Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File:                     g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier:          QvKPK4MwVG6OpEQ+vuV+uuMCiRQtqtIy9Vfonx6a8bU=
Subject key identifier:   00:C2:87:AF:B2:0A:62:DC:BF:52:88:36:FB:9D:36:2F:71:DF:F8:95
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer:       /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial:       019F9436FEA906E4907AF58B51FCDB238E90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 13:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:59 +0000
Files and hashes:         1: e9eDn1it9NdIiHqx44a7i4SS4xg.roa (hash: D0mw6gNgZUzu18/xmTgF0h13ejYJeMIRk7OFNvDQw/g=)
                          2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: cqMUKEujL4b/oohhpRmk5yMtW3LFnUdlSFrwAmTWBCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:fe:a9:06:e4:90:7a:f5:8b:51:fc:db:23:8e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
        Validity
            Not Before: Jul 24 13:00:59 2026 GMT
            Not After : Jul 25 13:00:59 2026 GMT
        Subject: CN=00c287afb20a62dcbf528836fb9d362f71dff895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:34:55:1d:ac:d7:20:52:25:0b:83:7a:15:
                    76:4a:d2:4d:9b:79:ae:f7:a2:62:8e:d5:3d:fa:f8:
                    f1:8c:21:19:62:6a:9a:15:62:f9:3c:d7:ae:f1:f0:
                    80:f3:a2:56:6b:84:80:f5:7b:3e:e4:ba:73:c6:8b:
                    67:4a:17:53:42:a7:16:98:3a:3c:cb:0d:5e:0d:99:
                    ae:80:0e:48:3f:ca:aa:68:09:e2:62:45:ea:b8:53:
                    04:41:9f:2a:81:d1:81:bd:20:f5:01:0f:e8:92:c1:
                    86:1c:34:8d:db:23:8e:4b:14:25:c1:ef:91:3f:62:
                    7c:57:eb:d4:6a:f8:d8:7f:14:d2:51:6a:da:fd:53:
                    be:4a:05:84:dd:f0:b1:21:7b:15:d3:61:60:c8:f4:
                    52:52:9f:f3:c7:e3:73:bb:ee:38:1a:81:0d:d6:9a:
                    e3:00:af:4d:b3:3a:e7:87:3b:e4:16:ed:04:e6:ad:
                    23:6f:f8:2d:23:59:18:1c:9c:e6:a2:0a:1f:51:5d:
                    85:ba:9d:65:6a:1d:4d:d7:c7:2f:e6:19:b3:7d:86:
                    97:b4:bd:bf:30:58:63:8e:f2:a0:95:60:26:fa:34:
                    1a:99:09:c4:15:40:a3:24:4b:68:7c:e6:81:41:a4:
                    25:f0:d5:2f:ec:a5:b4:36:5e:d0:bd:27:35:fe:60:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C2:87:AF:B2:0A:62:DC:BF:52:88:36:FB:9D:36:2F:71:DF:F8:95
            X509v3 Authority Key Identifier:
                keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:63:18:78:f0:47:22:bf:21:15:52:6a:8b:a4:65:64:81:11:
         c1:db:b8:d8:b2:88:b5:da:83:c5:b0:d8:89:df:9e:d6:55:93:
         20:2e:5d:75:e5:43:8b:70:66:b0:31:a7:9b:f6:53:23:06:80:
         24:00:67:67:14:92:38:89:ad:99:d7:2b:ca:43:ec:79:c4:f3:
         39:43:7b:fa:23:bf:9d:67:c1:1e:39:6f:eb:9e:38:9b:d1:bb:
         fa:20:18:76:38:d1:8f:24:7a:c3:b3:b8:9d:27:c1:93:28:82:
         d9:e4:e7:f8:4d:80:e4:05:f6:c1:b5:a7:f1:3f:a1:a3:74:08:
         42:f8:f6:c2:27:b2:1a:2d:99:42:74:dc:70:01:43:90:68:d5:
         3d:36:72:e7:75:c9:c7:0b:66:e0:34:53:ab:83:9e:fc:9b:34:
         6b:04:35:66:7e:c1:e8:ec:a4:15:1a:23:12:71:6d:df:b0:65:
         6d:ef:b0:b2:4d:5d:59:61:64:15:84:f7:6e:89:42:64:1b:1b:
         39:5f:f9:aa:0c:9e:ce:bf:3b:24:24:c1:85:a3:88:09:0d:22:
         ae:ab:da:6b:1b:54:c0:2f:c2:8d:b5:48:09:66:73:6c:4e:dd:
         3a:66:17:17:5e:ea:f8:db:0b:e9:e5:8c:eb:2c:44:9b:86:d8:
         7b:a2:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:37 2026 by rpki-client