Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.mft
File:                     mCePGZeGM16GRotLmPygOmayft4.mft (raw, json)
Hash identifier:          nuzdygUg7iOwKoD2nM7yW+/O66AfbsoUd/uOwrX8YcE=
Subject key identifier:   79:28:88:C3:36:C6:34:67:0C:F5:B8:17:60:5D:DD:F9:6C:C1:68:6E
Authority key identifier: 98:27:8F:19:97:86:33:5E:86:46:8B:4B:98:FC:A0:3A:66:B2:7E:DE
Certificate issuer:       /CN=98278f199786335e86468b4b98fca03a66b27ede
Certificate serial:       019F91A37718B9C60D687B829F842579ECFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCePGZeGM16GRotLmPygOmayft4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.mft
Manifest number:          11
Signing time:             Fri 24 Jul 2026 01:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:36 +0000
Files and hashes:         1: WgnWOUv-gbfkSkHsun9sFImtYDY.roa (hash: JD0mfdTRFtEepkN2tCd2j8n570DvIkGT71G7OwTRiZw=)
                          2: mCePGZeGM16GRotLmPygOmayft4.crl (hash: ApL9izY0fZpA9T7PHANS8b9uTtrSYAbgumhPAi4ugRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCePGZeGM16GRotLmPygOmayft4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:77:18:b9:c6:0d:68:7b:82:9f:84:25:79:ec:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98278f199786335e86468b4b98fca03a66b27ede
        Validity
            Not Before: Jul 24 01:00:36 2026 GMT
            Not After : Jul 25 01:00:36 2026 GMT
        Subject: CN=792888c336c634670cf5b817605dddf96cc1686e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ab:38:2f:49:6f:ed:27:4d:ce:90:9f:06:8c:
                    1a:48:65:39:7a:b8:2f:b9:a7:0d:23:1a:e2:6f:19:
                    33:e2:00:74:53:6e:c2:c1:38:12:95:03:54:c1:56:
                    38:8d:3f:97:a2:c4:ba:e6:3b:8b:a5:cb:19:73:77:
                    f8:72:3a:c9:f5:91:87:84:94:48:22:1e:98:71:84:
                    ae:9d:53:86:2c:a5:4e:f1:cf:7c:c9:b6:12:c3:a7:
                    8c:11:19:5d:b1:a2:86:ba:3c:c0:57:21:a1:9f:d1:
                    40:0d:f9:71:37:95:e3:28:65:b4:39:46:eb:2b:f7:
                    82:81:3c:0f:b1:91:bc:37:b3:78:cf:2c:8a:13:42:
                    1b:4c:7a:b1:e0:e8:c0:87:c3:6a:a4:38:5c:e1:1d:
                    85:d4:19:13:c6:4f:e9:12:3a:8e:13:60:30:fa:e7:
                    be:f2:46:7f:5d:28:96:52:b7:5e:da:b2:86:d2:35:
                    ad:be:ec:1f:d2:94:bb:1e:29:fa:d7:88:3c:a5:47:
                    94:8d:b7:22:63:9f:6a:78:1e:87:df:c8:17:3b:87:
                    aa:aa:70:18:9a:78:06:c7:f3:ce:a5:14:28:2e:70:
                    13:9a:6e:7d:93:e6:ec:02:71:b7:3e:33:f8:a5:70:
                    e9:94:67:29:74:3b:a5:20:20:c8:0b:00:f2:37:63:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:28:88:C3:36:C6:34:67:0C:F5:B8:17:60:5D:DD:F9:6C:C1:68:6E
            X509v3 Authority Key Identifier:
                keyid:98:27:8F:19:97:86:33:5E:86:46:8B:4B:98:FC:A0:3A:66:B2:7E:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCePGZeGM16GRotLmPygOmayft4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c0:e7:47:cc:75:e7:90:f5:60:43:80:0c:fe:59:99:b4:0f:
         d4:17:7c:17:39:9f:44:91:41:1f:4d:58:27:5b:ea:18:09:02:
         d7:74:5b:e5:c2:ac:d5:a5:48:f0:b1:ef:6d:ab:7e:a7:36:86:
         5f:c2:bd:f4:49:76:13:ee:76:bd:50:d1:4e:c7:14:4e:63:c7:
         bc:f6:dd:58:45:e0:40:9f:68:1d:1e:7a:86:ba:a2:76:56:2e:
         69:42:b7:e8:58:93:37:92:4f:0d:6f:18:84:a3:23:35:7c:35:
         66:dc:a5:a1:b2:58:a1:a5:5d:c2:e0:48:72:4a:e5:96:16:3f:
         38:15:46:d0:0c:39:c0:1a:d4:42:33:33:57:17:44:08:7b:f5:
         96:56:c7:61:83:eb:c5:bd:fc:f2:5c:4e:be:aa:8c:fa:f3:f0:
         96:64:fc:96:61:d5:09:bf:bf:4d:c6:e6:39:4e:54:e3:d7:81:
         8c:b1:51:f8:20:5d:2c:89:16:4d:21:02:7c:fe:aa:ac:a9:8e:
         05:99:c1:11:6a:aa:2c:4f:01:7e:f9:94:4e:56:2f:04:bd:62:
         df:ec:e4:b4:c2:a2:bb:55:9b:98:6b:a4:b5:94:57:f9:db:51:
         28:99:d1:ca:d2:46:f8:ff:0a:41:83:2e:b8:1e:b6:5e:80:ec:
         04:bc:26:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:54 2026 by rpki-client