Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File:                     1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier:          neTwTq4RJs5LhWAr/obq+W6v0RGVFEo0iZkbKDmbFgE=
Subject key identifier:   53:C4:8F:23:2E:DC:A5:71:51:F0:E2:3F:98:25:AD:31:FD:09:B2:2A
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer:       /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial:       019F909111202F4AD6DE0B6CB229D3845C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number:          13F2
Signing time:             Thu 23 Jul 2026 20:00:53 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:53 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:53 +0000
Files and hashes:         1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: Khlw2zrje9b9AphhwyxQs2sNravVc1HCmBsy2bfMJ1o=)
                          2: RymzVkl2GTuXhui1J5W_XhqHq48.asa (hash: 5HfIyKLmoKxLTbuxq/HgwaF++9Q0QoNQiFLFyXUCLUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:11:20:2f:4a:d6:de:0b:6c:b2:29:d3:84:5c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
        Validity
            Not Before: Jul 23 20:00:53 2026 GMT
            Not After : Jul 24 20:00:53 2026 GMT
        Subject: CN=53c48f232edca57151f0e23f9825ad31fd09b22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:b7:8d:ce:93:95:ca:b6:ef:b9:12:9c:8b:
                    bb:00:32:89:65:70:68:aa:ff:32:93:a5:98:b5:24:
                    93:bd:4f:ba:3b:57:93:60:c1:ca:1d:3b:cc:d3:5f:
                    b8:ad:a3:15:b3:b7:02:13:8a:0f:bf:45:ef:2d:9a:
                    4a:0d:55:98:ed:9f:39:59:33:43:07:6d:be:ab:1e:
                    e1:04:05:13:b5:fe:5f:9e:a8:f4:c2:c0:6e:f1:21:
                    e4:a1:88:90:92:b1:5a:bf:3e:fc:72:b1:cf:65:a3:
                    7d:f5:65:7e:a1:01:21:67:63:40:05:f6:a4:97:b0:
                    f0:1d:a7:05:6d:e3:2c:c1:ea:40:c2:3d:0c:7c:91:
                    7c:40:49:c2:4b:ad:46:26:01:3f:33:96:a4:fa:9f:
                    59:13:91:fa:96:5b:89:e3:e2:12:6c:b1:10:f3:6b:
                    66:dc:7b:8e:10:52:06:30:9c:5b:e6:10:cd:ed:01:
                    47:9f:87:98:5b:51:ba:09:56:80:79:6a:40:be:2c:
                    3e:40:03:d0:c3:53:75:09:ad:c4:79:63:b8:0e:29:
                    ad:be:30:6b:3b:9b:d8:c8:ea:02:2b:18:8e:a2:a1:
                    46:77:3b:3e:f0:43:06:8b:c6:65:81:f1:3f:9c:f3:
                    24:ef:ac:23:46:a6:eb:15:4d:e9:0f:0f:6b:6a:8b:
                    e2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C4:8F:23:2E:DC:A5:71:51:F0:E2:3F:98:25:AD:31:FD:09:B2:2A
            X509v3 Authority Key Identifier:
                keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c5:6b:8b:47:8b:76:52:ea:a0:74:62:a1:dc:93:df:65:cb:
         dd:70:ac:fc:e8:64:49:ed:91:ee:9a:11:97:fe:65:ce:8b:b0:
         ce:4d:06:ad:8d:b7:6e:a6:cb:ca:3f:99:77:9a:a2:aa:ec:1c:
         41:28:0f:8b:4c:1b:6f:af:e6:fe:bf:87:45:27:16:bb:7c:b5:
         05:f7:9e:3f:62:93:59:27:72:5c:49:05:87:75:33:3d:7b:76:
         36:9b:02:96:a2:d5:b2:af:ce:ce:e7:a7:f4:2c:5a:a8:73:98:
         3f:b3:55:b7:b4:89:e4:27:ff:6c:5b:67:74:e4:2c:c4:4b:59:
         a1:34:27:0b:ed:fc:c9:da:f0:00:18:d9:9b:1c:75:90:fd:3c:
         0f:7d:a8:c2:67:bd:8d:12:38:5a:45:2f:2f:31:46:92:19:5a:
         66:3a:99:70:b0:03:4b:1e:c0:0a:54:b8:93:3f:6c:91:d7:38:
         65:b6:86:7a:2a:c6:81:cc:c8:22:fe:e4:dd:fd:41:ca:ae:c6:
         75:df:ef:f7:70:e9:17:b0:9e:e1:92:ff:d3:ef:b2:6c:e3:69:
         3f:59:a1:3d:9a:be:a4:5a:08:a1:93:19:81:cb:1b:d4:2d:44:
         26:31:53:07:87:c3:e1:8a:20:16:92:8f:c6:90:51:c8:d9:88:
         27:bf:21:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:27 2026 by rpki-client