Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File:                     16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier:          pCJNx42+zW4eHYZu8gSvrWjR9LWK2FvSKZ6s8VX4pj8=
Subject key identifier:   C3:E9:92:C9:74:75:22:E1:0A:DF:C6:24:5B:9A:D3:69:9E:1B:AE:A8
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer:       /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial:       019F90FE5CF2F32652371BD133DC26BC9020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number:          19C3
Signing time:             Thu 23 Jul 2026 22:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:16 +0000
Files and hashes:         1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: Ij6mz28hv3A6zXSx6CjYc9eK004OJydGO+hteywFB2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:5c:f2:f3:26:52:37:1b:d1:33:dc:26:bc:90:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
        Validity
            Not Before: Jul 23 22:00:16 2026 GMT
            Not After : Jul 24 22:00:16 2026 GMT
        Subject: CN=c3e992c9747522e10adfc6245b9ad3699e1baea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:de:fe:bc:0c:ba:7d:f7:c3:11:4d:09:39:
                    09:00:71:0f:e8:bf:52:ed:6c:84:ff:23:46:3c:fc:
                    c0:78:71:d0:a9:60:63:34:51:08:50:0b:f4:cb:84:
                    be:df:b4:ac:9a:e9:85:80:c8:d5:94:7d:53:60:5b:
                    15:d1:0a:e8:a1:96:b6:b5:e5:55:d8:f8:cb:bf:d5:
                    ea:72:d2:4f:0d:d1:39:e4:55:3e:a0:18:86:4b:d0:
                    bc:7e:59:b0:9a:4b:3f:2d:2f:35:19:5b:a9:09:24:
                    5d:cc:df:c5:56:f7:0a:a9:32:41:70:a3:14:60:c4:
                    47:37:aa:70:d0:81:46:6f:28:6e:26:93:d9:af:81:
                    5d:96:72:a5:eb:55:bb:5f:7c:55:54:52:f8:4b:70:
                    78:c6:94:67:90:0a:57:86:18:dd:70:03:6f:25:5c:
                    9e:e4:c8:01:fc:e1:c6:54:64:6c:5a:45:5b:c2:1e:
                    52:7e:43:2b:b4:0f:3e:97:2d:cf:74:5e:27:66:31:
                    db:90:c4:3c:de:61:a1:d9:14:03:5b:1d:b2:ef:11:
                    1b:54:b5:65:c9:e8:8b:06:9a:70:4c:f1:9b:47:9f:
                    81:9d:38:c1:5c:02:0d:ed:cb:6c:d6:d9:67:02:39:
                    02:69:14:b4:e0:50:ba:9d:86:ae:68:20:e1:f7:3e:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E9:92:C9:74:75:22:E1:0A:DF:C6:24:5B:9A:D3:69:9E:1B:AE:A8
            X509v3 Authority Key Identifier:
                keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:73:dd:58:d4:3b:32:76:da:18:6d:4c:05:35:be:56:0c:
         7a:ac:06:77:06:3f:05:22:77:90:f5:66:51:8e:37:1d:53:1a:
         1c:65:b2:21:01:39:03:04:82:d4:da:5c:d4:a2:c0:6a:2f:d9:
         f8:29:10:fd:8d:90:1f:7f:6c:f1:84:cb:42:f7:eb:f0:ee:09:
         af:a6:d8:1b:11:b0:c9:19:ad:4f:5b:07:35:f6:09:42:18:71:
         0f:67:c3:c5:9e:1f:17:14:33:af:15:27:b2:ba:ae:1e:5e:ae:
         dc:3a:e8:42:bd:ec:07:80:80:65:5d:7a:d6:8e:3e:cd:fc:09:
         33:8b:a0:91:af:5b:9b:66:1e:03:56:03:fc:c1:59:26:47:9c:
         cb:b0:39:a8:f1:3a:3a:46:96:45:ff:b1:bc:ad:75:8c:7f:83:
         fa:e6:1d:dd:28:b1:33:c8:82:b1:d3:75:e7:0b:46:e8:7e:38:
         41:ff:ad:03:71:14:fe:04:65:7b:dd:4f:3c:b8:b0:36:8e:fa:
         26:cc:a7:b3:30:5a:9c:e0:e7:31:01:7f:91:42:d7:f9:72:6d:
         3a:df:56:96:69:67:16:a5:2b:66:5a:9b:b0:8f:e1:34:bc:fd:
         25:58:a9:3f:30:2a:4d:0c:4f:e9:5b:07:9c:cf:2f:53:4c:9b:
         bd:26:de:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:30 2026 by rpki-client