Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File:                     48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier:          oZ3qO5J0hxEPjexDdDDX3C8QZQ2nb1Uh5ceUd6kFcDo=
Subject key identifier:   B1:A3:92:78:85:E0:E2:1D:C9:1A:AB:99:05:C1:64:F4:D8:5C:37:70
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer:       /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial:       019F8F7E7BED6EFB302FFED7C4B2380EE832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 15:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:58 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:58 +0000
Files and hashes:         1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: sNQ6xTfQElWMuYrTjiFY6cqbIc8RUwKPbVfkZa2PtNE=)
                          2: gH5BFPvLjCqzOcPYqVQ6Q-d0ay8.roa (hash: b6VMFnv1cWNK34raB+2k08c62RJCIrNzmgwZP9swjd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:7b:ed:6e:fb:30:2f:fe:d7:c4:b2:38:0e:e8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
        Validity
            Not Before: Jul 23 15:00:58 2026 GMT
            Not After : Jul 24 15:00:58 2026 GMT
        Subject: CN=b1a3927885e0e21dc91aab9905c164f4d85c3770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:81:e3:fd:12:9b:46:54:6d:0c:74:b0:70:
                    2f:13:5b:5d:f1:d2:c5:49:55:5b:1e:41:c6:8f:7c:
                    bf:2a:2d:1b:d6:5d:ed:65:1c:af:94:57:31:74:b0:
                    c4:8c:96:c5:0d:d6:05:77:64:61:75:eb:1c:c4:2a:
                    74:c5:bd:31:93:84:78:72:68:42:cd:95:36:20:7a:
                    63:05:e5:1a:71:8c:99:40:07:22:97:78:90:09:0e:
                    43:24:9c:ef:89:87:04:24:12:f0:bf:0c:8a:f4:31:
                    67:ae:66:60:6b:d6:2c:e2:01:80:c5:d1:32:36:23:
                    56:02:3b:9d:b9:42:05:a2:70:20:01:52:90:c4:03:
                    c7:0c:e8:6c:2c:48:9d:f0:7f:fb:68:23:a3:1b:e0:
                    b5:b2:d1:4e:60:cc:77:3a:39:a8:c2:f2:c7:da:6c:
                    94:09:19:75:0a:c4:fb:71:75:dd:5f:06:7b:89:26:
                    15:80:e5:40:8f:cf:61:9f:ec:c9:e7:1e:c3:93:ff:
                    21:29:95:ad:e4:a4:e1:83:b9:ad:37:09:1a:f6:6b:
                    2f:a1:f4:73:5a:6e:f6:f6:dd:1f:d1:1a:94:42:b8:
                    3f:8e:0a:44:1f:fb:60:14:b0:2c:4d:a4:b3:72:03:
                    5b:fe:d4:e9:f3:f8:52:e3:e3:32:4a:2b:e0:a1:61:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A3:92:78:85:E0:E2:1D:C9:1A:AB:99:05:C1:64:F4:D8:5C:37:70
            X509v3 Authority Key Identifier:
                keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:59:cd:fc:18:b9:60:88:cf:3b:3f:7d:57:6f:71:8b:7c:63:
         36:ef:17:06:71:59:f6:d7:1d:70:6e:40:59:ac:83:10:39:25:
         28:ca:b1:9d:0d:14:82:89:be:29:9c:90:3a:5f:69:94:d7:db:
         d0:c5:b1:90:21:07:c5:37:31:c5:15:a7:9a:e4:73:c8:99:1d:
         5e:d5:4a:32:bc:68:11:24:95:80:45:b2:5d:e1:00:f9:14:aa:
         b0:79:d3:f6:77:90:b9:a8:a9:75:bb:fc:bb:7c:c7:c7:1c:b7:
         ba:22:42:9c:52:b6:d2:45:df:46:30:31:0c:b9:8e:92:c5:f1:
         69:4c:93:41:d4:8f:96:a3:72:9d:0d:01:48:59:71:c7:aa:0e:
         5c:58:bd:43:12:b5:1a:87:ff:4e:57:9e:9e:25:d1:ce:4d:e9:
         b4:be:6c:e3:7c:4d:07:b9:fb:df:b3:e3:fe:d0:fa:a1:2d:bd:
         84:04:42:2d:a2:99:5f:c2:75:69:e0:38:44:d4:b4:7d:b4:95:
         10:bd:ab:4a:b3:0b:aa:93:6e:54:06:75:f2:67:69:0d:aa:98:
         df:73:be:3a:99:47:81:62:15:98:de:3d:0e:28:c5:7e:87:04:
         61:79:98:27:9d:cc:bd:f4:83:73:3c:00:7b:82:98:93:49:ce:
         99:ec:17:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:28 2026 by rpki-client