Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
File:                     Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json)
Hash identifier:          xZ+yf7E/cv48tYeOYAypo6OjFXnxnWVwKRpan1cgVAk=
Subject key identifier:   AF:BB:08:D2:D0:D6:16:14:08:1B:C9:4C:4B:F5:3A:7F:72:A5:CC:52
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Certificate issuer:       /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial:       019F93FFFBE7D0FE35E5D02DA292254BF241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
Manifest number:          195A
Signing time:             Fri 24 Jul 2026 12:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:54 +0000
Files and hashes:         1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: ZWQoqbfp073yM1ZhtHN8gcTNFi1wTwu9nbzsOtb13pc=)
                          2: b3LXnlq9k-Ne9E6Mygo7-fqX-j0.roa (hash: IcAFyrVK2cFcgloap4jKZ9gt4tybwfvmhwEuaPNFdVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:fb:e7:d0:fe:35:e5:d0:2d:a2:92:25:4b:f2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
        Validity
            Not Before: Jul 24 12:00:54 2026 GMT
            Not After : Jul 25 12:00:54 2026 GMT
        Subject: CN=afbb08d2d0d61614081bc94c4bf53a7f72a5cc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:29:ee:ae:53:2f:22:b9:ab:0a:53:92:be:
                    72:52:03:d8:22:1e:8c:da:18:5e:c3:77:e7:4d:5c:
                    31:26:44:ed:7e:f3:70:08:9a:62:b9:06:4e:bf:0c:
                    21:3c:9e:80:6b:a8:ef:5d:a1:66:34:cf:fe:07:2c:
                    a5:3d:b5:39:e6:d2:d9:13:99:c8:c0:d3:2a:30:1e:
                    53:b1:bf:bf:66:c7:4a:e8:4d:c2:72:71:5e:d4:a9:
                    d2:44:9f:19:c2:4b:3c:b2:87:e2:b5:05:3a:0d:be:
                    aa:c7:7b:af:dc:b7:01:2e:44:6b:a1:81:90:04:32:
                    18:30:d2:af:5b:bf:34:6a:9c:7f:50:3e:38:e5:aa:
                    ed:4b:1e:97:15:d7:cb:dc:06:f9:80:4e:73:b8:ce:
                    cd:dd:df:dc:e7:12:41:fb:9c:d0:a4:40:d9:70:e1:
                    3d:c2:2d:37:a6:25:05:41:a1:5b:cb:98:cf:44:59:
                    b7:df:fd:76:f6:98:e3:22:22:0f:34:e8:0f:95:8a:
                    e1:80:76:a3:5d:c3:ba:82:e7:89:f9:6b:9e:86:9e:
                    ac:ad:ad:0b:47:c8:a2:3d:80:d9:dc:68:72:8a:a6:
                    a8:ca:83:c8:0e:65:74:95:09:0b:5a:39:5e:7b:4f:
                    c5:e1:fd:96:05:b9:cb:e4:cb:e4:ca:d1:e1:13:84:
                    49:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BB:08:D2:D0:D6:16:14:08:1B:C9:4C:4B:F5:3A:7F:72:A5:CC:52
            X509v3 Authority Key Identifier:
                keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:9a:79:63:b5:52:7d:93:0e:48:b2:51:42:91:8b:2c:9d:d0:
         9d:93:a5:72:8d:67:f3:e4:87:0a:83:95:71:ef:8b:33:b5:7a:
         c7:c1:4b:fa:92:a4:67:6b:23:1a:3b:d5:39:2b:cc:9b:77:56:
         22:d0:49:15:65:c8:57:de:02:39:57:bf:66:22:95:0a:3c:f3:
         61:cf:0c:c4:be:46:64:55:c6:09:27:d2:86:d7:0f:b0:bb:3d:
         98:d1:3d:43:d2:92:30:73:db:c3:34:34:db:34:c2:b5:c7:b8:
         d5:c4:97:56:b4:5d:b9:54:b0:f4:11:21:78:00:35:2f:74:3a:
         bf:63:31:0a:a5:93:75:8e:d4:45:2d:d0:20:30:c8:1e:56:9c:
         80:8d:cc:62:43:f5:45:d5:b7:b8:46:53:77:e2:d2:7b:42:79:
         5a:0c:dd:0e:0a:1a:3a:f1:99:76:db:3f:6b:2c:76:66:29:f9:
         42:52:5c:d5:7f:9f:8e:e9:ab:0d:63:0f:c3:0b:c9:3c:9f:5e:
         0a:9a:e7:08:fb:0f:da:d9:0e:57:c5:cb:39:75:c9:58:39:08:
         2e:d5:13:ea:18:92:ee:79:7c:78:ea:10:a7:d8:1c:6c:ea:1e:
         90:53:5c:9a:9c:b3:80:fb:34:f4:f8:8d:52:a2:ce:61:70:b7:
         ff:f2:df:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:26 2026 by rpki-client