Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
File:                     2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json)
Hash identifier:          dFTVIWALI8sU0NQYBEqwbJdN96GpY8TMCaMH0P624wg=
Subject key identifier:   E4:1A:02:51:C1:4B:B8:01:85:FE:22:11:95:DF:50:90:55:79:64:3D
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Certificate issuer:       /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial:       019F90230D0FFE9FB5468650D3064CB561B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 18:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:43 +0000
Files and hashes:         1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: LLtcBhVNLTAgUpUX5+M6vhUMC0nP0CgYCFVg4pTER2g=)
                          2: F6fUHhyih39ackVWeOiT1Us1Y8Q.roa (hash: puoFvjqopp+quYrffqHcq8C0zEtx3DRFmOVecmQhdMc=)
                          3: gXTXswMAqOUZcicFKanGyy8Pc24.roa (hash: CsXx31nQ+NdycTm6E1P0Qb6Ob5IJ6xBFv4kmPa3DVVo=)
                          4: kOj1s5oO7oSiq_7ZjXoN1j2kTnE.roa (hash: Y6xric3ra7rVJoctwp2vvhl14A8o24GxxC7BIDvBIlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:0d:0f:fe:9f:b5:46:86:50:d3:06:4c:b5:61:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
        Validity
            Not Before: Jul 23 18:00:43 2026 GMT
            Not After : Jul 24 18:00:43 2026 GMT
        Subject: CN=e41a0251c14bb80185fe221195df50905579643d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:ef:74:53:d1:07:8d:79:4b:65:62:49:9d:
                    96:d1:69:55:95:2f:86:0a:9c:20:aa:24:c7:5c:20:
                    cf:7d:9e:d8:9c:49:0e:37:90:40:8c:f8:5f:68:ba:
                    e3:dc:b0:f5:6c:75:ee:01:86:be:99:ee:37:f1:cf:
                    c5:9a:e6:a1:64:14:ae:7e:54:cb:e9:27:58:0f:5f:
                    ec:de:2c:1d:87:a6:a9:ec:87:b8:c2:15:21:0e:01:
                    ce:e4:fd:e0:65:74:47:89:7f:0b:5a:96:b0:54:6f:
                    e3:cd:12:ff:5e:69:0e:4c:4a:8e:fe:fe:b3:aa:50:
                    a0:e8:6d:cd:71:74:10:ac:14:2a:e0:ce:3a:01:ee:
                    2c:c3:41:3a:e7:a1:eb:6a:d3:c2:58:b1:7e:dc:c2:
                    88:46:54:7a:96:18:21:bb:36:02:fe:47:4f:9b:85:
                    45:77:c2:5a:fb:ef:69:f4:b5:91:b4:97:ac:8e:26:
                    82:85:0e:12:87:6e:9d:fe:a9:6e:1a:38:b1:7d:15:
                    b8:f7:6a:ec:6a:4f:3a:6f:0c:1e:6e:26:a7:eb:16:
                    1a:69:67:9c:ec:de:99:bb:fd:ef:7a:0d:1b:37:cd:
                    75:59:ba:38:66:13:67:83:36:01:c9:11:7f:74:11:
                    0d:bd:f3:40:5e:3f:f5:9b:c3:86:ec:ae:e4:a4:73:
                    53:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1A:02:51:C1:4B:B8:01:85:FE:22:11:95:DF:50:90:55:79:64:3D
            X509v3 Authority Key Identifier:
                keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:58:af:ab:8f:1d:d7:5a:ea:61:5c:79:c5:a2:54:13:89:50:
         ce:20:50:3d:fb:3b:ff:5d:66:4d:a4:de:b4:ab:f1:37:02:c8:
         c8:6e:8c:4a:c6:5e:ab:5c:1f:c1:02:2e:21:f5:00:f0:45:c1:
         a9:6d:b1:91:0c:b0:ab:a0:cb:79:20:f8:13:bf:75:f7:66:c8:
         18:22:1a:33:cd:46:89:54:c6:5a:ce:1d:e8:b9:15:15:48:b9:
         72:a7:91:5b:f4:0c:45:30:7a:81:d2:08:13:5c:8d:98:0a:af:
         ec:c0:a7:90:1e:10:6f:d1:16:95:75:9e:c9:fb:b2:62:c4:56:
         1c:60:e3:62:2a:09:7f:a9:d5:bf:fa:9e:e8:61:3e:03:71:1c:
         1a:84:ca:b9:10:c8:a2:80:37:e8:fc:a3:4f:cd:e3:cd:45:fd:
         d3:7c:2a:32:81:76:45:27:95:49:7d:61:05:91:0e:b0:4c:f1:
         cd:a6:ad:9b:c5:d4:29:1d:52:e0:be:5d:96:f6:6c:23:2c:d3:
         3e:c1:52:bf:b3:47:6b:ab:db:de:b5:d8:fe:2b:10:a5:58:d2:
         b6:21:77:cf:24:8f:2a:fe:5c:16:9b:7c:00:a5:d8:30:de:2a:
         a6:9c:e7:a7:bb:a5:26:77:93:b5:31:5a:98:3d:91:ac:8c:8b:
         62:39:9b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:39 2026 by rpki-client