Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File:                     sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier:          uVjj0hakKVsAk32gPIGZSlqnvgSuojNIpvAn7C7dJZ0=
Subject key identifier:   73:57:C5:B5:B9:88:0E:FF:01:F4:77:E8:43:B8:6C:47:29:57:69:8A
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer:       /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial:       019F9549E0A23E98BE7CF574F95EA3581AC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number:          195C
Signing time:             Fri 24 Jul 2026 18:01:14 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:14 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:14 +0000
Files and hashes:         1: YxQQWDg_coyEB6pTn4AJqkDaXAs.roa (hash: FxWNGXvs3glxGeqRKNIBrVgkNIhHyCpETztEe1qzaRU=)
                          2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: +yYghLzSCk2P8kP8nWDDp/jJGpxI59koGUFBJs5ushk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:e0:a2:3e:98:be:7c:f5:74:f9:5e:a3:58:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
        Validity
            Not Before: Jul 24 18:01:14 2026 GMT
            Not After : Jul 25 18:01:14 2026 GMT
        Subject: CN=7357c5b5b9880eff01f477e843b86c472957698a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:f7:11:cb:0c:8d:63:d5:b1:4a:aa:29:df:
                    2a:f4:6c:66:82:4c:01:e9:3d:3f:10:78:4c:84:f7:
                    b7:da:31:61:fb:62:24:2d:58:4d:a4:c7:ba:78:78:
                    c3:a2:6e:e0:e9:e4:ac:6a:48:b2:5d:16:0f:d1:d1:
                    a4:13:05:ec:7b:9a:54:5e:8a:e5:7f:85:ff:2b:d5:
                    f0:01:da:f7:5b:29:c8:a4:5f:42:62:9e:bd:6b:c3:
                    e0:9b:9e:2a:48:b5:2d:ff:91:ab:96:00:19:0e:f9:
                    10:c6:de:ca:72:7f:47:8c:3f:1e:3f:4b:f2:c7:e6:
                    a7:b5:33:ef:72:1c:96:54:f8:44:53:a6:b1:76:1c:
                    cf:ef:2b:a2:79:0c:ef:cc:6a:b7:37:b3:b5:1a:b0:
                    aa:bf:74:90:ec:50:7d:c4:78:5c:c6:2a:59:67:01:
                    12:62:56:68:99:e0:ac:ff:7c:14:a2:cb:53:75:26:
                    7c:f2:af:48:5c:58:45:c8:92:3c:63:2a:8c:dd:cb:
                    8c:00:9c:bf:e8:83:69:cb:73:b8:ea:d5:6d:69:01:
                    d4:82:cf:67:ce:71:70:8c:f0:02:49:25:55:10:e5:
                    df:2a:f4:65:0f:e9:1e:58:85:17:be:e8:fb:15:9b:
                    c5:76:12:0b:ba:93:50:40:53:fd:e0:22:ac:27:18:
                    db:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:57:C5:B5:B9:88:0E:FF:01:F4:77:E8:43:B8:6C:47:29:57:69:8A
            X509v3 Authority Key Identifier:
                keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:aa:a9:50:80:61:91:c6:b6:40:c9:23:f0:99:82:70:64:70:
         97:c2:af:90:78:85:60:1f:4f:5e:55:89:e4:53:16:55:29:40:
         eb:4c:4b:63:d5:5e:43:87:73:14:24:02:5a:ec:f2:fb:d4:3f:
         b2:99:a6:44:34:1a:2b:f5:62:68:95:01:95:ea:d7:dc:30:ad:
         da:0f:0c:64:ec:23:b9:47:74:e6:9f:79:dd:ca:08:75:00:4a:
         e4:19:b8:65:df:1b:67:4a:ae:61:ce:ca:7c:87:a9:6a:de:d5:
         bc:e0:8f:d4:e1:54:19:e2:49:51:39:7e:fc:18:19:f5:49:40:
         22:a7:c3:03:6b:f4:bc:62:2f:c7:96:ba:3e:e7:53:64:33:6b:
         6a:5f:02:f0:32:fd:1e:7d:f2:0e:9a:61:a8:6f:28:16:26:97:
         d5:5a:8b:be:20:28:91:44:49:12:92:5d:64:4f:6e:e2:f1:6a:
         62:92:fa:5d:f1:af:aa:e0:6a:df:fc:5f:7e:8b:29:ff:d3:fe:
         05:66:f3:13:2f:09:86:d1:2c:62:0b:56:41:65:32:81:57:c2:
         cc:33:ef:7f:d4:5b:df:71:1f:66:ad:1d:ee:44:59:74:cc:f8:
         f4:61:87:7d:65:57:b9:b0:80:89:5e:ec:00:39:44:7b:e4:65:
         e7:98:cf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:16 2026 by rpki-client