Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File:                     U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier:          7xZz4KlC8UkZNRoR34+31mJiiphzit+zkZlhB5b/v4Y=
Subject key identifier:   71:4A:A4:70:B6:14:F5:A2:6D:73:89:5D:9D:F2:29:D4:7A:16:38:BF
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer:       /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial:       019F91A3C1F02E778449B34BF48DBCF031B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number:          19AF
Signing time:             Fri 24 Jul 2026 01:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:56 +0000
Files and hashes:         1: NnLh8TC21_I7aIxYqBVOxMDsYn8.roa (hash: abZc4byKeRvjtv7jM3QRQhlxOH/1CVxvgCdUA7yEv1Y=)
                          2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: 3sXA2doOVI2TLFaO9n5nTWuBpa2CtsRmMxXoJexlZrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:c1:f0:2e:77:84:49:b3:4b:f4:8d:bc:f0:31:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
        Validity
            Not Before: Jul 24 01:00:56 2026 GMT
            Not After : Jul 25 01:00:56 2026 GMT
        Subject: CN=714aa470b614f5a26d73895d9df229d47a1638bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c7:df:76:68:fb:f2:4b:e9:62:cf:06:a1:e9:
                    b6:f3:8e:2b:6b:b1:d6:a6:12:70:c6:20:ac:5b:a7:
                    d2:12:f8:34:ca:7d:f6:9a:52:21:59:30:1d:85:62:
                    39:31:e4:9e:d6:49:9b:b2:a4:7b:f3:b0:3f:71:26:
                    37:92:5a:2c:0e:ef:51:47:2c:55:1a:03:d3:09:43:
                    e8:dc:59:a0:f0:7c:8e:fc:72:48:86:aa:7a:ae:71:
                    e3:f5:56:1a:50:fd:1f:39:c3:6a:e8:52:8c:28:ca:
                    ca:5b:87:25:f5:83:74:fd:e7:23:f7:ae:88:25:5d:
                    c8:96:82:d7:2a:34:7f:ac:17:a1:9b:72:2c:8a:fd:
                    30:f7:12:d6:34:b6:29:3d:70:c1:ce:59:40:c3:44:
                    da:e2:94:c9:cc:67:bf:5f:68:61:81:8e:de:10:ce:
                    b9:4d:48:db:f5:52:b9:8c:96:28:fa:4e:17:63:ad:
                    d0:01:c1:9f:e9:a5:e0:aa:a2:09:02:d8:9e:5a:c0:
                    1a:8c:f3:eb:77:a6:a5:29:75:45:e1:be:76:3c:e0:
                    d9:f2:35:40:a2:af:e4:77:9c:3f:2c:a9:a6:fd:d1:
                    0e:8d:e3:ee:72:47:1b:51:9c:67:76:92:dc:8d:a4:
                    2f:4e:6c:65:ad:e1:d7:9e:03:24:0b:fc:86:91:9b:
                    50:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4A:A4:70:B6:14:F5:A2:6D:73:89:5D:9D:F2:29:D4:7A:16:38:BF
            X509v3 Authority Key Identifier:
                keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:3f:b5:bc:30:5b:de:45:b7:ab:86:e4:91:45:bf:09:40:c4:
         0a:b2:23:e4:4a:6d:f0:95:b0:f9:1c:c1:a9:97:6f:07:5d:b5:
         8a:6d:0f:cd:ca:e0:5a:d2:c2:dc:fe:7b:f9:9c:78:da:c3:e2:
         74:04:89:9c:6f:e8:ee:77:38:1a:04:59:48:f3:f8:8e:ed:de:
         59:de:33:e3:04:15:6b:92:59:3a:f7:50:76:08:87:e6:19:9e:
         0a:6b:bb:a2:b3:b2:01:ea:e1:52:5d:12:57:a0:e8:42:39:09:
         46:ab:51:55:90:9a:c4:cf:6f:bb:3b:d8:29:18:b8:de:55:9a:
         29:1d:47:cf:d6:fd:0d:14:47:f6:00:eb:1e:6d:19:7b:b7:6f:
         2f:fa:39:09:d1:ae:9e:81:af:9d:bb:cc:e7:60:b1:71:d0:a7:
         ad:aa:49:2b:7a:67:eb:da:35:3f:97:aa:79:69:af:37:72:50:
         e0:cc:e5:23:6d:a0:11:87:c2:b4:87:c0:93:0f:c7:3f:a9:00:
         ff:7d:04:dd:39:ad:9e:d4:ed:d9:d0:a8:81:b4:8a:85:fc:31:
         3e:9b:6d:8f:be:4e:74:b7:07:38:27:d7:a4:a3:85:56:7b:53:
         b7:38:e3:71:5f:2b:8d:12:e4:06:11:56:00:98:57:5e:57:0c:
         c1:eb:99:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:15:24 2026 by rpki-client