Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File:                     Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier:          xSL/JfOdyY3Lc19qv91lQUXtiQK0eK2HQOSZxxC4ub4=
Subject key identifier:   07:9C:B6:DE:23:D8:64:6E:72:58:15:58:06:D1:E4:86:25:3C:99:A8
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer:       /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial:       019F916CACAE53D8502CECBE746275D43517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number:          19D8
Signing time:             Fri 24 Jul 2026 00:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:46 +0000
Files and hashes:         1: 0MnT-Cev0aWfox9D3TA-NvqEMlk.roa (hash: JJLpUG+0ObMqR5bxSAi6saPQ/DL3PUHcYLY29JhBmbE=)
                          2: 1-LbhNdw_AJV43onNE0QCUpCX6so.roa (hash: dSYVcw8EiYO4/PAbhwcAgMdvgRcG7f4kUZi0vNXjJIw=)
                          3: 4BHAHtAhc28ZrQwUD5OHuec1Ir8.roa (hash: 0iGZlpXjvTxGNf9N3a9R/JttWSb6ffwtMSks1EBv2mQ=)
                          4: 4qWGLPeV9cfuGGpVtJBLff_UhD4.roa (hash: fsCbic0Uc+tcg0uG7d9ay2R7taJTtXFIv1SOgaMPRbM=)
                          5: 9h9M7PjhCe5Xzh52sY19F_HCfoo.roa (hash: dKnlXAO85KhguToJuoLLUtMZOEcwIkloXdGeaFlciRA=)
                          6: AFX34QTnP207XVV_8PKrJ8TJVJg.roa (hash: hVizqqIjbbc78J/ZubGhAhYsI/9yAoa6vJ1uP6RfMPU=)
                          7: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: AEMUjhWzaUviOnD2lZ7LJkgvqFodSBQVEt7iT8aSIfU=)
                          8: kHyEvJhu_w11Kx9L4McOAF2P03o.roa (hash: jmuEXw0e3wCECNG5mj5zMNmwosrMAavIJYnu60jwGTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:ac:ae:53:d8:50:2c:ec:be:74:62:75:d4:35:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
        Validity
            Not Before: Jul 24 00:00:46 2026 GMT
            Not After : Jul 25 00:00:46 2026 GMT
        Subject: CN=079cb6de23d8646e7258155806d1e486253c99a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:a6:57:8f:26:ce:11:2f:40:e5:65:5c:f2:
                    62:2f:3f:e5:18:8f:d8:5f:24:ae:9c:54:07:1a:b8:
                    fa:75:93:61:24:67:d4:e7:8a:f2:6d:5e:2a:15:a9:
                    3d:30:0d:b8:f8:a1:09:40:9d:1e:68:af:91:ca:50:
                    44:36:5a:71:5c:03:16:ee:e3:df:db:f5:24:97:98:
                    94:35:1b:41:92:6b:6c:17:64:68:07:e2:49:3f:e3:
                    0b:60:c0:06:e9:0e:96:f2:b5:5a:33:60:ae:9a:ae:
                    2b:9e:a6:5e:48:3e:df:c2:4b:96:5a:c6:39:b6:48:
                    e3:92:4a:f6:b9:97:13:08:8a:98:e2:65:05:7c:c6:
                    92:2b:d3:11:f2:cc:68:b1:f1:6a:ca:c4:80:69:15:
                    e2:4e:7b:da:a3:35:73:6d:b5:a6:a0:67:b4:77:01:
                    e7:d2:75:3d:8f:21:9a:ff:58:3a:fc:91:0f:27:1d:
                    39:c1:1a:af:02:b7:0b:93:8e:26:c0:78:08:8a:cc:
                    52:75:05:42:48:a4:d0:8d:69:65:7c:d6:8a:1b:e9:
                    a1:6c:77:5e:2c:b3:2f:e2:12:9e:42:be:89:58:b2:
                    97:df:b8:f2:21:e6:68:ed:28:81:b9:d8:d4:d3:8e:
                    b9:c9:de:5a:83:0e:eb:53:b5:5d:2c:b8:a6:88:2c:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9C:B6:DE:23:D8:64:6E:72:58:15:58:06:D1:E4:86:25:3C:99:A8
            X509v3 Authority Key Identifier:
                keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:83:3c:86:9b:9a:63:39:5a:fa:f8:c0:64:56:c8:2c:f3:
         9e:33:98:57:5a:e5:8e:4f:33:ed:5d:96:31:24:24:61:95:d7:
         65:a5:fd:cc:66:5d:8c:39:18:58:5f:bf:2a:a3:41:2a:6a:a1:
         1d:b2:db:f7:d6:bd:90:be:2a:66:4d:f7:00:09:59:a4:81:c7:
         a2:18:21:44:a1:e7:d2:05:22:22:fc:33:13:e6:13:2b:31:bb:
         6d:a9:f0:b6:ab:24:99:8f:95:be:73:ba:b4:89:56:eb:9e:08:
         47:d8:ed:1f:51:36:d2:4a:6d:ae:55:8d:e3:9d:62:4d:d5:34:
         9a:2a:88:30:17:13:39:3d:f8:2c:75:b7:88:0a:ea:67:5e:3d:
         c6:6c:d4:f0:db:be:57:db:19:fd:a8:16:80:e1:f0:3e:6f:92:
         27:00:a8:b5:ad:15:a6:51:7e:53:84:2d:b2:f7:96:9d:18:d7:
         11:b1:5a:af:b0:de:d5:d3:d9:ba:37:e3:ec:0d:e4:15:7f:f4:
         82:ef:62:4a:05:c7:91:74:1e:eb:1b:1e:5b:fe:e1:dc:8b:39:
         9e:ee:71:3a:47:3a:3e:c4:29:20:81:57:a8:a3:47:23:bd:ec:
         fb:7f:11:4b:a4:96:a7:d4:32:81:34:b3:de:85:b1:07:9a:32:
         37:68:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:22 2026 by rpki-client