Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
File:                     dvMR7xWBoA5DfNcEtigayGIa_FY.mft (raw, json)
Hash identifier:          uIYkG8rHYCSUWizVx14USdQZ3a4h1bdlmtWB47p0zXU=
Subject key identifier:   80:CF:34:0F:98:C1:70:6A:64:03:C1:EF:C5:73:A0:02:67:E4:08:A1
Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
Certificate issuer:       /CN=76f311ef1581a00e437cd704b6281ac8621afc56
Certificate serial:       019F9248EDF31C6D217D5882CFE58DFC390D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 04:01:20 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:20 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:20 +0000
Files and hashes:         1: EgjChhzCGWJh6V51f8ojCveMlfE.roa (hash: i4SrxX9zQ7sZ8KNvnrH9l0DYTEr6ZfYVUcw4c3JUaOg=)
                          2: dvMR7xWBoA5DfNcEtigayGIa_FY.crl (hash: LuiJCG4x1nsCFTm4qV5q99RD7yAkeA7hNBpX86Tk5Pg=)
                          3: ecxP7yyvs7CjkRo9KB8FI7T6FDs.roa (hash: 4i3J/7t1Nmd5wxQ9E88B1NzpAXYXfppM1pUv7/HsY1U=)
                          4: m_PpEyyAvYLnKjvZhlOvXK-I4ZQ.roa (hash: CGzyhARdUayk5Rcj/oSQUQybGpjh4LHVdpnFc+0u73Y=)
                          5: vs9qa_eW2Cldpu5SYtJB_2StoHA.roa (hash: sQEg+HGHtbznkdfcmi0Loy8MM366S1BHj7BDrGmut4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:ed:f3:1c:6d:21:7d:58:82:cf:e5:8d:fc:39:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56
        Validity
            Not Before: Jul 24 04:01:20 2026 GMT
            Not After : Jul 25 04:01:20 2026 GMT
        Subject: CN=80cf340f98c1706a6403c1efc573a00267e408a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:8c:fc:72:dd:05:5b:a7:20:aa:2b:a5:f6:
                    1f:3f:a3:1c:48:3b:d1:0f:67:9b:2c:08:ed:0b:61:
                    4c:3d:18:23:82:ec:c9:83:49:f9:2d:f7:c8:12:47:
                    44:05:23:88:e9:76:da:18:6b:6c:6c:78:28:82:b8:
                    2e:05:31:8b:e4:a0:ec:a8:08:d3:2c:6e:c7:cb:9f:
                    54:af:dd:b7:aa:8c:ae:b0:20:92:52:d7:02:62:48:
                    04:4e:19:5b:bb:e4:c1:b2:e5:ea:f5:30:90:f1:3c:
                    a8:a3:85:49:52:4f:de:ce:e0:f4:87:d8:3a:4a:c3:
                    4a:0f:87:da:8d:98:4c:0c:c3:fd:e9:e7:3d:e3:a5:
                    aa:68:98:47:61:09:94:5c:de:e5:b0:9c:b9:79:3a:
                    9c:a6:0e:25:f9:2f:0c:7e:ca:b4:a3:41:ad:26:1e:
                    8a:5b:92:74:c2:0d:fe:8f:03:4c:c0:40:13:1a:6c:
                    8c:8b:56:ba:09:67:02:99:3f:e0:87:41:ad:31:34:
                    5f:d0:ef:34:c4:9b:91:ee:b9:c6:58:30:73:18:ef:
                    6d:65:a3:a0:0e:1b:6d:c4:4b:b8:56:2b:2f:3f:f7:
                    b6:c7:7a:1e:3f:d1:c3:ce:6c:ed:90:3e:74:db:d5:
                    86:23:8f:08:b1:d8:74:f4:d1:84:00:70:f0:74:07:
                    33:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CF:34:0F:98:C1:70:6A:64:03:C1:EF:C5:73:A0:02:67:E4:08:A1
            X509v3 Authority Key Identifier:
                keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:41:2b:b8:ff:e0:e6:1c:57:57:37:38:3b:da:ff:0f:4c:96:
         6e:09:5c:f5:b6:ca:77:18:aa:c8:39:3b:51:f4:61:0a:8c:56:
         a2:e4:f2:de:f0:a2:04:83:d3:dd:76:c1:44:68:4e:09:f3:69:
         a9:b1:ea:80:68:a0:34:be:3d:8d:31:35:67:2a:02:f6:3d:9b:
         58:df:8d:71:f5:67:b3:43:e7:9b:3a:5a:57:60:95:d2:7d:a9:
         ca:f5:79:36:43:bc:68:72:ad:67:23:e9:2d:fb:77:5a:33:0e:
         5c:4f:67:b3:ec:6d:83:7a:bb:73:4b:92:bf:cc:30:79:6d:1b:
         b4:57:06:f3:15:32:9c:8e:e9:4a:45:b7:05:de:f4:9d:1b:b4:
         1d:ae:66:7d:3c:d9:d3:6e:a4:a0:79:74:b2:bb:80:56:d5:90:
         db:3f:d8:2b:5d:df:03:7f:c8:c5:03:22:20:50:a0:0e:00:9d:
         d6:15:fa:f4:d1:ba:18:80:04:48:d1:89:b6:d2:d9:7c:e1:b8:
         fd:66:35:bd:7a:2a:93:05:00:30:11:cb:6d:b8:da:4b:65:3b:
         0e:3f:7b:ba:fc:6f:b4:10:22:58:25:a0:a1:33:83:d7:1e:7b:
         22:02:a4:8d:07:c2:06:62:b1:ab:ae:88:1d:ec:f4:8d:e6:8c:
         b8:53:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:09 2026 by rpki-client