Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
File:                     x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft (raw, json)
Hash identifier:          3I4elWROWVIPgFM4Ppym45urtTLtWqReiRaUDK57yzs=
Subject key identifier:   46:8F:2B:57:81:3B:56:B4:4C:80:E6:2A:7C:B8:05:BE:73:C5:60:D0
Authority key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
Certificate issuer:       /CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Certificate serial:       019F9247FAB819FED0B6DCE943A85025E19E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
Manifest number:          0250
Signing time:             Fri 24 Jul 2026 04:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:18 +0000
Files and hashes:         1: w-oyu6Dt2pR1vO2yb74Z1MeDHhc.roa (hash: 3NZ9tfleTSDXUKf2CN0AIsezDYvSZLjibOtJobFnX+M=)
                          2: x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl (hash: Rw49ah8EQsn2pvwBPsKFCujBowQZhnN8TFUEEBGOVjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:47:fa:b8:19:fe:d0:b6:dc:e9:43:a8:50:25:e1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
        Validity
            Not Before: Jul 24 04:00:18 2026 GMT
            Not After : Jul 25 04:00:18 2026 GMT
        Subject: CN=468f2b57813b56b44c80e62a7cb805be73c560d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:e7:25:85:9d:3e:1c:6a:30:6b:fe:a2:7a:
                    2a:f3:6e:13:7b:21:00:58:61:3e:f9:5c:7c:7a:38:
                    87:fe:01:22:6b:32:e7:7d:c8:37:1f:16:83:50:80:
                    f2:ae:88:8a:df:03:1c:17:97:c7:38:a2:ea:f7:86:
                    3c:b0:8b:44:e6:4c:ad:cf:9a:e6:da:b2:ee:13:e5:
                    19:21:97:5b:43:d4:43:60:b1:72:52:7f:19:42:72:
                    63:3f:46:ee:65:b7:2a:7b:80:88:ee:b6:7c:0e:11:
                    1a:05:c3:69:8e:3a:07:27:73:59:c8:4b:ab:6a:cc:
                    ac:ab:a5:8c:e5:36:1b:18:8f:3a:0c:4e:ee:ec:b4:
                    5f:66:2b:a2:f8:33:b1:2c:5a:56:34:b7:4a:cb:82:
                    ab:ba:cc:31:70:1d:15:d2:9d:d3:df:2a:9b:f9:68:
                    4e:fc:7a:4a:0f:d3:4d:5b:cf:95:82:43:71:de:28:
                    ab:84:e1:8c:77:96:a7:7b:e1:0f:91:e6:f3:ac:76:
                    0f:40:24:16:9a:69:ae:af:77:c1:85:4e:65:37:23:
                    d6:3a:e4:1e:5e:18:dc:1a:15:f4:28:3b:a0:94:b6:
                    19:f8:2b:3f:73:ec:d3:64:e5:48:df:a7:1a:7b:5f:
                    43:f2:db:c4:de:f7:b8:64:8f:c1:ad:14:a9:6c:3b:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8F:2B:57:81:3B:56:B4:4C:80:E6:2A:7C:B8:05:BE:73:C5:60:D0
            X509v3 Authority Key Identifier:
                keyid:C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:42:d0:30:7d:45:5d:db:21:cb:d6:74:51:58:b5:96:45:bc:
         f0:ab:81:f3:ce:01:c9:0d:80:46:eb:4b:ca:f6:75:78:1b:d7:
         03:16:8c:f9:6d:cc:b5:a2:a2:c0:12:f8:9b:63:f6:f2:8c:54:
         58:5d:19:74:46:d4:97:4a:a4:2d:4b:db:20:cb:bd:27:15:b8:
         26:8f:ce:8c:47:d8:33:8b:8a:fb:43:15:2f:83:80:0c:77:96:
         0f:17:84:fd:1b:d0:96:3b:f6:69:4d:e1:97:c9:d8:bd:45:1f:
         b8:8e:0e:19:fa:9d:84:fe:bb:f2:f5:cf:4a:fa:78:3c:50:db:
         8f:a8:57:14:eb:da:34:e6:83:56:52:fb:aa:2d:e7:30:80:8c:
         28:cf:e6:f9:6a:1c:8f:71:76:f1:c6:df:fe:a5:54:05:90:a5:
         5f:56:a8:1f:88:9f:af:3a:84:1e:7c:5e:e7:34:d8:fb:8f:88:
         a4:84:96:c3:ac:65:0e:e2:dd:e5:b1:c8:eb:c2:7f:52:d4:e6:
         3d:18:1f:91:45:5a:71:c1:d6:d6:2a:09:9b:24:08:ce:73:fe:
         2e:8b:bb:dc:c2:93:24:bb:53:42:de:8b:1f:a0:28:c9:dc:8f:
         2e:2f:63:83:d1:34:df:8e:3b:1a:a8:21:85:4e:92:83:dd:45:
         9a:cd:8e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:00 2026 by rpki-client