Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
File:                     RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json)
Hash identifier:          Xa4307WoY5Zbw9fDFL7K1KGpBz0zLOlBEgRHv2cqt5o=
Subject key identifier:   C3:73:A6:EC:F4:95:FA:CB:A2:8A:79:2E:9A:B2:12:8E:A6:9E:4A:46
Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
Certificate issuer:       /CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Certificate serial:       019F90FF12D710605416E49A62972D173AE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
Manifest number:          0286
Signing time:             Thu 23 Jul 2026 22:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:03 +0000
Files and hashes:         1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: z+OPNpAmbk3z6UM9m7LvggBSn/JdcizR1P6XpVjUjA4=)
                          2: UgzCF8ypTqD3-oEvIopeK7eKv4Y.roa (hash: DlTUI/1IFNUCoEUiGr69G6Nmq4+NJdFbzY4oNjUHVuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:12:d7:10:60:54:16:e4:9a:62:97:2d:17:3a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390
        Validity
            Not Before: Jul 23 22:01:03 2026 GMT
            Not After : Jul 24 22:01:03 2026 GMT
        Subject: CN=c373a6ecf495facba28a792e9ab2128ea69e4a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:75:97:aa:47:97:8e:47:7e:68:84:c6:39:
                    79:d9:cf:5e:15:22:f9:1c:04:0d:dc:f2:ed:49:ac:
                    2a:14:f8:27:f3:a1:0e:b7:74:a1:93:89:cb:71:f4:
                    54:1f:69:41:ee:22:fd:71:42:35:bb:73:a3:e3:8e:
                    70:cd:45:74:d0:a7:7e:11:37:0e:10:15:67:4b:ab:
                    96:e6:24:24:e4:4e:6c:7e:50:5b:1d:21:2f:4e:a0:
                    88:57:7f:da:1c:92:9f:02:5c:45:c3:84:6f:6a:cb:
                    c2:b6:b6:ad:d4:16:6f:49:91:6f:a0:9a:52:00:ac:
                    10:95:5a:9a:e1:0f:72:2e:45:1a:93:c3:8c:ec:da:
                    ca:8c:42:48:77:f8:80:40:99:78:68:20:83:46:93:
                    bf:df:da:61:18:f1:2d:62:d2:0e:58:b9:5a:52:6d:
                    86:a6:02:e8:44:b7:d9:63:af:4b:f0:29:08:12:ad:
                    64:7b:cc:6b:79:1f:a7:25:25:d3:cd:ac:d2:9b:b1:
                    6c:70:2a:f2:b2:ac:60:07:76:90:a9:75:a3:d8:d1:
                    b9:9b:90:5a:db:fa:ee:ba:4f:3e:8c:f2:aa:79:9f:
                    59:b5:f5:a5:ac:2e:51:40:07:ab:ed:04:9e:b5:89:
                    2c:02:cb:be:a3:69:fe:be:59:33:00:e6:c7:e3:96:
                    02:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:73:A6:EC:F4:95:FA:CB:A2:8A:79:2E:9A:B2:12:8E:A6:9E:4A:46
            X509v3 Authority Key Identifier:
                keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2f:1f:e8:af:d6:a5:9f:2d:79:9e:9f:62:99:5f:e7:50:c4:
         1a:9a:c9:df:b2:65:8e:c5:ec:37:fd:d6:60:a2:35:04:3b:07:
         dd:0d:07:0c:b0:5f:b1:d8:e2:ac:67:92:32:ba:cd:08:fc:8a:
         8f:e7:31:1c:1a:d0:48:77:5f:af:6a:fd:15:e9:6e:bf:e4:ce:
         b1:47:2e:fe:1c:96:74:73:05:99:47:8f:1b:2d:25:84:76:3d:
         8c:da:b3:4e:ab:c8:0a:e8:95:8f:6e:5e:f3:19:60:24:19:9a:
         dc:dc:97:17:84:c7:72:17:1c:05:d8:af:4f:7b:56:38:f9:00:
         c1:e7:e5:8e:34:01:bb:82:99:fa:63:75:33:c5:a9:1e:2a:3d:
         2a:4b:5a:a1:31:57:36:12:3f:d8:42:3a:53:8c:f4:ba:59:c0:
         ad:cf:31:d1:d1:7d:d4:6a:1f:d9:41:de:7a:dd:09:6a:65:df:
         59:4a:2a:59:ce:36:e5:3d:b3:e3:20:39:9d:50:5e:97:95:a6:
         e8:01:6f:53:b2:90:51:69:a9:62:51:80:3c:d7:f8:53:6d:62:
         50:23:84:25:85:e1:ce:87:f7:08:c4:a2:52:2d:de:07:94:d8:
         4e:48:66:17:7b:3f:74:f9:74:eb:29:f8:22:44:81:df:38:e4:
         83:2d:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:00 2026 by rpki-client