Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
File:                     o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft (raw, json)
Hash identifier:          vXQjBYpxdrM7ClKgZv4OjGwC/LgNx+Hom6IDntNO//E=
Subject key identifier:   75:EE:9B:DE:EE:79:80:5A:88:98:15:AD:15:E2:68:D7:4A:77:F6:5D
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Certificate issuer:       /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial:       019F95120CF66EE44AB3F26997414FB5B398
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
Manifest number:          19DA
Signing time:             Fri 24 Jul 2026 17:00:15 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:15 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:15 +0000
Files and hashes:         1: VeJsCt1PB5bgMLVf-MsLYH6e7LQ.roa (hash: PrU9zmhMpmRMgh3C3teCNmvz1i0g6szB8JeyH7euSZk=)
                          2: _jjiEn_0KRxjLGF802rPc0LFUKE.roa (hash: gAIQze9dIXWej1/MxLektAvIo4bB6BkzbYun5VRQHxI=)
                          3: o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl (hash: uxqGCLkNsjS5cvbQmol3m4GwTed7gan1BK30rjJmDXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:0c:f6:6e:e4:4a:b3:f2:69:97:41:4f:b5:b3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
        Validity
            Not Before: Jul 24 17:00:15 2026 GMT
            Not After : Jul 25 17:00:15 2026 GMT
        Subject: CN=75ee9bdeee79805a889815ad15e268d74a77f65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8f:36:22:bf:3e:d7:a0:8e:4a:99:f9:68:e4:
                    6e:3c:a5:71:ec:32:29:f8:83:40:c4:fd:1e:f2:35:
                    5d:59:d4:a8:2f:c7:f5:d3:2f:5a:65:4b:61:ca:bc:
                    db:2d:d4:b7:c7:6a:49:3b:95:48:94:58:1a:ee:f0:
                    65:17:7d:0c:3e:0b:dc:5e:5c:9a:c2:a2:ab:e9:3b:
                    ce:44:e1:55:9e:06:ab:e6:e6:04:7b:3d:12:78:4b:
                    ad:a3:9e:8b:ef:6d:f5:ab:8e:63:b5:38:49:cd:85:
                    ca:7f:02:17:75:b5:d2:f0:2f:7e:aa:da:1f:63:68:
                    3a:cb:e9:26:a8:de:f2:8f:23:a6:31:be:c2:3b:67:
                    19:de:0d:de:9d:f6:b0:66:fe:bf:0c:bc:be:9d:21:
                    db:a9:de:80:7f:8e:da:6d:b8:2e:8c:96:b5:82:82:
                    e8:eb:3a:c5:6b:aa:3c:da:d2:56:56:f2:ec:e4:2e:
                    f1:59:4c:ae:eb:e6:ac:06:19:39:73:94:03:31:3c:
                    10:09:07:40:04:21:4b:df:e5:58:44:90:9b:26:7b:
                    59:c2:b1:35:54:76:1d:58:11:84:c9:55:5d:e5:b2:
                    e1:1c:bc:a3:e7:3b:77:d6:37:b5:75:4b:d9:5c:4e:
                    97:1f:78:c6:01:eb:dc:8d:b3:40:47:5d:3d:a4:d9:
                    7e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EE:9B:DE:EE:79:80:5A:88:98:15:AD:15:E2:68:D7:4A:77:F6:5D
            X509v3 Authority Key Identifier:
                keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:14:1d:fa:49:d2:ae:4e:41:28:c6:11:7b:89:98:92:3f:15:
         fa:12:d5:47:9d:7b:fe:14:19:9d:c1:17:f3:38:ac:3f:18:55:
         be:d1:b7:b7:fb:18:c3:33:b3:26:36:50:f2:81:12:fc:87:c1:
         7e:77:03:99:c5:cb:87:b2:45:1e:e4:e4:83:16:85:2d:9e:c4:
         8f:de:a5:66:a9:94:50:23:cb:4b:a9:aa:67:4f:7d:55:63:d3:
         b8:3d:ab:d6:4d:df:a7:62:28:ca:f9:ea:a0:61:01:d0:50:57:
         95:7e:ac:01:a5:0f:46:70:3d:cd:6f:df:c9:78:3a:e5:48:76:
         be:c0:53:86:ed:4f:db:ad:6b:5f:88:4f:6d:28:99:51:49:31:
         b6:a7:50:28:7f:36:13:2b:9b:94:06:eb:ad:f8:91:29:7a:85:
         23:28:b3:b7:36:bb:7a:78:41:10:19:02:04:ca:cc:02:67:13:
         f5:7f:21:3c:69:28:94:53:bb:09:4d:73:3f:71:83:72:bf:78:
         f5:56:79:3f:21:15:e2:01:50:2a:d0:30:21:1b:cc:a8:1f:5f:
         27:b0:c3:a5:b3:00:95:9d:55:5e:e0:f9:94:57:55:8d:cf:e7:
         2b:1a:5b:67:89:b7:a9:0f:60:05:14:fb:fc:ac:43:3e:b2:44:
         9e:0c:ac:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:46:28 2026 by rpki-client