Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File:                     CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier:          FIdMw9j82SbS6e8estWccCQpPdPGcyWG9Kam78Zylvo=
Subject key identifier:   C4:1F:BF:06:C6:58:EA:10:44:A1:25:F4:6A:FA:1F:CC:88:86:D2:E4
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer:       /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial:       019F8FB558AE55E975B3D877C627382C92FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number:          0F64
Signing time:             Thu 23 Jul 2026 16:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:54 +0000
Files and hashes:         1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: kTUbOPZ0Kea/m1DkcfCwj0AY5eFznholiYkDzxCjA5c=)
                          2: uhdMtBOA3cYoynFIaKtZYsj7lSg.roa (hash: VF0DL8K8+TXT+eVaeExhkpXzBIJGAgs45oDbj/IFdpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:58:ae:55:e9:75:b3:d8:77:c6:27:38:2c:92:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
        Validity
            Not Before: Jul 23 16:00:54 2026 GMT
            Not After : Jul 24 16:00:54 2026 GMT
        Subject: CN=c41fbf06c658ea1044a125f46afa1fcc8886d2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:a2:96:a4:1f:ae:26:c7:09:ae:c4:61:6a:
                    db:aa:14:02:fb:cc:6b:61:94:fc:a1:49:a6:ed:c5:
                    e0:58:6a:6c:92:ae:9f:0e:74:03:66:e5:8a:ad:b2:
                    7b:c3:20:2a:fa:7d:39:a2:08:a9:72:bf:2f:a9:04:
                    f0:4d:92:f0:d2:37:22:f5:89:39:2c:67:99:b8:90:
                    c3:50:2f:db:4e:d0:49:47:82:66:df:06:39:60:a7:
                    8d:69:ef:b0:ca:60:79:7a:81:37:34:c6:76:55:54:
                    42:cf:70:c5:c2:4f:71:0b:1f:1b:41:e4:1f:f7:c3:
                    dd:70:5d:01:1f:61:14:7c:1d:1c:cd:00:92:63:35:
                    04:b1:51:df:96:dd:3e:60:64:22:ea:06:e6:7f:de:
                    bb:a8:ff:cf:4a:6b:1b:be:3d:07:13:f9:62:e4:41:
                    d6:da:c2:d4:85:9d:5d:d6:08:84:94:0a:d0:99:6d:
                    7b:6d:5a:48:0e:2d:38:cf:ff:01:7c:19:29:82:03:
                    18:d5:0f:f1:07:74:2b:50:38:42:39:df:d6:12:f5:
                    b2:29:5e:2a:2c:b0:f4:98:ee:24:d1:17:d2:62:85:
                    d0:bb:c5:83:b8:39:52:e4:3e:0b:9c:74:8c:82:c1:
                    0f:d1:9b:56:49:65:53:ad:25:81:34:fa:bc:6d:56:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1F:BF:06:C6:58:EA:10:44:A1:25:F4:6A:FA:1F:CC:88:86:D2:E4
            X509v3 Authority Key Identifier:
                keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:3d:eb:d9:dd:d3:10:22:52:5d:44:16:2c:f7:82:48:e2:67:
         47:ff:84:ba:9f:15:75:c5:25:b3:63:e1:bf:85:04:88:36:c7:
         10:5f:da:ef:3e:a8:d8:82:03:5c:01:8d:e5:3a:89:d0:9c:41:
         d4:12:c4:9c:a9:71:34:b2:18:55:ed:19:92:da:2e:92:02:47:
         97:0d:29:b8:21:a1:3b:57:0b:4f:cc:cb:ed:98:19:40:e0:73:
         c5:3e:6c:b2:6b:b9:f9:8b:58:5e:e1:04:0e:92:55:4a:ae:d5:
         5f:10:4f:b3:01:6c:96:6e:33:cc:aa:ad:61:03:26:0e:50:cb:
         ab:79:cd:78:e5:bf:d0:71:48:e2:91:64:6b:55:05:00:39:e4:
         eb:87:9a:46:a6:5f:1b:7a:85:8c:a4:14:96:b6:a4:3c:f6:ae:
         fd:6e:7c:a3:19:65:a8:5c:71:15:ae:f9:7d:82:d9:00:00:9a:
         60:3a:11:c4:68:a7:4b:85:65:cb:c0:82:08:e3:50:37:53:77:
         8a:aa:54:63:64:83:2d:c7:49:89:22:68:d4:86:fd:b7:a8:fc:
         83:be:4a:9f:54:10:dc:3c:ff:21:16:cd:f4:51:8d:87:48:9a:
         df:43:5e:52:8a:81:99:f0:92:ac:d3:b3:f1:af:31:31:d3:81:
         97:57:c3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:15 2026 by rpki-client