Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
File:                     AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft (raw, json)
Hash identifier:          kwtzMKNp/oyeITSNTj0Wj2RGxh0RCe7Ma9lVVkOHXEw=
Subject key identifier:   FB:F8:A2:A8:4B:4C:9C:8A:F9:9B:E5:ED:6F:D0:C6:CE:06:20:DF:61
Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
Certificate issuer:       /CN=01538851167b4e3d6f64d53797b08cb41371870f
Certificate serial:       019F9022B79F38E50475E81FC78A2481B0C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 18:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:21 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:21 +0000
Files and hashes:         1: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl (hash: mPCl+hFVP3wHKGmUhGf0XG8IorOf6ReheLBjKb7ktMg=)
                          2: mWE6kT69cqu-PW8JgJR1gCAZ64s.roa (hash: FJjpE6dQyURSUrQm7mC2IcezcL6cJcvz4TAfaMMJ8lE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:b7:9f:38:e5:04:75:e8:1f:c7:8a:24:81:b0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f
        Validity
            Not Before: Jul 23 18:00:21 2026 GMT
            Not After : Jul 24 18:00:21 2026 GMT
        Subject: CN=fbf8a2a84b4c9c8af99be5ed6fd0c6ce0620df61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:fb:2b:ef:55:56:8e:0e:91:b6:d9:b1:dc:
                    f2:b1:c8:88:59:0c:bb:5c:4b:c7:bd:27:8c:b0:89:
                    d8:ab:81:90:d7:f1:e8:f7:fe:7f:4b:5d:36:b4:9c:
                    39:61:88:86:71:1f:d0:ea:d2:a3:e2:90:00:e8:1f:
                    4b:db:2b:fa:17:5a:85:a7:a1:b3:40:10:c2:56:04:
                    a2:db:ee:52:09:8b:6d:15:1d:72:c8:1b:aa:ed:0f:
                    24:4e:c0:9a:0b:2f:7a:fa:b2:eb:39:b9:15:63:8d:
                    bc:5f:d7:30:45:71:cd:86:18:44:1a:14:0f:38:31:
                    aa:5c:85:87:af:d2:31:2e:7c:a3:62:c0:76:3e:6b:
                    5e:50:b1:5f:a3:54:9f:ab:2c:b6:9f:7e:81:fd:80:
                    50:6c:74:63:99:9b:f7:4c:51:38:33:02:29:df:06:
                    1b:fc:b0:22:da:99:a2:9f:14:e9:ee:7a:eb:06:b3:
                    6e:10:45:98:49:80:c3:23:3a:f1:ed:38:f7:ea:3b:
                    38:6a:dd:ba:37:51:a3:96:a4:32:55:33:ce:43:5a:
                    ed:98:15:33:f5:4c:f2:59:9e:65:23:4f:85:0a:5a:
                    b5:d4:3a:4d:09:ec:eb:bb:2c:d7:f3:9b:1c:96:73:
                    b2:7b:8a:40:67:d7:56:5c:0a:26:8c:97:64:6c:6d:
                    1c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F8:A2:A8:4B:4C:9C:8A:F9:9B:E5:ED:6F:D0:C6:CE:06:20:DF:61
            X509v3 Authority Key Identifier:
                keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b0:99:30:06:64:8d:5f:85:87:83:67:63:70:5b:fb:7b:02:
         a3:9a:04:ba:f5:a3:c4:97:f2:16:34:40:6c:93:8e:95:56:67:
         13:64:9c:92:6b:e9:a3:dc:3f:76:38:75:37:c4:28:91:37:bb:
         e6:6e:47:c3:f2:b4:76:d1:54:56:bd:09:e8:d7:05:b9:a0:28:
         e0:90:c9:f1:b5:0f:40:0b:61:7e:99:60:24:a5:5f:a1:27:cd:
         a3:b0:5e:3d:61:c8:86:32:59:81:6c:5a:7e:62:19:96:e2:13:
         97:50:8f:5c:21:f1:37:3d:12:a8:ad:74:d4:53:c8:4f:5b:88:
         1d:c0:7c:88:0d:e5:91:4a:7b:1f:8d:c4:d4:db:a5:e3:fe:34:
         67:c3:61:3d:0d:f6:07:aa:dd:4e:cc:51:df:16:14:e0:2c:e0:
         ea:35:ef:6e:57:e9:c9:f4:22:34:76:f6:05:c1:ed:78:65:c5:
         c4:77:6b:91:45:c6:af:4b:11:88:5f:17:2f:a9:17:93:ef:0c:
         30:77:8a:97:92:ba:4a:cf:86:bf:96:fd:97:7d:0b:62:f6:fc:
         84:40:1c:be:15:a2:76:c9:59:4f:e3:f5:de:b6:52:0e:88:2c:
         96:8b:2e:46:ce:6a:08:c2:92:2b:d4:44:ff:1e:df:91:6c:67:
         a3:1f:c5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:48 2026 by rpki-client