Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File:                     r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier:          h1BiPYxdIiFnVBTENPrgDmQbNWY6At5M+g6iO4WMcPU=
Subject key identifier:   2D:76:82:0B:CC:32:8C:6D:74:A6:37:C7:D0:0A:0B:91:AB:4E:8F:9F
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer:       /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial:       019F9090A0114A46236DD6C78C1948A20678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number:          19C2
Signing time:             Thu 23 Jul 2026 20:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:24 +0000
Files and hashes:         1: 0WpGctn3iHwcCfz1HyZ1-r-vlc8.roa (hash: FHZ/JIyqvLJTAVxRV45KR0WJzUtCxqF4aecsFoB2jfo=)
                          2: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: uaJU8okeM2OziuppCjfoXYcjeIkDGtrXnUNwBksW8ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:a0:11:4a:46:23:6d:d6:c7:8c:19:48:a2:06:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
        Validity
            Not Before: Jul 23 20:00:24 2026 GMT
            Not After : Jul 24 20:00:24 2026 GMT
        Subject: CN=2d76820bcc328c6d74a637c7d00a0b91ab4e8f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:65:93:42:65:ae:e6:f6:1d:8b:44:75:e1:
                    a0:40:bb:f7:fa:1a:13:91:1e:0d:7e:25:70:ab:2a:
                    2e:61:5e:f4:fd:07:7a:f4:3c:53:98:90:46:93:c2:
                    b5:e0:c6:c2:f5:2e:ec:e1:b1:75:4a:d4:82:8d:90:
                    55:35:bf:0e:93:63:67:02:3a:79:be:2b:01:49:51:
                    6b:61:6e:28:61:fc:5a:c2:ce:8c:e3:60:48:ae:68:
                    25:75:ed:7c:5f:df:f0:93:ba:81:f4:3e:59:23:b5:
                    5a:52:2f:f0:1a:10:8b:d9:12:4e:7b:cc:90:6a:2c:
                    d1:b0:e0:85:04:c8:4d:e9:a8:3f:de:7f:d6:e7:56:
                    f4:d8:d6:1f:c3:10:2c:bc:43:5f:bf:74:a0:76:46:
                    c3:e9:bb:85:be:a8:e5:42:17:82:87:12:75:c5:00:
                    55:f2:7a:a1:61:48:fe:06:b8:5b:42:6d:3d:e9:a8:
                    06:e5:c0:1c:9c:ba:59:dc:d4:42:b0:d5:5a:01:e5:
                    6a:19:a1:70:9a:d3:f4:12:c1:e6:c7:89:e0:a2:54:
                    59:e5:81:20:5d:db:f7:8d:e6:3a:72:35:85:7d:5b:
                    15:e2:81:d0:b9:44:cd:1f:b5:3c:5c:6b:c8:0d:12:
                    7d:4a:db:df:e2:ae:95:f0:22:d6:06:d2:d0:c2:22:
                    03:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:76:82:0B:CC:32:8C:6D:74:A6:37:C7:D0:0A:0B:91:AB:4E:8F:9F
            X509v3 Authority Key Identifier:
                keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f8:0d:9e:65:6f:a8:52:6e:2d:ae:94:02:b7:56:cd:1a:54:
         04:78:19:da:48:bc:c7:74:9b:bf:32:38:30:42:de:82:9f:2f:
         e4:9a:57:7e:0f:5b:35:3e:5d:4b:f6:33:80:8f:1c:85:e0:05:
         0c:37:2a:f2:5c:6b:d2:5b:86:64:0e:1e:c0:d9:cf:01:e3:f6:
         58:89:66:fc:25:b0:e0:a4:bf:59:e5:00:cc:d9:31:82:b8:ae:
         60:f1:90:fd:de:97:7a:83:91:14:9c:05:cd:2f:62:a6:42:78:
         5d:bc:9c:35:14:9e:db:6e:9a:27:1b:c4:a8:6a:ae:ef:89:a0:
         cb:a1:a8:a0:d7:2c:39:ec:5b:a4:03:16:af:6f:c4:7b:a5:e5:
         87:f6:aa:4b:64:66:ec:be:82:c0:08:93:4c:b7:43:c4:b7:fb:
         03:93:03:a2:a0:3e:63:73:7b:71:1c:36:85:af:fb:7d:a6:5b:
         b3:0c:9e:0c:0e:1a:50:4d:23:67:73:f2:e6:b4:cd:2d:04:57:
         a1:77:d4:ef:f1:5c:13:8b:84:a4:66:d0:2f:c5:84:a0:a2:04:
         7e:de:89:d1:6f:fc:31:3a:bb:81:67:86:29:6e:89:f1:a3:2c:
         60:c8:3b:4a:d8:5e:18:2d:19:1a:09:e1:02:b5:9d:1a:db:cf:
         c3:08:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:38 2026 by rpki-client