Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
File:                     7YUEg8zhM3scbC_d6pxdu0p-GRo.mft (raw, json)
Hash identifier:          V7MCr2eR1EdbneR4YX1kzCIYr4Bda1VZaWKiZ4zNZmY=
Subject key identifier:   73:A0:31:30:1B:39:8E:58:CC:8E:0B:39:18:BB:4E:5D:6B:59:18:F8
Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
Certificate issuer:       /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Certificate serial:       019F90907EF8036BE987F1D160F59EDD20D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 20:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:16 +0000
Files and hashes:         1: 7YUEg8zhM3scbC_d6pxdu0p-GRo.crl (hash: 76QSewbmV3uE0mCxqkSkClSzG6P2ifAGyIz4VQvBgGI=)
                          2: aolEbo2qB2S6A6P1jzACXp478EQ.roa (hash: oA7ghnRZDo0Fz0lfj+1EUdXsdtQn6tS/8aJp7ap6T0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:7e:f8:03:6b:e9:87:f1:d1:60:f5:9e:dd:20:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
        Validity
            Not Before: Jul 23 20:00:16 2026 GMT
            Not After : Jul 24 20:00:16 2026 GMT
        Subject: CN=73a031301b398e58cc8e0b3918bb4e5d6b5918f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:44:d5:ad:d2:d4:bf:74:5d:cb:a9:11:78:
                    84:c7:b3:45:fa:c2:d9:f7:d9:09:29:84:07:9a:e3:
                    0d:b9:7e:28:eb:12:8d:37:ab:0f:4c:cd:1f:76:e7:
                    63:ea:3e:ca:9c:f9:44:d0:da:e4:62:59:c8:28:53:
                    ed:54:ea:cd:d8:f4:84:6b:be:28:d2:ef:37:7f:f4:
                    bc:56:6b:96:78:bc:ec:d6:e3:f7:2d:8e:f4:6e:b1:
                    29:58:4f:33:8b:05:11:e5:7a:a8:c9:96:d3:ba:73:
                    49:3b:ef:90:14:94:be:4b:16:bb:48:d6:47:52:8e:
                    33:cd:ad:1a:3f:9a:de:33:df:63:06:47:4e:c5:26:
                    f9:f3:e4:32:d5:fa:bc:1a:e1:46:67:6b:7c:3e:e0:
                    55:7e:9a:98:92:8a:5e:06:19:1a:31:ac:69:f5:3f:
                    ea:0c:0e:94:4f:1a:ad:c5:f5:23:ea:7c:b1:d5:96:
                    8e:7c:ec:3c:9f:9f:75:9a:ed:19:03:f8:d7:2b:06:
                    87:99:54:b1:f7:dd:5f:d8:c0:6b:ef:43:4c:f4:7a:
                    3e:1d:4a:8f:36:d2:5a:76:72:a9:2c:63:7a:a9:0b:
                    07:d2:c5:0e:f3:99:09:68:3d:22:0e:c1:80:5f:3e:
                    0e:bc:b7:a4:1e:68:4f:f9:5e:cd:f6:03:bf:14:6d:
                    08:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A0:31:30:1B:39:8E:58:CC:8E:0B:39:18:BB:4E:5D:6B:59:18:F8
            X509v3 Authority Key Identifier:
                keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:5e:f1:fa:77:13:1a:11:c0:9b:60:e7:14:32:37:9a:0f:
         1a:0a:c2:67:da:3e:7f:93:89:28:a0:31:11:02:72:b1:4f:b0:
         c9:ba:59:ab:8e:e9:ff:81:8e:a0:23:fe:f4:a0:63:bb:f2:ce:
         fb:8f:fb:6d:9f:4c:04:94:4f:9b:e9:7c:58:d3:b8:ef:39:c6:
         35:79:4e:bb:86:ff:40:3f:e8:19:7c:ef:b1:2f:23:53:f7:a7:
         fb:ed:6c:5f:5e:45:3b:b7:b5:81:20:ed:07:cb:c7:a4:b9:28:
         28:22:cc:1a:fc:f5:6a:60:70:55:37:51:96:bf:97:20:c8:3e:
         73:84:e4:c8:21:74:63:81:7f:9a:77:5e:95:20:7e:21:8c:9a:
         f6:0e:09:69:ee:e1:09:9f:6a:fb:48:da:98:62:4a:e3:9f:a9:
         da:67:35:c0:b3:8e:90:50:a6:f5:32:59:09:d5:f2:9b:68:16:
         ed:0f:87:c1:e6:e4:01:5c:34:ef:e4:07:34:45:71:c3:58:6e:
         a7:80:91:7b:3d:01:99:43:3d:e8:67:de:37:99:98:45:43:2a:
         ef:da:ef:52:e7:5e:e2:96:78:e4:44:5b:e7:17:03:84:3f:5a:
         26:9d:11:b0:2a:fb:31:02:e4:5d:bf:df:41:6a:4d:20:19:4a:
         6d:85:97:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:36:38 2026 by rpki-client