Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File:                     SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier:          +JUguuPNmBRRh0DJnWZQLnPup1/YT5qAgr9L6o9TmGc=
Subject key identifier:   18:88:05:DD:F6:71:5D:51:42:E4:D1:2F:FA:78:ED:BB:5F:5F:2F:53
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer:       /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial:       019F935BFBBEC273D4383A710C410514206E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number:          0E24
Signing time:             Fri 24 Jul 2026 09:01:46 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:46 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:46 +0000
Files and hashes:         1: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: fFxRoPOw/3LtkFW7IgXG3kzVskaWc2u/e7RjbRNYw7w=)
                          2: uHFpwLwkxJsSubwZokUf-p2XV20.roa (hash: IouP6vQ/ym8cKwDacGJPs32rG/gCfqCNIrj/brdFbOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:fb:be:c2:73:d4:38:3a:71:0c:41:05:14:20:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
        Validity
            Not Before: Jul 24 09:01:46 2026 GMT
            Not After : Jul 25 09:01:46 2026 GMT
        Subject: CN=188805ddf6715d5142e4d12ffa78edbb5f5f2f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:8f:cb:70:9c:d8:26:b2:5a:d9:0d:42:39:
                    d9:b6:f2:ec:1d:a6:2b:87:0d:3a:f1:a8:1e:5d:b7:
                    7b:3a:22:bf:ec:be:31:1e:e7:b2:2b:df:a1:a0:83:
                    33:92:31:a0:18:21:f1:4a:e9:a8:7a:85:cb:fa:e9:
                    b6:d2:dc:a8:fd:cc:8b:b5:8f:7b:5a:15:c5:63:db:
                    28:c6:2a:cb:ad:7c:9f:5e:d1:ad:2b:e6:61:21:95:
                    47:bd:f4:34:a4:49:8a:52:e5:a8:76:18:50:52:b0:
                    71:eb:7d:4a:6b:02:43:00:f2:7b:b5:d8:74:c4:1d:
                    b2:3a:00:75:39:06:1e:1e:5d:57:b6:51:87:74:9f:
                    6a:aa:30:dd:f8:a1:33:12:70:d9:7f:c3:df:48:40:
                    9c:34:9d:58:ea:a8:74:76:e9:9b:29:42:a8:b5:3d:
                    80:26:60:3b:ca:4c:1b:ef:8c:73:d8:90:be:24:95:
                    76:c2:7d:de:c1:78:ba:af:ee:58:0a:8f:70:69:1d:
                    2a:cc:5e:01:1b:97:a5:ac:55:d9:33:1f:f5:54:4b:
                    19:10:1d:e6:1a:b3:c9:19:24:ef:2a:b4:78:35:01:
                    99:f8:f9:6f:3e:9e:32:a6:c5:39:91:86:b6:a3:f4:
                    01:c0:82:2d:1f:5a:3d:33:d0:74:c2:c7:26:d8:c5:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:88:05:DD:F6:71:5D:51:42:E4:D1:2F:FA:78:ED:BB:5F:5F:2F:53
            X509v3 Authority Key Identifier:
                keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4f:28:a9:7d:4a:22:df:ab:20:c7:5f:d4:24:12:1b:60:c3:
         0f:c6:66:89:1e:e7:19:d6:f1:bf:38:6a:97:56:54:25:79:24:
         42:4b:1f:5a:32:9f:c8:6f:89:2f:a7:7d:0a:85:50:0a:38:c0:
         3a:27:ff:0a:b6:50:78:e7:01:42:41:00:c2:6f:57:b5:a5:c0:
         ec:e1:e5:ee:d9:1e:11:2b:97:87:ae:46:bd:ca:5a:52:6c:80:
         6e:7f:1f:f8:c3:0a:80:e5:a5:79:94:24:51:8e:ee:78:11:21:
         2e:21:91:fd:92:c6:6a:7d:8d:7e:a4:1c:a4:f3:c2:c8:31:91:
         dc:cc:cb:9d:9e:ca:ea:b9:53:3e:4b:5a:2f:96:e7:c3:8a:3d:
         d7:78:0d:81:65:21:44:be:03:81:7d:e1:17:ac:6a:8c:29:76:
         23:2f:c1:7a:1d:69:80:8b:4e:8a:05:5c:cf:7f:a1:61:db:c1:
         f7:74:d3:3b:18:e9:f2:1f:dd:5c:bf:41:70:4e:84:5f:41:2f:
         3e:a2:61:29:9e:5f:73:eb:33:e4:b8:17:6f:7f:ec:77:f6:4a:
         22:9b:28:43:a9:8b:41:42:c2:e9:6a:de:9d:42:69:73:12:86:
         4e:8e:ce:f1:41:d4:a3:09:ed:25:ca:64:2f:a6:d9:32:ba:30:
         45:db:5c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:02 2026 by rpki-client