Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File:                     tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier:          CEdbzEx8I7Ksnpax62u7myMDcI2JEJVeRbmvgSaOLS4=
Subject key identifier:   16:A4:99:44:28:36:E6:2D:2C:07:98:32:84:A7:F2:66:28:7A:74:F8
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer:       /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial:       019F943666418478F20FCF35A39EC2799E90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 13:00:20 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:20 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:20 +0000
Files and hashes:         1: 49d3lo0t_8Ax5cbwJrY_Tha0ERQ.roa (hash: qoFvjnjBe3Z9lf3XdiqiaeG3oM6pWV6dcIPmH4VpFRw=)
                          2: 7ufFK9wMYQIlfPF5mBmnlqE81ZE.roa (hash: byv9bKYSFyW281U6XJiGXV1al8HvRRvhSL2jHGqxWtU=)
                          3: gdZbcfQhj6CVyMJsPQMT1BZmtdM.roa (hash: X/T0yNnwui4YvzGKyxtkJ10/UIQIZbvCIKZsavRhgn8=)
                          4: hckySekDjcPjJjmCb8xV-0niibA.roa (hash: rABvuPwZ4k/dR/LQvlCJNpnmkfZ6RaaAKF1LFAoY6XM=)
                          5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: 0OH0fyGUQl8NwUPCnaVa5HRLAJBM++OTwc5E3de5Ou4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:66:41:84:78:f2:0f:cf:35:a3:9e:c2:79:9e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
        Validity
            Not Before: Jul 24 13:00:20 2026 GMT
            Not After : Jul 25 13:00:20 2026 GMT
        Subject: CN=16a499442836e62d2c07983284a7f266287a74f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:52:ae:8f:e5:f3:11:1e:4e:26:22:f8:85:
                    6c:24:6f:cf:66:57:bd:b1:b2:2d:1f:0c:e1:30:a4:
                    cf:ad:87:4e:9f:e7:be:cd:21:29:b9:7d:1f:55:e3:
                    02:c1:9c:0c:60:12:50:8e:48:1f:b0:be:9b:eb:23:
                    01:c2:ad:c9:35:65:41:1c:9b:5b:89:a7:7d:c0:ae:
                    ce:43:12:8d:e1:7d:7e:c7:62:58:f6:ac:de:36:fe:
                    1d:c4:47:96:58:82:64:c5:38:3a:c7:12:42:d5:4f:
                    5a:6d:c8:60:7b:2d:b0:77:27:7e:e6:9c:66:4d:fe:
                    c5:5c:14:a9:cc:c1:54:5b:6d:07:9c:93:79:5b:ca:
                    57:d8:34:65:6f:8e:2b:a0:4e:69:49:07:71:3f:13:
                    d4:59:ec:5c:5c:df:0e:09:fe:e9:68:fb:25:7f:f9:
                    d4:7a:39:f8:55:e7:8e:9e:f7:ec:a9:15:32:24:2f:
                    c2:7f:20:08:b6:38:8a:ce:b3:e4:64:86:56:53:a8:
                    ed:cc:4f:80:39:a5:53:a5:38:77:8e:2d:76:01:af:
                    c6:44:ce:e4:aa:33:95:81:40:4d:b7:c2:44:78:ea:
                    a0:36:92:19:be:1a:f0:b9:33:ac:94:87:e5:50:3f:
                    eb:98:8a:27:ea:af:31:29:95:ff:0e:81:06:23:ac:
                    39:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A4:99:44:28:36:E6:2D:2C:07:98:32:84:A7:F2:66:28:7A:74:F8
            X509v3 Authority Key Identifier:
                keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d6:f9:5c:cb:4d:a9:c5:6d:0d:f9:1c:55:20:20:83:78:03:
         6c:f4:16:cc:2b:a6:89:ac:95:33:68:9b:79:ee:00:12:af:a3:
         8c:94:ff:c6:f6:c1:25:c8:af:49:9d:34:6f:48:c0:82:82:0e:
         f8:d4:2e:18:16:ad:2e:c7:a0:7b:db:03:ef:98:13:89:60:87:
         2d:57:f8:5f:0c:99:51:f4:bf:e9:e8:4e:b1:f8:d8:db:14:a2:
         a2:2e:20:9c:62:08:0c:43:2c:d9:9e:03:78:d2:61:a8:19:11:
         44:93:98:b7:79:2e:51:b6:9a:83:0c:d3:21:2b:c5:cf:d1:ea:
         93:31:f2:5a:fe:2e:1d:cf:70:82:3b:7a:fd:53:ee:1d:c0:f9:
         64:e5:36:4a:0b:22:92:99:79:b0:f0:50:e0:ed:eb:aa:1b:2a:
         1a:92:2b:36:64:5e:9f:1f:da:0d:0d:73:95:04:9a:0f:5b:44:
         79:ce:f4:b3:11:b4:70:7d:ab:41:ec:10:fd:44:1d:87:78:62:
         bb:dd:e0:2a:26:a4:7f:43:3f:f7:0b:81:25:90:07:40:e3:c9:
         38:95:98:a5:9e:2e:38:a9:b7:1f:64:28:04:bf:cf:d0:af:02:
         ab:6f:f3:bd:e9:d6:b6:d8:fb:d7:65:c8:12:c5:a0:e9:21:f6:
         8b:2e:23:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:53:29 2026 by rpki-client