Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File:                     E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier:          lbgxYe47uETZ85t17+WzvMgz/XPSWwJRvqNr5bWhIUs=
Subject key identifier:   68:EA:23:11:25:D2:5D:2C:07:01:C4:19:B6:6E:A4:C3:6F:E3:A4:A2
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer:       /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial:       019F8FB5475959A77E9EEF0E523A9E06D8EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 16:00:49 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:49 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:49 +0000
Files and hashes:         1: CvvGlgWm1GcrOms2BMDm3Ft3YIE.roa (hash: BlTzWac/CA3jlASMLpb4LLRmE80n50trJVbAwjMNvXU=)
                          2: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: knV+qxVPdkXEP1k6EkIplQxFnGejLCAEe3k7dWFYpME=)
                          3: dkLJNc8YE1qupqt8vejn4yN_8pU.roa (hash: 9F30pB6QAME+aQUtJBPApccmf32qIQY7Y6P8efT0WEs=)
                          4: fvrmT3BDya5vUxums74XuzYqty0.roa (hash: q+hIuLuMabVUkBWiWW3pA8MFsL2LuFbfABq1AZhRA2Q=)
                          5: j4On1jEgDqGHCrQyanmlHTLIPfU.roa (hash: FBZAhcfJ9YrnvMKAbA0ULbxZIF42C1VrsQa2aWPitG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:47:59:59:a7:7e:9e:ef:0e:52:3a:9e:06:d8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
        Validity
            Not Before: Jul 23 16:00:49 2026 GMT
            Not After : Jul 24 16:00:49 2026 GMT
        Subject: CN=68ea231125d25d2c0701c419b66ea4c36fe3a4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:21:1a:2f:10:6c:90:4b:6d:c1:06:f2:15:
                    43:e0:92:e1:9e:fa:ec:b9:ab:4e:91:e3:b4:90:c1:
                    df:27:e5:33:53:34:a4:91:93:e0:bd:c2:c0:c4:2d:
                    8e:5f:ad:79:d2:07:72:4e:7c:96:af:06:74:8e:c0:
                    bf:3b:21:b8:62:6d:60:da:e7:51:34:ac:59:ff:16:
                    1f:31:85:4e:51:71:f7:68:8a:1d:8f:43:f8:d8:0b:
                    c9:22:e8:71:07:f4:08:ce:c5:48:c6:b9:24:89:22:
                    11:1f:08:80:36:30:b5:a9:83:93:6e:61:ed:ce:f4:
                    52:73:60:38:b7:d9:6d:ec:37:79:72:19:32:96:01:
                    52:66:8b:18:8a:8e:e9:3e:79:a2:6c:5b:c1:a8:8f:
                    f9:54:09:9b:f6:34:8e:f2:66:a2:04:26:2b:94:fd:
                    ac:cc:1c:3e:60:43:fc:f0:fc:f9:31:01:68:30:a5:
                    48:08:51:03:89:4a:ee:fb:31:6f:05:df:e9:b1:e7:
                    47:ea:87:a6:23:fc:32:f3:49:d5:fb:97:08:72:d7:
                    2a:07:e3:4e:56:11:a6:8d:c7:a1:e3:27:8b:e6:81:
                    da:5b:d2:57:05:2c:ef:80:05:e1:9a:57:2e:b3:ef:
                    12:18:3b:23:51:d2:a7:c5:55:26:f9:ca:e0:99:0a:
                    b1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EA:23:11:25:D2:5D:2C:07:01:C4:19:B6:6E:A4:C3:6F:E3:A4:A2
            X509v3 Authority Key Identifier:
                keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:61:37:28:84:78:93:29:71:80:ad:4a:0a:37:9f:3f:b6:8e:
         7c:9b:b7:42:48:dd:37:01:f4:44:08:b0:3f:7d:4e:1b:44:da:
         4f:8c:f8:20:01:ab:97:fc:0a:21:6d:a2:dd:76:75:20:dd:83:
         65:04:48:03:9d:7f:8b:fd:f4:e4:ed:8a:71:a4:48:86:02:ef:
         c9:2a:1c:a4:4b:92:dc:15:16:d8:2c:a9:93:8b:c6:9c:e4:fd:
         21:11:2c:5b:69:d8:48:83:a3:ff:c4:c3:0d:36:e1:37:9d:7a:
         b9:13:ed:87:8a:5e:a1:58:17:1e:4c:78:84:cf:27:21:34:bc:
         df:92:06:18:83:fa:62:d0:c3:e0:42:0c:d1:eb:d3:3b:0a:87:
         a0:13:41:72:c9:d2:cb:a9:ea:77:bf:4f:f5:7d:9e:67:a8:da:
         62:b5:9d:54:d1:00:34:01:ed:c2:94:7a:89:ea:07:f0:90:44:
         b7:f6:bf:15:8f:bf:f3:4a:a0:a9:73:ae:1c:97:9f:ed:b6:bd:
         ab:19:8b:b5:94:5b:1c:72:22:1f:55:78:aa:28:89:f3:0e:50:
         f3:a4:6f:06:c8:c6:15:9c:73:30:1b:c6:92:a1:79:f8:8a:c4:
         52:22:10:2c:44:30:bc:66:51:52:ca:d3:a9:7d:a5:c5:86:50:
         72:2d:ed:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:21 2026 by rpki-client