Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File:                     Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier:          +SQfn4Z1plzFd0txhIf0U+zLdbWnzOL5VlaK5Dl1VTI=
Subject key identifier:   5E:7D:86:7C:3A:D5:29:A8:FF:7E:C0:68:E2:CE:9C:3B:D4:F0:01:68
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer:       /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial:       019F916CD8A574D5923D0C7684C932047C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 00:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:57 +0000
Files and hashes:         1: 8EQw8scn945EBI3nr8f8oaXNu5k.roa (hash: Pc5eAGErA0CLNaCRm8m5LzZW6f6RQyf0pkKeLb9c9vc=)
                          2: PR33T4YXjO-tZqAZiQgeGwJ_Ca0.roa (hash: oPbU4Y8mKlBiefAqAJRo4HbwcVF9Ad3zQ3/NkA85j/Q=)
                          3: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: Stw6N9B6uYTBbSNlxpFpbQAG/Fc6KrPXZtA4JFF8ZMo=)
                          4: bgwpe1XPspHXw9-58fArYTkDdSE.roa (hash: sTc3tvfZWKn7t7t02X8dggAsRS/C7RCVtpCWcGveXWw=)
                          5: hcEiOVl0IV3IE4216hs1e5DZGR4.roa (hash: ZC5U5qcJYYjeF6N2SbLW1XrnWze6Jseft5QLvx76FJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:d8:a5:74:d5:92:3d:0c:76:84:c9:32:04:7c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
        Validity
            Not Before: Jul 24 00:00:57 2026 GMT
            Not After : Jul 25 00:00:57 2026 GMT
        Subject: CN=5e7d867c3ad529a8ff7ec068e2ce9c3bd4f00168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:59:e6:da:00:02:29:bf:14:11:37:b1:b6:
                    1a:fe:4d:88:3a:d1:96:a3:a7:88:96:4e:3c:f5:c1:
                    d1:0f:c0:ec:2d:a3:84:b9:df:d8:96:fc:eb:2f:06:
                    e9:73:4d:22:e7:ff:33:ee:07:e1:17:af:e6:ee:43:
                    96:02:76:fb:e4:35:ac:16:87:1e:67:95:74:e7:3a:
                    e6:e0:af:50:f0:26:20:f1:08:e9:b1:d8:b6:f2:f8:
                    dc:8e:41:ce:db:44:13:0c:e4:e8:cd:0e:fa:b2:b1:
                    36:15:cb:de:33:09:52:a9:dd:f9:3f:f8:6b:32:b1:
                    ed:f6:7d:53:be:0f:de:00:a6:59:fe:60:47:0f:8b:
                    e6:52:bc:7c:6b:f3:34:1e:61:33:89:08:dc:57:13:
                    2e:62:97:74:87:df:51:4a:dc:42:91:af:7e:3d:8d:
                    ee:9c:5e:88:04:ab:d7:8d:d2:94:8b:1b:8a:13:74:
                    ee:92:40:b3:ef:d8:93:63:b7:e6:61:1f:8e:fd:bf:
                    f0:ab:5a:cb:48:28:9f:73:39:54:60:e3:71:1b:c0:
                    fe:c0:42:2b:d1:31:e7:82:bf:ce:0d:29:5b:58:d3:
                    aa:37:ff:dc:86:e9:b3:88:8c:73:3a:50:9d:50:60:
                    ba:3b:6d:d5:14:7e:f7:af:e3:82:8a:12:8d:ac:40:
                    a7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7D:86:7C:3A:D5:29:A8:FF:7E:C0:68:E2:CE:9C:3B:D4:F0:01:68
            X509v3 Authority Key Identifier:
                keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fe:6c:07:d9:c7:4f:2a:19:e5:93:a4:70:8c:45:26:cc:7c:
         90:6f:96:6c:e2:fa:34:6e:ee:1b:07:6f:ca:3c:70:59:75:28:
         eb:75:6a:04:7c:2f:6c:2b:cf:d7:60:3d:9e:cd:22:28:c7:d7:
         60:a7:3b:21:5a:5f:16:87:5c:f1:81:6c:5c:74:c2:a1:9b:3a:
         f2:20:c5:4f:4f:44:c6:08:48:30:2f:17:b3:25:fe:40:5a:54:
         b0:0b:d4:ad:23:84:2f:b5:b5:00:e9:0b:cf:91:98:df:06:dc:
         41:25:dc:08:e5:23:37:35:41:64:6c:60:4a:45:58:f3:71:9f:
         c7:1b:a5:66:00:8d:51:a7:94:8f:be:1a:40:7f:26:00:3a:32:
         3e:84:16:4c:3b:96:64:8e:e9:9d:09:5f:1e:a9:a1:ad:4d:ff:
         5a:d2:93:5b:93:af:fc:c7:f9:a9:fd:53:32:f2:29:5c:f5:1b:
         33:57:7b:c8:db:dc:40:ee:d3:15:f1:60:96:cb:2b:d1:51:9e:
         bc:09:52:81:c3:7c:d7:59:f6:01:6b:3e:b0:82:59:8d:04:70:
         d3:1c:03:4c:70:d8:42:ed:95:94:91:fd:b8:f7:50:8c:ed:71:
         42:d2:d8:0a:dd:45:b3:60:81:e2:52:ae:10:6a:26:49:01:d0:
         1c:7b:cb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:40:35 2026 by rpki-client