Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
File:                     p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json)
Hash identifier:          Gd/ab8oNqoaoELq4aPjINr22Jit1YbY75uou2siLOpg=
Subject key identifier:   15:78:0E:5E:D6:51:FC:15:51:13:A9:45:AC:C0:9A:B2:31:C9:1F:8D
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Certificate issuer:       /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial:       019F909160F5B7232B0DA07F0E020C0B8DB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
Manifest number:          19F2
Signing time:             Thu 23 Jul 2026 20:01:14 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:14 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:14 +0000
Files and hashes:         1: 7RRyo5mrSZHKaCfweZimJC0UI0A.roa (hash: LQwFNkqaemk7BQFWfMSkrEO4PRaAlztizBh/5pehkzc=)
                          2: HXYyIJwp77xrh-D2GvGeIYjlxSc.roa (hash: Yaww4KhCdEduJ3ZeARFzOtzBnj3+LePhr5NqSxinVtE=)
                          3: bXeDjlFQZxCvvfoeElvquanHuZA.roa (hash: RDVCaZsRUDJaMXpntgU8V0AZhyelN+TpLVWyUrhvuTY=)
                          4: cduC2GbU6mLXIEEHAt29JqjeJ_c.roa (hash: sBtHQn0mqBf5vLWH/WxAyxQgtkjINRc/CcTzUpuSllU=)
                          5: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: lKlr7hkpwHlOP6SNsz/9RHWzT9IeULDGxV9TaZGGz3o=)
                          6: uGGHB9Av3_ThaGzwH8xxsyY9IAk.roa (hash: EQLCZ4pDh+GlnlGdR0v0R9xaKh+vfEuApMYZeBAUdys=)
                          7: z1RV9HlRUrsc0eXa5k4hr7_8KwA.asa (hash: L60YiW4wcsK0ahFFVrtWamuz7Xbp/eEjQXmY54sWCXg=)
                          8: zOPM5DQVOuL2gxGFfQ2OogcDlag.roa (hash: TZhWdIY554lkmlZSQhc2076I8ib8niBs3eBXmmFEKfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:60:f5:b7:23:2b:0d:a0:7f:0e:02:0c:0b:8d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
        Validity
            Not Before: Jul 23 20:01:14 2026 GMT
            Not After : Jul 24 20:01:14 2026 GMT
        Subject: CN=15780e5ed651fc155113a945acc09ab231c91f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:62:7f:ba:7c:b7:7a:52:d3:65:5f:9b:e5:81:
                    38:ee:65:20:6a:6d:9c:cb:97:a0:28:1a:63:ed:4b:
                    83:cd:83:61:0e:6f:82:d8:a1:7d:36:34:26:5a:a1:
                    67:c4:65:5e:ac:47:fa:be:d9:b2:70:7b:c8:0d:01:
                    34:13:ab:be:49:96:ab:b1:bb:bd:ed:ac:52:69:29:
                    0d:b7:dc:e3:65:05:52:72:10:32:05:d5:a3:65:c5:
                    bc:df:7d:4f:2e:aa:22:c4:9e:8d:40:c3:a2:73:3e:
                    e7:dd:f2:55:51:14:16:1e:84:25:63:dc:8b:35:a0:
                    0c:cd:bf:14:c2:98:d2:73:3d:c5:09:d1:a1:97:36:
                    4f:2f:1f:af:f7:64:be:3d:d9:99:08:0f:83:f3:12:
                    e4:e9:6b:0d:59:de:b1:68:cd:7c:9c:8d:11:59:3d:
                    23:96:45:1d:15:97:bf:2d:34:cd:af:42:5c:c9:67:
                    60:e6:ce:66:2c:5e:9d:ad:fd:72:bd:07:02:99:d1:
                    e8:67:93:93:27:89:9f:a1:cf:4f:8b:cb:9a:96:49:
                    5b:2c:d1:4a:3b:4f:57:87:46:c9:90:4b:e4:f2:14:
                    1b:ed:43:b9:7b:95:5e:58:11:ac:c8:db:34:9a:be:
                    03:e4:7a:ec:c8:94:d8:95:1e:d3:e8:4d:9e:5f:f5:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:78:0E:5E:D6:51:FC:15:51:13:A9:45:AC:C0:9A:B2:31:C9:1F:8D
            X509v3 Authority Key Identifier:
                keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4c:5d:b9:f9:1d:a3:ac:97:9c:1c:e4:fe:96:86:ff:5a:44:
         d9:21:6d:5d:5d:56:5c:ab:90:96:71:ba:7d:5f:7a:1f:bf:c9:
         72:a9:03:b7:f7:7a:ef:3f:87:b4:9f:ee:93:11:0b:da:46:59:
         fb:29:99:18:2e:9c:29:7a:f6:cf:d3:58:f3:eb:04:5f:39:75:
         93:ee:46:8c:52:39:c8:dd:7c:00:10:8d:4a:20:2a:9e:9b:29:
         33:d4:0c:d0:d8:1a:ae:0b:c1:47:b2:42:02:7f:1b:a5:ca:39:
         d2:c9:db:d2:dc:9a:1a:b8:15:9d:a4:7a:51:fa:5b:41:42:23:
         04:35:e2:f8:44:43:64:2c:08:28:5e:3e:cf:65:ca:45:e8:fe:
         bb:df:2b:03:85:7c:de:79:2c:35:15:aa:25:3b:40:d7:54:c2:
         f6:74:bb:e7:05:0b:7d:98:73:cc:c4:cb:08:fe:f3:6d:67:8d:
         52:1e:52:7e:5f:b9:e5:3d:54:44:a9:20:8b:0e:bb:8c:3b:e0:
         24:08:68:5a:18:87:35:44:c5:65:36:cd:8d:12:47:d7:ad:33:
         81:1d:aa:51:41:c7:84:64:1b:91:e3:3a:fb:7d:e9:2f:36:35:
         a2:db:98:50:d2:a7:74:46:e2:fc:57:c6:c4:7a:f4:1c:b7:5f:
         4d:91:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:18 2026 by rpki-client