Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
File:                     cuv4F-GpLzzX9J32oxwmX_5HgAg.mft (raw, json)
Hash identifier:          fa8z2zGwgb5y/BAspEixesI2jI6YxyrGmMZisGiaUtE=
Subject key identifier:   F1:0B:54:6D:D0:9E:19:F2:0C:12:77:D7:60:EE:15:F1:54:AE:25:5D
Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08
Certificate issuer:       /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
Certificate serial:       019F93C8BC99D3ABA6102717D0143C4973C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
Manifest number:          02A8
Signing time:             Fri 24 Jul 2026 11:00:33 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:33 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:33 +0000
Files and hashes:         1: 1y5lvBRirf64QUUNUs-wPlahoEo.roa (hash: LhMcKD7g9vzXQej5bGx62E/rTFGZbxyNoCRC/nLvA8U=)
                          2: QV7nlixfPKhI7EyPWNfAD7Hr-34.roa (hash: RcoZUOLY0DZ86B3NQRroG5VCtYfjUx1K45ubhmkvdMY=)
                          3: cuv4F-GpLzzX9J32oxwmX_5HgAg.crl (hash: l9kJjJRB3tZv9Pt12sSclqP4vN5lipcJXYvmaF4sCJk=)
                          4: gs8em47DaB3LrlDmXLkgpxaB21Q.roa (hash: cb+0Kb2KZEjJwHjkLW7WFeSKNJZu/ACiHcXkWiE0wNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:bc:99:d3:ab:a6:10:27:17:d0:14:3c:49:73:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
        Validity
            Not Before: Jul 24 11:00:33 2026 GMT
            Not After : Jul 25 11:00:33 2026 GMT
        Subject: CN=f10b546dd09e19f20c1277d760ee15f154ae255d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:da:3e:7d:9b:47:03:e9:07:e0:59:52:d8:
                    8d:b6:a1:8b:1e:d7:e5:c1:d7:9c:16:d5:cc:f3:33:
                    b3:00:9f:15:93:c2:bf:28:cd:b4:fc:07:39:aa:7e:
                    14:b6:34:c6:71:7a:c9:2e:c3:71:fd:af:98:30:c1:
                    04:eb:7f:a8:1a:94:a4:b3:1b:31:0a:d7:bd:70:9a:
                    89:be:14:bc:83:d1:5a:e1:ec:35:20:8d:cf:d0:7a:
                    56:3d:e2:72:3c:40:1a:83:ca:0d:0b:47:28:70:42:
                    95:db:4a:c2:a1:5f:73:61:44:a6:61:f9:9a:51:4d:
                    22:96:62:f4:d2:06:28:03:79:c1:67:18:83:d0:59:
                    74:c8:95:44:80:db:d7:2c:3c:26:50:a0:8d:08:6a:
                    5c:05:ec:34:a0:8b:66:b7:49:0c:ea:cf:35:d5:59:
                    d0:3b:ea:24:b8:b9:a7:7e:2a:18:3c:a4:eb:6f:8a:
                    26:57:f7:69:17:6b:70:0d:63:a9:57:32:32:3e:3e:
                    80:c0:7b:ce:13:8d:74:35:6b:5b:02:99:2e:7c:ce:
                    78:e9:55:4f:b1:6f:00:76:f7:e5:a4:29:48:ee:32:
                    cb:99:df:3b:c0:23:1c:a2:e5:56:85:91:7d:ef:f4:
                    97:da:0c:5a:7b:de:8d:aa:e8:2d:2e:e7:a1:bc:32:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0B:54:6D:D0:9E:19:F2:0C:12:77:D7:60:EE:15:F1:54:AE:25:5D
            X509v3 Authority Key Identifier:
                keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:92:7b:75:3b:36:e1:03:95:ab:0a:7a:9b:15:df:a0:91:6d:
         4f:01:10:25:1a:a0:1d:5a:ef:0e:09:a6:81:0a:e2:9b:72:43:
         c5:f8:68:8b:b3:58:55:19:be:35:4a:be:4b:01:ea:e5:d4:c8:
         93:5e:ba:2e:47:9c:ed:29:87:86:f7:ce:83:1e:7d:f1:a2:30:
         25:d3:a7:b3:3d:07:a4:cf:2a:4b:e7:79:74:bd:e6:03:77:cb:
         90:29:27:23:4d:66:00:7f:56:64:d0:4b:39:65:e1:aa:75:ec:
         b4:33:0e:e2:1b:b5:00:67:06:1e:76:48:11:9e:8c:ad:27:5c:
         3d:cb:b0:73:c2:1c:9c:a6:32:08:58:db:a9:5c:60:f3:0b:5b:
         a8:7d:ce:2c:eb:04:86:eb:36:7e:4b:a9:77:51:c7:9d:ae:d4:
         e6:de:96:cc:44:38:a1:ad:af:a2:17:0e:c4:3d:60:e4:34:04:
         05:61:57:bc:9d:45:4c:c8:76:c0:f6:54:6a:64:97:33:26:5f:
         6d:3e:76:9d:6f:51:4e:46:96:b3:95:f3:dd:8f:ec:88:f7:6f:
         2f:db:b5:31:10:48:83:4b:6c:e5:bc:f3:72:48:77:31:92:18:
         0a:92:8f:c1:d0:f1:b2:f7:52:a9:b7:bc:9c:45:c0:f6:f6:1b:
         23:47:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:19 2026 by rpki-client