Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
File:                     hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json)
Hash identifier:          1qkRKkCgXzP/XiOn+1rR9+d1Vg9rhWaWpficQwybZ7o=
Subject key identifier:   1D:BD:3D:70:A0:89:BB:5D:3D:4D:09:6F:D0:C1:15:19:92:EF:43:3C
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Certificate issuer:       /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial:       019F9436DAF3A44DECC1414A54579C6F3922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 13:00:50 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:50 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:50 +0000
Files and hashes:         1: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: t2wrRGdvO6/mX8VaxCM0xCV+EruoXybD5AbXmuaU9o8=)
                          2: lGyQDQVBEMCDFsipbxjBTxxJg7Y.roa (hash: /B4wk8kwo/lxwB8Izsd2oZk4yH80dIbNot8H0bXk6bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:da:f3:a4:4d:ec:c1:41:4a:54:57:9c:6f:39:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
        Validity
            Not Before: Jul 24 13:00:50 2026 GMT
            Not After : Jul 25 13:00:50 2026 GMT
        Subject: CN=1dbd3d70a089bb5d3d4d096fd0c1151992ef433c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:75:92:bc:e0:b7:e8:15:9b:bd:a9:17:8a:
                    c2:5a:95:54:36:35:1c:a4:45:6c:45:b3:52:5e:eb:
                    06:20:4c:ac:77:a5:ef:51:5f:bc:6d:98:e1:32:36:
                    6c:96:7f:9e:d9:dc:a3:6f:41:31:c1:59:53:80:ff:
                    27:5c:7c:a7:64:43:f3:0d:18:6e:9f:1f:06:0b:03:
                    e5:f8:18:77:63:d2:8c:db:3b:f0:ab:9f:bd:fc:1a:
                    b4:c3:97:03:83:dc:a0:6c:9b:c3:24:12:71:d1:a0:
                    1d:38:13:8d:41:e1:36:38:83:70:7c:16:38:88:b0:
                    fa:b0:a5:08:7a:f9:a4:eb:fa:fd:26:4e:f9:1d:22:
                    f3:f8:a1:51:45:d2:53:ff:7c:f2:92:a5:b0:8b:45:
                    c4:cc:19:59:7e:87:b1:ab:9c:0c:fb:9e:97:c3:9d:
                    12:08:da:2e:f9:99:f5:b6:a4:ef:bf:9d:3a:ee:37:
                    06:f7:1b:17:6b:2a:f5:c9:10:41:bb:3f:29:1b:39:
                    7a:d5:10:4d:68:b2:e9:5f:90:54:3b:cd:14:b3:15:
                    48:9e:97:8b:30:d3:01:50:da:10:26:a9:eb:31:f4:
                    de:bd:d1:b4:b6:50:a8:55:26:68:af:cc:73:2f:ec:
                    ef:d8:bf:94:9c:85:da:d8:1f:65:a4:c2:2b:32:e4:
                    5c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BD:3D:70:A0:89:BB:5D:3D:4D:09:6F:D0:C1:15:19:92:EF:43:3C
            X509v3 Authority Key Identifier:
                keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:85:1a:89:88:ad:63:e1:bf:f0:57:97:e1:a0:1c:bc:2e:d5:
         55:cb:c7:6c:b5:86:21:f2:13:7e:0a:9c:78:91:90:3c:83:2c:
         4f:b4:f4:ed:cd:f3:42:ed:54:ce:36:d8:6a:4b:c7:a8:3f:82:
         9b:eb:32:19:f4:d9:39:05:33:d9:97:9d:4a:68:c0:94:d0:a4:
         7d:79:4f:4a:01:76:c2:6d:e2:72:91:da:a5:92:9b:bb:ab:2c:
         08:5d:32:f3:0d:56:7e:35:a4:a2:a7:7d:c7:78:bb:99:3b:df:
         e4:41:0b:e6:56:83:35:f2:88:80:b2:b7:90:76:f8:d5:96:30:
         8e:94:f4:41:c3:4d:36:a8:d9:57:be:68:cc:f8:af:02:5f:8b:
         71:fd:9e:9c:f6:bf:c5:3c:e6:91:27:86:0a:7f:fd:02:69:22:
         27:5b:b8:21:69:8a:42:9c:f7:23:14:80:02:fe:99:94:63:39:
         4b:30:d1:a5:3f:f9:13:5e:f7:83:14:03:c8:03:a3:c3:19:d2:
         cf:a4:1e:d4:91:76:d3:61:2a:c8:f3:d5:6c:8a:ef:b4:49:66:
         d8:29:f7:66:83:79:6f:a5:8f:ee:7f:30:7b:66:ce:e7:3c:13:
         7a:20:4f:2b:64:bd:de:c9:41:1b:c5:92:86:75:27:d1:2e:0d:
         d7:03:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:38:01 2026 by rpki-client