Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          SVsxGBXX6vGpx36sCxxwmfgsbGbsVj+J0NuT3Vvl6ls=
Subject key identifier:   E9:23:3E:0F:1A:AD:C9:FE:38:AA:7E:1E:C3:FA:8C:37:EA:F0:6C:88
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       019F935BCFCDE9B59851188E2023290627DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          19D8
Signing time:             Fri 24 Jul 2026 09:01:35 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:35 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:35 +0000
Files and hashes:         1: 2RbqMRULp-QNoJeRuz3DuXb82SY.roa (hash: vkQ1ietSun4egH0TCTbvv8l/0HXrnZiF/HLYLQxFwJA=)
                          2: IQ2oYAGI7FrbtQw-njklceThbc4.roa (hash: 1eifSLs21UBJXwatNLGZliT9NqFPGyep7LbzCHQLsqw=)
                          3: SVczDT9Xfgd978coimjrauYBi54.roa (hash: 2NMvhKAO0Kl3ePDaF0jcCfpcJYKyAuppoiBwwyO6Eiw=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: X6zTXEwBK+zuyUwmzTTFwOUftzZ6SvaISdAuZEARWBY=)
                          5: shiZOYC90xd1VuoCTl7MNpPZEuA.roa (hash: imVXTSeIhO/2/5DnYBR7yK1z3YTxchN3faFGSGjnVFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:cf:cd:e9:b5:98:51:18:8e:20:23:29:06:27:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: Jul 24 09:01:35 2026 GMT
            Not After : Jul 25 09:01:35 2026 GMT
        Subject: CN=e9233e0f1aadc9fe38aa7e1ec3fa8c37eaf06c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:dc:24:c7:fa:eb:b4:a2:9c:77:8a:de:43:
                    53:7a:89:37:52:cd:ea:b8:6e:2e:8b:d8:cd:ca:2b:
                    63:d1:10:9d:98:b8:30:8a:59:ad:18:d9:70:77:47:
                    64:c1:de:c9:b3:ab:bf:f3:9e:29:c9:61:1c:49:f3:
                    a9:31:8a:b6:75:7c:6c:81:86:ac:43:34:06:54:3e:
                    2c:8b:19:82:68:a3:e4:ad:f3:e1:cd:02:ca:97:e3:
                    79:96:fc:a0:69:ff:da:bc:3e:15:21:96:14:d6:41:
                    37:30:55:b0:ed:9e:07:19:2f:c6:88:98:05:fb:e4:
                    99:4e:06:b1:70:d2:1b:5f:00:15:fb:50:f4:7f:97:
                    e3:5a:e9:5b:25:c3:1d:d6:f7:ba:d1:02:70:9a:ae:
                    13:83:28:2c:59:ea:20:53:c0:d4:73:82:54:dd:b2:
                    e4:66:62:2d:5a:55:8e:fa:5d:e3:c4:58:4a:df:34:
                    1b:d5:a7:66:7e:64:e4:30:59:d6:c9:eb:5c:67:78:
                    40:8a:c5:71:bd:fb:1e:be:e5:34:a9:a2:4e:ae:65:
                    66:17:0f:c4:c2:89:84:31:8b:af:0c:99:c2:09:18:
                    b6:b4:08:33:03:e1:9e:4b:7a:55:a7:02:80:28:ac:
                    a7:b8:45:e5:71:61:00:dd:ee:c2:41:71:e9:40:44:
                    16:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:23:3E:0F:1A:AD:C9:FE:38:AA:7E:1E:C3:FA:8C:37:EA:F0:6C:88
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8b:15:04:45:4f:a1:cf:c6:66:8b:42:1f:a3:78:4b:67:6e:
         d0:71:d3:13:e7:be:83:da:ed:c7:11:19:64:f0:3e:86:5e:82:
         80:ac:a9:04:02:33:85:07:98:4c:9f:e0:34:cd:13:cd:db:b0:
         f6:25:ca:47:cf:de:8a:65:75:51:94:fb:d0:64:06:88:ba:ea:
         8c:93:b3:2f:3d:2d:9a:0b:12:bb:c7:a6:dc:2b:bc:db:54:f8:
         23:c1:17:b8:28:cc:ba:ed:87:68:4a:25:a7:29:46:eb:03:d6:
         de:02:dc:e3:56:b2:b6:2a:46:23:18:87:cb:32:1b:b2:aa:e9:
         98:03:f8:3f:f6:5a:73:25:19:08:fa:fa:8e:da:41:67:e7:8c:
         a3:13:23:95:08:12:06:50:b6:d9:cc:d2:8f:8b:ee:ab:15:95:
         9c:78:9b:3f:dc:6a:a5:d9:e4:02:d2:c2:ce:a4:82:96:c9:f4:
         6b:8d:b7:94:c9:86:a9:c4:3e:8b:3c:c8:cf:d4:a8:fa:f2:c0:
         59:9c:52:50:f9:c3:d1:ff:7d:88:02:84:d3:29:48:aa:2e:c4:
         58:7a:7d:ec:8f:be:43:28:cf:fe:0a:dc:9d:1b:89:36:24:7c:
         95:87:6c:a1:74:6d:8f:46:41:de:42:d1:46:cc:a2:db:87:3b:
         64:45:1f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:53 2026 by rpki-client