Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File:                     CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier:          AzHhwA7B6U3nEx3ErO/NtTrU9j+C4DleYOtt9aFM/is=
Subject key identifier:   FA:D3:B0:56:1C:9A:BE:26:98:78:75:55:68:AF:FC:62:D1:45:08:2F
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer:       /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial:       019F91DA6D9BCFD530CED52939DA64FE418D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number:          0422
Signing time:             Fri 24 Jul 2026 02:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:38 +0000
Files and hashes:         1: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: kXxzRc/EtupIQcYTLE/purrJyZ6DYh9tCSEpZRqResQ=)
                          2: W-m52T0Z08ZrHduyI7qeLJtkavg.roa (hash: 2uTxxd+gJUWVWBJ1knmrNyKxA15WrS87ku3rDDp8keE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:6d:9b:cf:d5:30:ce:d5:29:39:da:64:fe:41:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
        Validity
            Not Before: Jul 24 02:00:38 2026 GMT
            Not After : Jul 25 02:00:38 2026 GMT
        Subject: CN=fad3b0561c9abe269878755568affc62d145082f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:25:5d:ab:1f:92:25:fa:29:65:e2:00:8a:
                    f5:bd:15:71:3d:87:04:e3:97:b9:cf:e0:91:5e:05:
                    01:74:1b:a5:b6:79:d8:d1:9c:7f:42:6d:29:36:9e:
                    f2:20:9c:1b:cd:ef:65:61:e3:ff:b2:40:a8:55:4a:
                    89:95:c7:f5:2f:8d:88:70:dc:f4:e3:36:0f:27:28:
                    9a:12:30:d5:ad:8a:51:ca:db:73:fc:b2:33:6d:db:
                    ab:2b:fb:52:e9:ef:d5:62:41:42:cd:83:af:64:45:
                    e0:56:e0:c2:d4:bd:d9:7a:60:59:f0:53:a2:34:78:
                    1a:17:b0:51:dc:55:3f:74:ce:b2:72:48:d9:61:e0:
                    f9:8d:c8:cb:4f:d7:87:f4:c9:df:fa:08:9f:6e:0f:
                    d9:8f:09:5d:07:a0:a4:10:b2:22:67:86:00:bd:e0:
                    d2:6b:da:16:5d:ad:c3:5c:0d:49:e5:cb:ba:06:ee:
                    e4:90:83:cc:0a:87:f7:ff:41:3b:8c:60:61:60:3b:
                    60:7a:00:0d:3d:82:16:97:58:18:74:5f:01:26:a9:
                    45:5f:66:82:4f:90:80:28:fc:57:46:06:c2:26:15:
                    b8:0a:fc:97:b1:52:d3:a1:33:ed:8f:d9:c3:ce:a7:
                    c0:3a:34:ce:b0:57:54:67:8e:f2:df:40:c2:6d:41:
                    17:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D3:B0:56:1C:9A:BE:26:98:78:75:55:68:AF:FC:62:D1:45:08:2F
            X509v3 Authority Key Identifier:
                keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:24:45:a1:9e:f4:8a:02:4e:66:9e:9a:8a:d0:85:92:25:07:
         ff:25:c6:6d:e6:69:fb:f1:35:15:56:59:50:24:f2:00:0e:f1:
         7f:a5:a8:3a:44:3a:2f:38:cf:ca:32:62:aa:6d:2e:29:8c:8f:
         85:e7:48:0d:a4:d8:e6:f2:36:24:73:f4:2d:64:8d:81:3e:71:
         ee:a7:f5:c2:26:69:4e:62:46:d4:ec:ed:33:6a:58:7a:c5:96:
         2a:3e:0b:f6:a7:7e:3f:b1:d0:53:82:31:f2:3e:61:7e:c2:09:
         ec:30:f3:6e:63:18:e7:15:2d:e1:60:59:6d:7c:e2:1f:8f:41:
         de:fa:45:e4:0e:09:62:c1:82:06:70:09:1c:eb:84:2a:fd:db:
         50:32:2d:c4:a9:54:71:d6:db:8b:a3:f9:77:33:25:c1:5a:ad:
         f8:32:56:2f:48:e0:5d:e3:83:ca:f3:7a:94:6e:05:4a:98:7c:
         4b:8c:dd:18:17:e7:54:75:a6:2d:7b:30:ba:d5:80:93:46:82:
         0d:70:f8:03:f4:d0:c2:91:f0:dc:4a:a4:45:15:f5:e0:50:25:
         a1:d4:ec:bb:10:e5:7b:f9:5b:35:7b:ad:30:e2:7d:b6:78:47:
         d4:d9:0a:51:4f:43:be:47:60:4e:35:04:67:ea:6b:32:eb:90:
         74:a4:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:55 2026 by rpki-client