Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
File:                     818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json)
Hash identifier:          TNC4VYLC7pYkSJ/iz2KFEPFrHLriOvrztUnAA3xchbU=
Subject key identifier:   A1:87:4B:25:FD:12:57:F9:1E:60:1E:5E:36:BC:C8:B6:6D:87:BF:83
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Certificate issuer:       /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial:       019F8FEBF2C003D3F78DE0F96589327C0B74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
Manifest number:          19C3
Signing time:             Thu 23 Jul 2026 17:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:32 +0000
Files and hashes:         1: 3bQ5jO0RUuXsW22069a_-nQHYK0.roa (hash: onknVg8brIZzx6BgExEtaYuz5FQlW8luXFcHhl4b8nc=)
                          2: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: a9APmUtmy5rBkYHfKLgeaSskADO2NnQqvhVv6D6dCjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:f2:c0:03:d3:f7:8d:e0:f9:65:89:32:7c:0b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
        Validity
            Not Before: Jul 23 17:00:32 2026 GMT
            Not After : Jul 24 17:00:32 2026 GMT
        Subject: CN=a1874b25fd1257f91e601e5e36bcc8b66d87bf83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:66:81:2a:ff:9d:0b:82:08:24:f3:43:ec:
                    eb:e1:de:81:04:95:0f:81:d6:43:c8:af:ce:3e:af:
                    23:8c:a9:ce:c2:74:c9:86:b2:b8:97:af:02:b6:bd:
                    19:b9:d2:24:07:0b:43:fb:5b:30:53:b5:f7:30:f3:
                    8a:a6:7e:83:4a:8d:54:c4:00:16:72:41:7d:b8:93:
                    29:0e:c2:05:91:3e:51:bc:3d:6e:be:f1:4a:3e:39:
                    86:b3:e3:cd:5d:1c:3b:51:6f:c6:92:1f:3c:76:59:
                    a9:7b:9a:5b:49:47:46:e8:08:a5:bb:d1:47:4b:4b:
                    34:84:d9:7d:40:69:c2:d0:ba:24:96:d8:0f:e4:15:
                    14:77:69:ea:e8:91:1a:b7:db:20:f2:c1:4c:54:87:
                    d2:17:2a:5c:1b:71:df:62:75:f4:78:fa:f6:50:01:
                    5b:a7:0d:9c:47:da:27:8d:e0:16:ee:a3:18:fa:f6:
                    e3:ea:09:92:ba:59:f3:58:80:df:d6:f6:30:25:a2:
                    ca:a6:a2:5a:28:b5:20:fc:4c:08:72:f1:ba:c6:98:
                    da:8b:e5:4f:12:1c:0d:b8:76:dd:ba:9a:86:f8:0c:
                    ea:2c:7e:7b:9f:5e:43:eb:0c:76:36:ca:2f:96:85:
                    ae:2e:18:13:06:0e:84:8a:80:19:72:40:2d:2a:0d:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:87:4B:25:FD:12:57:F9:1E:60:1E:5E:36:BC:C8:B6:6D:87:BF:83
            X509v3 Authority Key Identifier:
                keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:64:18:87:92:2d:4d:0a:ff:a4:2c:93:32:7f:e3:3f:d3:df:
         94:5b:2d:92:97:cd:52:5f:70:b2:0d:df:fc:92:49:62:8b:1a:
         31:cb:bd:cb:36:7f:55:32:2a:b4:32:1d:31:f9:33:04:71:16:
         17:73:e1:e5:3a:01:db:f8:0c:1e:d0:60:5f:44:70:3f:eb:09:
         13:87:f6:7a:05:d8:73:6a:2c:80:17:6c:8f:a8:a8:e8:ae:15:
         b7:62:53:65:19:e3:14:f2:c1:8d:7f:22:f3:e4:7e:f2:3e:d8:
         30:29:fd:da:18:ef:86:86:7d:69:2b:c0:96:4d:e0:b2:f9:44:
         ee:a7:30:c1:d2:33:c3:ab:cf:a5:f8:b6:03:60:38:fd:fe:f2:
         ae:b5:ac:ee:55:44:46:3e:b6:e2:d2:55:46:eb:bb:b7:bf:90:
         04:6f:b8:1f:50:c8:5e:c8:1f:19:bb:cd:45:15:3b:c8:78:56:
         fe:32:bd:dd:a2:84:66:ae:cf:8a:b9:17:21:cb:a0:29:f7:e3:
         45:98:8c:02:65:21:3b:5b:cd:a0:56:aa:81:21:4b:aa:f7:5b:
         2d:cd:9c:f0:c4:02:7e:80:1a:a8:aa:9b:d7:f2:c4:77:06:51:
         c3:68:5c:d0:dc:95:c1:1a:13:b7:af:21:a8:61:18:43:f6:ba:
         a5:cd:20:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:19 2026 by rpki-client