Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File:                     M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier:          HwtL3pkq7r6wcIOsFoAobDbupvQZALGxnv6+jG5CRG4=
Subject key identifier:   E5:4F:87:51:BC:DF:27:09:BC:2B:04:F5:D9:26:40:E4:AE:1A:74:91
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer:       /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial:       019F8FEC325405C45E140CEFCFF5406BCBA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 17:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:48 +0000
Files and hashes:         1: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: fPxqu7Bl9DIT//ooRzedKy+4UmtCRejHVSrcTIsSYvU=)
                          2: S2Rr6_hn2BX5-GlRfv2PnCiP4xk.roa (hash: 7r472AWf04Pi1AuDVC711AyL3xDv3j2X7wUK1jCkLQk=)
                          3: fFXDtgvQwtuo26S2a1Fj55vsTB8.asa (hash: EyxWJ7SdSqpwJL1gtM1HT9SdtAnugRTp0AwNzm8Whcw=)
                          4: kPXOPfjYRrsOHKmt2uydskWrmx8.asa (hash: LJNoYRHWRV4CsqJStGIYTWQsD6lLtFIRWRFBMsiQTN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:32:54:05:c4:5e:14:0c:ef:cf:f5:40:6b:cb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
        Validity
            Not Before: Jul 23 17:00:48 2026 GMT
            Not After : Jul 24 17:00:48 2026 GMT
        Subject: CN=e54f8751bcdf2709bc2b04f5d92640e4ae1a7491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4c:7b:c7:52:01:cb:fb:30:17:8f:fc:7b:af:
                    ec:f9:6a:75:c6:58:c9:bf:b9:39:b9:11:59:49:43:
                    ae:a5:8b:31:a1:db:6f:c3:63:ae:5f:0a:df:45:3a:
                    0b:fd:97:9b:05:27:82:13:4d:8b:03:80:89:77:6d:
                    1d:01:f0:58:16:63:27:4a:40:ca:4f:56:d2:d0:c2:
                    11:63:dd:8a:ac:6f:19:02:15:26:21:d8:f0:46:cd:
                    0d:d5:c6:4d:86:6f:9e:36:c4:f8:27:b6:33:b0:bc:
                    78:ab:4b:1f:7a:ef:c3:b7:28:fd:5f:82:7c:aa:57:
                    4f:28:91:3e:35:16:f9:63:79:69:2d:c0:03:14:15:
                    15:a0:7b:46:f1:2a:99:2c:c2:a5:25:08:80:c0:de:
                    fc:6d:c6:68:fa:a1:af:61:ca:cf:6f:9b:5d:57:4b:
                    09:ea:2f:f9:c7:8c:dd:63:51:33:97:96:7d:30:7e:
                    42:46:0c:a3:d1:ad:77:9d:d7:c5:63:e1:fc:28:67:
                    c8:17:29:9d:b5:d7:57:92:29:ab:f9:29:bf:e2:85:
                    4f:26:9d:fe:9a:44:c5:29:26:de:07:7d:0d:1c:30:
                    5c:ab:af:fb:6a:7e:8b:b5:ab:8d:7b:4e:2a:aa:43:
                    da:c6:dc:33:5c:0d:8e:de:8a:ad:56:6c:85:8f:a6:
                    75:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4F:87:51:BC:DF:27:09:BC:2B:04:F5:D9:26:40:E4:AE:1A:74:91
            X509v3 Authority Key Identifier:
                keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ef:c0:15:64:2f:a1:b1:49:b0:82:f2:06:37:2e:32:d0:19:
         eb:c5:98:5a:83:1b:ca:80:8f:62:cd:b1:06:dd:d5:10:cf:d7:
         56:a5:9c:4d:8a:26:5e:33:b7:56:6c:5f:f8:57:b6:6d:ec:e3:
         2d:db:f1:47:ac:be:d5:7d:d0:dc:aa:61:02:4e:83:23:f3:44:
         66:a1:8d:db:5f:b4:cf:f3:6b:86:81:d1:33:14:fe:aa:61:b8:
         01:e0:bc:38:b5:c4:3e:e3:bb:e0:9d:4b:38:85:98:a4:ae:5c:
         80:87:73:76:86:f7:01:a3:e9:0d:1b:13:6f:8f:3f:c0:d4:cb:
         42:ab:4b:0b:12:40:44:ce:74:2b:6d:36:90:bc:b5:51:a9:17:
         5d:de:76:27:62:d1:f4:d8:05:f7:10:3d:28:ec:bb:e3:ec:41:
         f3:0e:47:f1:fc:bf:2c:78:7e:51:94:4c:af:40:c1:1e:b2:95:
         18:c2:c6:a8:1e:de:dd:2a:b7:02:4d:fd:eb:af:ea:3c:8a:41:
         66:c5:44:f5:db:67:b5:4f:42:c8:85:0c:3d:57:82:9f:43:7d:
         9c:01:42:4d:8b:f0:67:b6:bf:43:b5:e0:2f:3e:fe:ea:69:fb:
         df:93:f7:ce:83:fc:2a:b7:3d:ee:37:8a:c8:81:42:5b:53:1d:
         28:4f:14:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:50 2026 by rpki-client