Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.mft
File:                     510D73UIMrK8zukAl6l-m65W1UI.mft (raw, json)
Hash identifier:          GvX7z3iXMkV9jpA2L7BTmcQNZCUWBTPVkwSoGPBHISo=
Subject key identifier:   2C:C6:0F:F7:8D:81:B3:DE:BF:D7:6D:E7:26:D7:00:1E:4E:EE:E0:E1
Authority key identifier: E7:5D:03:EF:75:08:32:B2:BC:CE:E9:00:97:A9:7E:9B:AE:56:D5:42
Certificate issuer:       /CN=e75d03ef750832b2bccee90097a97e9bae56d542
Certificate serial:       019F8FECCC2023C3D0EF1A5341C0B73EE4BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/510D73UIMrK8zukAl6l-m65W1UI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 17:01:28 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:28 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:28 +0000
Files and hashes:         1: 510D73UIMrK8zukAl6l-m65W1UI.crl (hash: 3b13WIy64HHKXt0gmVFc0mfzQRcTN21DuVI4G4/iBEs=)
                          2: xOQzIz75lAWdGvsczpzw-mOsx48.roa (hash: plurgHJiRi0HXi8YT7nPx4/38GnV4aGxFs5z0lgHBMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/510D73UIMrK8zukAl6l-m65W1UI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:cc:20:23:c3:d0:ef:1a:53:41:c0:b7:3e:e4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e75d03ef750832b2bccee90097a97e9bae56d542
        Validity
            Not Before: Jul 23 17:01:28 2026 GMT
            Not After : Jul 24 17:01:28 2026 GMT
        Subject: CN=2cc60ff78d81b3debfd76de726d7001e4eeee0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:cb:fb:94:17:76:59:8b:a9:df:45:c0:23:
                    aa:79:17:ae:4d:a5:8f:2c:a3:79:a5:24:a3:f2:b5:
                    82:d5:92:fd:f6:70:73:92:2a:d7:a8:ec:29:9f:21:
                    69:67:16:f7:a2:2a:1b:df:29:70:07:38:03:06:c0:
                    d9:27:7c:bb:93:c6:c2:bc:a5:d3:2d:5b:07:c3:d1:
                    0c:71:5b:b8:6b:a3:f0:50:60:f0:32:f4:89:a0:79:
                    27:4e:9d:b7:a9:91:98:84:e0:55:57:da:38:44:f2:
                    fd:9c:d0:7e:4e:28:99:96:12:5e:61:ce:14:fd:1e:
                    59:0f:92:f3:d9:92:db:f6:f1:9a:6c:46:e4:97:be:
                    f2:c4:9b:51:08:d9:87:95:56:2c:a5:91:37:d6:91:
                    5d:6a:c2:88:ce:38:81:16:13:bc:c2:92:6e:af:a8:
                    2f:f1:6c:71:9b:79:ff:a8:af:e0:44:a7:6f:4d:63:
                    3a:01:3c:ee:7b:13:5a:cc:fc:ba:29:86:5d:9a:4e:
                    d3:ec:5f:21:ff:94:c8:78:cd:fb:d9:9d:a2:45:f1:
                    62:e9:ee:58:98:bb:62:78:d7:0f:2c:2c:5a:0c:33:
                    18:95:5e:32:58:11:69:dd:ba:5c:36:1c:e5:fd:42:
                    68:a3:9f:ea:f9:12:2f:38:87:ea:0c:d4:51:d7:2f:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C6:0F:F7:8D:81:B3:DE:BF:D7:6D:E7:26:D7:00:1E:4E:EE:E0:E1
            X509v3 Authority Key Identifier:
                keyid:E7:5D:03:EF:75:08:32:B2:BC:CE:E9:00:97:A9:7E:9B:AE:56:D5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/510D73UIMrK8zukAl6l-m65W1UI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:31:ce:d6:3f:eb:a9:38:79:af:d9:4b:08:15:0d:96:af:d7:
         cc:17:bb:ca:3a:bb:a0:45:75:73:85:28:c7:54:95:37:66:0d:
         b7:77:17:82:f7:a3:24:fe:82:cc:4a:ad:01:b1:5c:7f:d5:ef:
         3c:eb:9e:c9:af:7f:b7:4e:2c:b6:fe:1c:b4:36:3b:1c:2e:c1:
         f6:5a:2c:4b:8d:02:66:84:91:05:c3:ca:07:63:fd:20:17:94:
         47:57:d8:85:fd:ce:97:1a:65:e0:73:a4:07:b7:84:fe:c4:50:
         cd:43:53:f3:f6:f7:b5:af:4c:e6:f9:d1:c1:3d:a4:03:0b:4f:
         ec:74:fd:fb:5d:75:d4:4f:f8:da:2c:d8:2b:6a:02:47:4a:ec:
         f2:30:af:03:2a:26:99:ec:7a:08:e4:86:a7:ae:1e:61:7b:ce:
         a9:b4:b7:45:e4:9a:99:15:ea:9c:a5:c1:8e:ff:9d:88:05:71:
         f1:2d:5d:3e:28:1f:c6:17:20:c4:28:6e:10:bd:71:95:56:9b:
         74:da:25:a7:e5:c6:db:64:f0:36:a9:ef:a7:3e:06:d7:c3:e3:
         90:ae:40:1b:5b:a7:87:08:9c:dd:fc:3b:58:8c:17:a0:1b:eb:
         38:df:92:bc:4b:0b:77:40:e5:5e:e9:f1:3d:15:9b:dc:2e:89:
         43:28:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:25 2026 by rpki-client