Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
File:                     cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft (raw, json)
Hash identifier:          oOD9YN02VcHFOTFolcMqppHNpPYM2ZHmDowXrfX7BB8=
Subject key identifier:   88:20:D2:3D:C2:2E:FE:73:64:6A:3F:D8:52:80:B0:FF:68:1B:94:83
Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
Certificate issuer:       /CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Certificate serial:       019F8FB562102C48533F1F60CF5B4DF1D05B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
Manifest number:          19CC
Signing time:             Thu 23 Jul 2026 16:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:56 +0000
Files and hashes:         1: 1BSkcVOn1qfh4jN9Y9DJswoRbtE.roa (hash: LWd2G+pwtnf/D4Tz+gcRRy7rXH1Fkn75SR7a0vRuma0=)
                          2: D6outDiE1pK_DydHGZyVGQce45w.roa (hash: k67yvwHSAG5YZmtQAvs13ltyI5n27aqgR+L0RdVOVfU=)
                          3: Fd5umUhcoCCaJGYibKCvP6v4FDo.roa (hash: aX4f/4JkLGsDLe+rXVPfGB2prsQe4LXC6c7f8OmsATA=)
                          4: cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl (hash: vAm+MWTODgkMUabrFLyGoOIIZrHt3O/qjVc6Yxp/vmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:62:10:2c:48:53:3f:1f:60:cf:5b:4d:f1:d0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344
        Validity
            Not Before: Jul 23 16:00:56 2026 GMT
            Not After : Jul 24 16:00:56 2026 GMT
        Subject: CN=8820d23dc22efe73646a3fd85280b0ff681b9483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:63:cc:f5:4f:c1:0d:c6:79:a3:df:17:35:1b:
                    b6:c7:63:fd:c6:9e:91:d6:2d:15:21:23:d1:13:49:
                    0b:21:63:8a:4f:d4:c9:6e:ad:09:52:b6:54:ac:a4:
                    b2:52:fd:a2:e6:76:9f:ce:59:e0:a4:52:3c:ef:66:
                    a7:76:8e:e5:cb:d1:dc:b7:cf:cc:ac:49:78:df:f0:
                    0b:e3:da:12:34:c0:32:62:d6:28:a4:2b:61:75:e6:
                    c2:34:0d:26:fd:33:9b:56:1c:16:bb:92:8e:bd:46:
                    bb:62:14:b6:86:c2:3f:94:bb:67:98:2f:a0:70:19:
                    ab:2d:5e:fe:98:9c:8d:64:fa:01:21:fe:d0:1d:9c:
                    66:df:43:8c:54:f3:a6:0c:9e:28:d0:f5:7b:1e:41:
                    8d:17:db:9a:94:e5:c0:f8:2b:0e:56:7b:a4:f1:8d:
                    ca:7f:05:f7:6d:22:91:38:01:f2:60:c9:62:ee:73:
                    3f:84:77:b9:c4:1e:21:b4:54:9b:a9:8c:a3:9d:37:
                    d1:fc:14:d6:b8:de:e7:ab:c4:ac:b2:7e:77:35:f9:
                    fd:7b:ef:db:83:cb:4a:67:65:da:b2:5f:04:d0:8d:
                    15:93:04:11:d8:95:13:35:46:dd:b7:4e:d3:91:87:
                    e0:0b:a7:92:6d:03:b2:e6:ef:33:25:8d:73:37:d2:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:20:D2:3D:C2:2E:FE:73:64:6A:3F:D8:52:80:B0:FF:68:1B:94:83
            X509v3 Authority Key Identifier:
                keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:dd:c8:4a:4f:4d:5a:10:0b:6c:ee:33:f3:dd:f9:02:3e:06:
         14:b6:69:5a:e4:4b:83:d8:76:71:a4:08:1e:4b:e6:e7:b3:19:
         9f:b7:bf:9c:6b:df:c6:37:e7:09:48:54:ba:12:4e:56:2e:82:
         b8:bd:31:b3:76:c7:a8:35:9f:22:52:0b:84:23:06:6a:97:74:
         25:12:dc:c8:06:4b:8d:39:3e:03:84:f7:cd:bc:e0:1c:66:26:
         20:80:e9:ab:0f:77:b0:c0:59:6f:88:92:88:25:7a:4f:02:b0:
         7e:c8:42:f9:3d:a1:77:f5:eb:c5:9d:d8:b6:bb:c7:2f:f6:98:
         b4:06:a4:a2:fa:57:e2:65:08:a8:1f:09:12:ce:79:0f:da:6c:
         44:72:b8:8e:9d:58:23:9d:49:8b:8e:e6:32:d5:31:1f:a3:3d:
         6a:c2:36:6d:ca:b8:bd:d9:4a:75:ff:bd:2b:05:5f:d8:ad:01:
         aa:09:d3:c7:ec:ac:6b:be:5e:fc:a2:77:86:b8:f7:16:82:22:
         68:c6:78:06:c4:a1:66:69:d5:d5:73:dc:7a:86:f6:48:53:83:
         cf:ea:8d:d3:eb:d9:49:d6:87:9a:19:88:fc:c8:52:66:03:95:
         2d:51:ca:84:04:d0:19:5e:97:5b:14:e4:e7:bb:bf:fe:ac:27:
         c3:da:70:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:35 2026 by rpki-client