x4hSVJW/AId1CE80TwyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:fb:d7:48:c9:ac:2a:5e:98:9b:c1:ff:c5:5c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
        Validity
            Not Before: Jul 23 23:01:01 2026 GMT
            Not After : Jul 24 23:01:01 2026 GMT
        Subject: CN=7b14e159e3b2ce8baadff186de0fd0e4f7363e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:2d:4d:bb:92:fc:88:f3:e7:57:7b:3e:a9:
                    da:ac:96:bb:82:91:48:6b:6f:98:ad:54:df:d8:12:
                    62:68:a8:a6:1c:ad:2f:92:0b:be:16:8b:1a:0a:75:
                    be:6a:d7:99:89:a1:8b:27:60:7e:21:71:15:b1:e1:
                    1a:c5:d9:37:d8:f6:90:cc:85:48:a1:84:91:60:dc:
                    9d:08:16:27:73:3d:bd:4d:f3:62:f3:56:eb:51:f9:
                    ea:ba:08:3a:9a:86:d4:67:e1:0c:5a:01:85:6f:81:
                    5f:ec:50:13:59:20:ac:f5:92:6c:d6:3d:85:14:8b:
                    d0:80:48:1e:d1:8b:1f:a9:28:6c:12:46:69:2e:0b:
                    6d:db:8a:c2:5d:04:df:73:15:6e:15:82:c1:3a:cd:
                    fd:c0:ec:ce:cd:7b:50:5d:1a:0a:14:29:bf:0a:40:
                    55:2a:e8:b8:11:41:03:f1:a2:17:57:5a:cb:88:97:
                    23:0b:35:87:a6:0e:5b:99:1f:bc:d2:02:df:1d:d6:
                    d7:dc:18:b2:cc:dd:44:4d:a0:0e:24:bc:2b:66:9e:
                    5e:5e:c7:dd:79:c8:ad:b1:1c:b6:7f:4b:38:eb:01:
                    92:e7:2a:7a:ef:c7:55:14:d8:5f:c9:8e:91:64:bf:
                    4e:f6:76:48:53:19:be:bb:ca:45:86:99:70:88:47:
                    f2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:14:E1:59:E3:B2:CE:8B:AA:DF:F1:86:DE:0F:D0:E4:F7:36:3E:22
            X509v3 Authority Key Identifier:
                keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:bf:f2:59:4a:84:9b:40:7f:a7:c6:91:99:be:85:80:b7:98:
         46:eb:ca:b7:22:48:a3:4f:64:52:1e:5e:98:9e:54:c3:4d:d8:
         80:75:96:04:0c:a8:90:f4:a8:9c:23:23:14:4a:b3:3a:97:0f:
         fa:5b:26:b7:3a:c9:b5:8d:07:c2:de:ad:1d:18:88:4b:a5:cf:
         0c:4e:fc:bd:8f:f7:fc:41:b8:3e:b0:64:2c:9e:8f:9d:5d:5d:
         5c:e9:47:96:f1:b2:fd:68:76:f5:c0:3a:22:81:9e:d0:b8:2a:
         8a:bf:b0:8c:00:49:c9:10:42:e1:45:a0:db:f9:f0:f0:2b:d4:
         5e:0e:4b:ed:ba:c3:87:bc:d3:3f:64:72:ad:ba:cc:54:84:8e:
         3c:24:9b:b3:e7:45:b3:b5:2a:18:ab:c2:52:ec:c5:8e:d6:74:
         3c:2e:7d:e5:99:d6:3c:d7:55:b8:03:67:a3:c8:e1:db:0b:f8:
         f6:e8:73:d9:b9:3a:f1:57:12:b2:e4:fc:92:d1:b2:2a:50:17:
         82:0c:fd:ea:87:4d:4b:d1:f2:e1:e9:a9:bd:8b:1c:ec:2a:e1:
         93:4b:23:18:3a:dd:5a:24:bf:99:74:13:32:12:27:47:3f:a3:
         c8:6a:bc:ed:f6:20:f7:91:1c:45:79:49:0c:21:de:f2:e5:c2:
         0a:68:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:49 2026 by rpki-client