Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
File:                     dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft (raw, json)
Hash identifier:          /3jp844KpgKQrrSskqd3s9yU965qXdFbC1pXvaneR1k=
Subject key identifier:   5A:C1:51:F5:2F:4C:A0:76:45:4A:AF:B9:3F:07:47:AC:CD:18:BD:17
Authority key identifier: 74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
Certificate issuer:       /CN=749304120ce64942efb3896623b386a041dcb364
Certificate serial:       019F90230838A8C9A6B7C416CFD2E6086D4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
Manifest number:          52
Signing time:             Thu 23 Jul 2026 18:00:42 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:42 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:42 +0000
Files and hashes:         1: Q5a6HBab7XkMUuUmzB37I_bZ51M.roa (hash: usPWG+ZUU2Ik0VUcffT2eLkXW+tgdFOyEMe83evsQaE=)
                          2: dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl (hash: e+i1LYtRMioCMnbnnc41k5bu4uB31ZfbZKxjOhEsK1k=)
                          3: x8Ef8kUk1ABUGDrdvpPX2q-sM5Y.roa (hash: eqyvuJE0kO0nJaVY9QksYF1dsyytJE+brJXIzn/oUAM=)
                          4: yn-UQ1pVJZDABMVLeJ9nhqXgCpk.roa (hash: 9X5Y2Cv2UIpJSqjKJPAjPpvZNJ4jzPmiAP1leQcKFxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:08:38:a8:c9:a6:b7:c4:16:cf:d2:e6:08:6d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749304120ce64942efb3896623b386a041dcb364
        Validity
            Not Before: Jul 23 18:00:42 2026 GMT
            Not After : Jul 24 18:00:42 2026 GMT
        Subject: CN=5ac151f52f4ca076454aafb93f0747accd18bd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a5:89:ef:cb:9d:43:5e:dd:01:06:99:11:35:
                    cc:19:0c:15:60:09:26:38:d7:50:64:48:c8:80:c6:
                    f4:16:ad:d7:b7:fa:d4:12:3e:1c:38:02:59:ac:64:
                    8c:d6:ae:37:12:78:2f:82:cd:7a:ae:19:58:e4:8c:
                    ad:0e:61:8b:e4:07:3f:a5:e0:8f:9e:c5:8d:3b:ee:
                    e3:ed:23:a3:d7:b8:77:a5:62:79:b8:bf:f1:14:34:
                    dd:d4:2c:50:ed:8d:75:70:eb:7d:26:d1:8c:bd:17:
                    4b:a7:2c:af:fa:21:3d:a9:d0:85:f5:c7:17:16:4c:
                    ba:f0:d3:e4:41:99:85:cd:e6:b8:ea:21:02:5e:39:
                    42:4f:bf:a0:f1:bb:e4:d3:53:e9:3b:d8:b2:73:fe:
                    b8:a2:8b:aa:e7:98:6e:88:44:97:10:4b:08:dd:77:
                    70:eb:cb:b8:ea:a6:6b:0b:f6:2d:0e:00:2c:87:49:
                    a1:01:02:d2:86:3e:e1:61:56:a2:0f:e1:72:42:31:
                    4c:c1:57:db:c7:74:ed:8d:bb:39:ed:df:8d:bf:23:
                    d6:cc:c8:d6:fc:7e:aa:e9:a8:c6:a5:84:a2:32:38:
                    b4:65:29:af:45:63:25:06:ce:f1:6b:2b:29:b4:6f:
                    4a:23:ec:82:59:90:6b:09:bd:13:93:1f:ce:3f:c6:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C1:51:F5:2F:4C:A0:76:45:4A:AF:B9:3F:07:47:AC:CD:18:BD:17
            X509v3 Authority Key Identifier:
                keyid:74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4b:de:3a:4d:28:f3:57:d1:27:52:da:d6:ab:ba:63:90:d7:
         e0:8d:ee:4d:c8:17:95:e9:29:fd:6b:00:3f:fd:15:0b:dd:cc:
         f5:66:d8:75:d9:b5:07:f9:81:25:52:ca:4d:75:46:cb:95:3a:
         5d:1f:da:24:c7:75:02:f7:3b:c0:63:fb:5c:b1:46:1d:d5:ce:
         21:13:df:43:dc:0a:40:ef:f2:56:81:62:4c:73:90:83:80:cd:
         7c:71:6d:5b:8e:42:34:5d:c1:d6:3d:af:67:c2:7f:97:04:b7:
         be:9c:79:9a:cf:c2:4d:8d:c9:ff:ad:00:4d:30:13:84:31:4b:
         72:91:5b:a6:36:e7:47:0b:1c:cb:42:44:70:68:19:ee:26:9c:
         59:a9:e5:d4:bc:9f:77:4a:7c:b6:d6:be:0e:4f:2a:09:4f:fd:
         43:c2:d3:43:b8:c3:9a:26:16:d7:e1:cd:66:22:3e:cc:f2:54:
         04:bd:86:aa:aa:4a:da:76:7e:f8:3f:c4:ac:04:f0:20:2d:47:
         f3:4b:42:93:12:b9:a5:05:6d:31:74:9d:3b:9a:c2:a9:6f:26:
         2f:fc:9e:1a:4f:9d:83:e6:67:76:0e:fc:d9:d5:23:db:ad:1f:
         e7:bb:c4:9c:fa:2e:5f:42:db:a9:a8:db:89:01:ef:47:21:eb:
         20:89:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:25 2026 by rpki-client