Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File:                     201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier:          ZpOEs3DS31qJieMpGzcz6HkVIXmDnSu41xu9LehLWbg=
Subject key identifier:   6B:81:FD:0A:C3:5C:B8:98:D8:82:85:F6:9B:81:1C:CF:14:8A:C2:8F
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer:       /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial:       019F8FEC371E5025AF286E412908F6A9011E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 17:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:50 +0000
Files and hashes:         1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: 2PaPlHMwrAkKHwJOkFghciwqUWPp5gJeDU/n/Q0wScM=)
                          2: DcpoOaI5WCtrBzEek9x3MtAQl4Q.roa (hash: LNpYxCyPAZU/q4OugE8iiZ5AnBZFDBNN2UC960my6+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:37:1e:50:25:af:28:6e:41:29:08:f6:a9:01:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
        Validity
            Not Before: Jul 23 17:00:50 2026 GMT
            Not After : Jul 24 17:00:50 2026 GMT
        Subject: CN=6b81fd0ac35cb898d88285f69b811ccf148ac28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:0d:39:d6:1c:64:89:04:ae:ff:c1:c0:51:
                    c5:9a:ed:6f:be:ca:af:96:10:1b:0a:67:d4:13:79:
                    e1:0f:73:8e:82:1f:99:9f:22:5d:82:ca:64:9b:11:
                    b8:5f:8c:42:6d:d0:4b:8a:2b:42:5c:86:99:8d:4a:
                    86:7d:c1:ac:8a:45:22:54:08:50:00:b3:70:70:e3:
                    91:22:a0:91:93:43:2e:d7:17:8d:e3:28:b8:61:13:
                    4c:fa:f8:09:22:08:cf:ec:60:48:05:87:2a:9b:1a:
                    15:63:9a:79:d1:93:1e:a8:fe:12:33:69:62:de:84:
                    e5:5a:45:e4:a8:8b:33:3b:82:d2:cb:5a:7a:71:48:
                    b8:77:f2:75:fa:2d:b5:e6:db:05:22:2e:d2:75:55:
                    cb:d4:3c:13:76:e8:a0:ae:a5:42:0c:f5:a4:f7:1a:
                    dd:59:57:06:dc:cf:79:14:69:88:ad:e4:77:d2:09:
                    fc:2b:68:56:5c:19:03:04:3e:ad:a1:ac:17:e0:8c:
                    d1:54:ca:34:a9:74:54:c0:c6:94:3d:4c:ca:57:24:
                    46:3b:62:d2:17:d0:c6:95:58:16:ad:cf:da:db:6b:
                    43:a9:6b:59:0c:c9:54:69:f7:25:09:76:23:41:ae:
                    d3:2b:c4:74:7a:f8:bb:be:c5:bf:82:4e:18:6c:60:
                    65:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:81:FD:0A:C3:5C:B8:98:D8:82:85:F6:9B:81:1C:CF:14:8A:C2:8F
            X509v3 Authority Key Identifier:
                keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:eb:c6:00:38:44:cb:29:a8:77:1a:3d:06:b4:6e:b0:2a:f2:
         b2:5b:3b:e6:15:af:0a:6e:4f:44:ed:b9:bd:05:cf:be:d2:70:
         86:b6:36:b4:05:f0:0b:e6:f2:ab:0d:80:42:36:ea:d0:21:08:
         2c:f0:dc:ba:9a:56:9f:6e:d2:6f:85:81:1a:bc:3c:b8:2a:cf:
         d6:a5:4c:99:66:04:f3:bb:d9:62:09:1d:85:ab:bb:b9:91:ee:
         68:4c:d1:fd:21:ef:a6:13:d5:f8:10:ef:e5:bb:b9:de:e9:79:
         15:ac:f8:c2:dc:a0:ed:c9:e4:c3:a5:1b:02:66:37:01:4e:f1:
         d8:03:ec:70:28:2f:47:e8:1f:76:a1:e7:4e:57:3c:97:cf:ea:
         02:a1:42:75:ee:07:60:86:d0:c5:57:e5:4c:10:47:ab:20:47:
         87:a3:3f:62:9b:bd:ea:a3:84:a1:ad:70:cc:6f:f3:90:15:be:
         cd:60:85:c3:aa:01:e9:d5:79:e5:d2:00:69:bb:f9:1f:4f:0d:
         a3:03:fd:32:14:34:2c:fd:5b:f9:cb:1e:35:cd:5d:08:b2:b6:
         b5:df:22:4c:4a:64:0a:b3:cb:7c:f2:a0:63:45:bb:89:0c:2f:
         01:d6:57:fc:07:ed:dd:84:d2:e7:59:55:b2:f7:98:16:d3:28:
         b4:73:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:35 2026 by rpki-client