Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File:                     fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier:          blu1wiLFEmmJ80xtJAiNVsTxv6W3qrP6Yu94zSf/LUw=
Subject key identifier:   61:49:C5:3E:91:75:09:B9:62:3F:6A:80:58:77:4C:49:38:94:91:74
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer:       /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial:       019F92ED4DED6732670090D2F627D47B93B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number:          19C4
Signing time:             Fri 24 Jul 2026 07:00:53 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:53 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:53 +0000
Files and hashes:         1: Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa (hash: 6wCn2sStp7lMoBisyxoOVg7CQrVyP+8JEmZ6TdkNK6k=)
                          2: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: upnjkD6XqsJz6lrX/YNLA1VsQi9KrOoC8RnLRziTjA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:4d:ed:67:32:67:00:90:d2:f6:27:d4:7b:93:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
        Validity
            Not Before: Jul 24 07:00:53 2026 GMT
            Not After : Jul 25 07:00:53 2026 GMT
        Subject: CN=6149c53e917509b9623f6a8058774c4938949174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:05:c9:39:38:b1:f5:6c:d3:9d:4d:6b:0d:
                    72:b6:94:63:84:d6:37:55:6d:55:49:67:4d:9f:38:
                    4e:e7:45:6e:6c:88:0e:49:95:16:16:d7:f6:3f:70:
                    0f:96:99:81:fa:84:9c:da:e0:14:97:0f:df:60:d1:
                    dd:d5:a8:a4:3a:b7:dd:93:1c:e4:3c:db:d8:8b:28:
                    fa:85:0c:17:5e:23:90:ed:05:b9:26:8f:0f:bb:0e:
                    38:14:f1:15:c4:e7:1a:a1:75:af:02:8a:8e:95:dd:
                    a7:a5:b5:b3:9a:be:90:85:3f:bd:b4:b0:c7:0a:c0:
                    47:37:cc:da:f2:8e:44:fd:a4:6e:8c:be:66:8c:54:
                    9a:6f:02:47:80:0e:9a:a0:63:f9:94:70:27:09:86:
                    43:9b:f8:39:fa:e1:19:64:7a:41:c1:9f:a9:bc:81:
                    04:7c:51:77:5b:ac:e9:be:09:2f:bb:6c:5c:e0:78:
                    e6:20:06:fc:9c:af:28:ef:94:2f:88:44:92:00:b1:
                    ce:d0:2a:a8:4f:0a:ba:48:36:91:51:1b:31:82:91:
                    d6:59:3a:fa:05:93:f9:90:6a:87:a1:9c:52:d5:ac:
                    7c:8e:f0:c6:78:01:50:51:dc:db:3c:ec:e3:37:d5:
                    01:ab:c6:a4:48:92:c9:79:c8:e3:44:ff:5c:17:9b:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:49:C5:3E:91:75:09:B9:62:3F:6A:80:58:77:4C:49:38:94:91:74
            X509v3 Authority Key Identifier:
                keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c0:75:c5:cf:1c:db:18:6d:38:16:a2:70:65:c6:9c:d8:d8:
         49:90:a4:42:da:a5:78:8e:db:61:87:eb:75:e9:cd:78:39:07:
         07:33:71:92:c7:ae:37:26:f0:41:33:c3:57:24:97:cc:69:2c:
         d2:04:f7:49:e1:c5:a2:01:4c:f0:1d:3d:b4:bc:c4:3c:e8:b3:
         10:91:39:df:f0:7e:c7:ea:5b:e2:00:86:aa:d0:32:86:f1:6d:
         f8:f6:26:ef:5b:ab:9e:2e:80:76:fd:46:89:4d:14:31:ac:c5:
         f1:cd:62:c0:6b:31:15:6b:72:d5:db:30:cc:30:6e:37:c8:63:
         4c:e1:e4:6f:28:30:d4:d6:10:7a:b1:c7:3e:ec:ce:c7:54:13:
         65:1a:6d:cc:b2:87:6a:8d:de:ee:0b:08:c2:5c:aa:09:2e:f6:
         65:21:78:16:7b:db:f6:f9:61:16:97:f4:2f:fa:07:35:90:ff:
         ca:09:68:e3:ac:0d:30:99:6d:90:a3:1b:ad:fd:15:2f:c4:a4:
         47:e1:8a:c0:23:f7:29:6e:89:f1:6f:44:68:f2:0d:c6:89:0c:
         2f:73:ce:1f:77:c6:cd:9d:6a:c1:4c:f0:97:cd:3a:ef:c0:d4:
         86:69:62:cd:5c:6c:0d:ba:a1:73:c7:46:bc:35:fe:32:c0:a4:
         1a:b7:93:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:16 2026 by rpki-client