Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          UIj+4F5KnZrRxK88CMGeBJr2rsww6D6Chw5tuwjmpa8=
Subject key identifier:   55:D6:D8:6C:F6:B6:3F:1D:32:F3:9A:EF:0D:58:FF:A3:C4:9D:74:80
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       019F946DDB386A6F731AAD8B6C635873DDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          19F9
Signing time:             Fri 24 Jul 2026 14:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:55 +0000
Files and hashes:         1: 1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa (hash: OkbONL4Kv2cLwbDetNkEjbv+0531gLH+WXA/3kqlV9c=)
                          2: 9SsHjlBtd69QJ3ndqo-1KhdedKw.roa (hash: qiOm4Fr0eZzz2bsbkMUTFYSa9lmGOwKDeaQIOpLMzdY=)
                          3: JVABJxvLxkj1mSPSAUuE7d0cXpc.roa (hash: 1hA/cynNPGLtZN3nQtWNzvj3MUG4llVicN6VIwab6HU=)
                          4: gX9Z7p1Ob66YosJCGXnZh4miO-s.roa (hash: elm/BD7Osd0BcHbQbq55e8rpGxN0X0LtIG/FC4qO27s=)
                          5: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: w3J+Puy9y4fHnbUivJHKFmorHSH2AyCJFRDSLe9lPNY=)
                          6: pDrr_bf7Ghe4a7lfLdGTUedQJ4s.roa (hash: hckgwXDzkDTS3YgN/PyJxO9PpMuWCR3QafiNrBSQrgA=)
                          7: sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa (hash: NxGgl9GbDugZBPBW0o4P8z6yiV+CD/pDM33YvrxHjSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:db:38:6a:6f:73:1a:ad:8b:6c:63:58:73:dd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Jul 24 14:00:55 2026 GMT
            Not After : Jul 25 14:00:55 2026 GMT
        Subject: CN=55d6d86cf6b63f1d32f39aef0d58ffa3c49d7480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:78:51:ab:05:76:e2:6f:32:4f:74:e2:83:
                    2a:78:08:58:a7:19:04:fe:5f:b7:61:1c:54:59:33:
                    44:f1:e3:40:95:ef:55:88:f0:dd:94:47:00:e7:c9:
                    c6:03:1b:5e:73:fc:ec:c7:73:7e:db:5f:57:06:e4:
                    2b:28:99:15:1e:65:9e:ba:50:95:cf:d8:94:b8:e9:
                    e5:66:cb:56:30:70:77:56:6d:f9:49:28:e1:73:ad:
                    cd:b9:f8:19:d0:fd:11:12:46:41:7f:dc:4f:b0:0e:
                    29:96:1b:c2:5c:0b:81:f7:ed:7d:30:e1:19:4a:02:
                    81:4d:b2:e7:8b:a2:e6:8c:4a:14:4a:95:d7:d6:72:
                    1b:1e:e2:18:fa:76:bb:2e:d4:d4:bd:46:e1:d4:0b:
                    75:37:15:69:29:2c:12:a0:66:f9:ac:c1:ba:5c:c3:
                    10:a1:97:9a:bb:8c:7d:ac:a3:d3:f7:35:ab:28:51:
                    2e:79:62:51:0a:c4:e4:c8:94:68:15:fd:b1:f3:9a:
                    d4:bd:e6:77:ea:b7:7e:4d:b3:83:3a:45:fb:08:73:
                    f1:b2:e3:19:b4:10:f4:ca:33:02:76:1c:11:c0:a1:
                    f9:3a:30:eb:18:b9:ef:68:b9:1f:ae:c2:42:f3:40:
                    10:a4:60:40:d4:58:2c:69:85:d5:32:89:b2:89:a2:
                    fe:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D6:D8:6C:F6:B6:3F:1D:32:F3:9A:EF:0D:58:FF:A3:C4:9D:74:80
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:13:72:c7:0b:f3:0b:d4:c7:60:77:2b:20:cc:35:80:c9:e8:
         f5:af:75:c6:fc:54:a4:16:2c:4b:91:99:1b:c7:bc:ae:17:41:
         48:56:df:8b:5f:e1:45:8c:fb:1c:5b:af:5f:4b:b6:14:51:52:
         15:7d:e0:45:2b:ce:82:ea:b4:11:3c:c0:a3:4d:1c:9d:39:dc:
         d9:1b:7e:af:d0:60:d1:82:60:a5:84:81:f9:02:a1:74:cb:41:
         04:21:0e:db:39:c7:5c:9b:01:27:57:0e:87:e1:09:1d:31:c7:
         b0:ef:eb:04:dc:58:b5:83:61:ca:fd:6c:a7:e1:5a:6a:cb:9c:
         29:02:21:98:b1:c6:94:83:0d:30:32:10:da:fc:d5:a2:5c:f9:
         37:b0:66:40:d4:31:47:60:34:4d:96:72:5b:e1:b2:f7:96:ad:
         c9:dc:48:b6:48:fb:80:aa:1c:cf:21:9f:54:29:ec:4b:11:f3:
         1e:88:1f:f5:51:38:4d:98:fb:9b:eb:56:5e:94:52:98:19:5c:
         f2:a5:d9:8f:80:d5:b5:85:a9:ef:82:32:ee:8c:2a:54:59:38:
         60:b8:43:ad:65:21:4e:d0:54:dc:e9:eb:ce:7c:d1:5f:fe:32:
         c5:c6:ab:f6:68:2c:c6:8f:10:74:33:a6:39:d5:d8:b1:7c:0d:
         5e:4b:b6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:56 2026 by rpki-client