Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File:                     h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier:          RFqqF8SefrrxGoym/1wqOQNj7u/UCNN4ibS4DlbOpns=
Subject key identifier:   DD:B1:97:84:A4:4D:C8:8C:B6:E7:89:91:57:A8:66:05:2D:F0:45:38
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer:       /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial:       019F91DA88F60DA4739C48E784383CB3CFE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number:          0D4F
Signing time:             Fri 24 Jul 2026 02:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:45 +0000
Files and hashes:         1: 3I57kWj-MwOuWGgEJOOA7NVOnaw.roa (hash: u4MWGRCWmsfLRNP506Vpdbs2aaAzu9zhtPD+IDIYvpU=)
                          2: CnF9cjlgaGUvfor-A11xEctTpak.roa (hash: lSwL0usE/Gb/GkCss8GSY6ht7fo/KB8MqQdEL3prjBY=)
                          3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: xWQ41qPoJmYdUz5S3Bs/fR4iO9PxpLlzYmwlUvbOYDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:88:f6:0d:a4:73:9c:48:e7:84:38:3c:b3:cf:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
        Validity
            Not Before: Jul 24 02:00:45 2026 GMT
            Not After : Jul 25 02:00:45 2026 GMT
        Subject: CN=ddb19784a44dc88cb6e7899157a866052df04538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:2d:c9:15:08:64:42:85:67:17:86:48:c8:
                    c5:53:ea:33:4f:33:11:69:87:16:14:f1:e2:d6:24:
                    a0:11:68:78:06:c5:65:a4:ba:16:75:80:68:1c:91:
                    a1:21:57:98:db:fe:1c:4b:39:fd:c1:4e:80:cd:80:
                    45:e0:d2:0c:75:ee:8a:47:19:fe:11:86:9f:ef:23:
                    e4:0f:b6:e3:98:75:c9:21:ee:fa:19:98:1c:d7:4c:
                    dc:f6:f0:44:09:54:ad:98:29:33:fc:81:b3:b3:59:
                    5a:62:54:00:03:50:d7:cf:db:3c:03:16:f0:66:a0:
                    42:97:6a:4e:be:20:e8:f0:9a:9f:a1:d9:5b:f4:a9:
                    28:b4:4d:2d:82:62:68:48:a5:c0:38:ab:60:4e:16:
                    8a:09:86:2b:b7:96:9d:a3:5c:5f:e7:fe:64:16:fc:
                    96:7d:c7:d5:52:ab:5b:e4:9d:9e:04:3b:79:3d:a7:
                    90:cc:c0:f0:37:9f:33:f4:40:31:f7:c9:84:72:23:
                    bc:a0:77:97:9a:2a:66:58:97:81:39:b0:ee:e7:a2:
                    2a:6b:e9:85:1c:c5:21:e2:8a:58:7c:d6:01:aa:e8:
                    c1:06:a7:8f:a4:b4:0c:8a:8d:bb:49:20:48:5e:03:
                    4e:b5:fe:39:49:c5:41:20:2d:80:5a:28:cb:b9:36:
                    5f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B1:97:84:A4:4D:C8:8C:B6:E7:89:91:57:A8:66:05:2D:F0:45:38
            X509v3 Authority Key Identifier:
                keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:91:ca:79:89:36:61:56:6f:98:0d:52:7b:90:e4:51:d7:2c:
         9b:87:2f:57:3f:36:c3:a8:8f:8b:a4:9d:22:a7:a0:50:4d:99:
         94:4a:4e:0a:ef:47:3d:e4:39:e4:bb:cb:9c:56:f9:d3:91:25:
         5e:47:15:f9:bf:0c:41:57:83:2e:51:35:9a:8a:91:51:0e:20:
         03:93:4f:53:ca:f3:38:2e:16:7e:4e:92:02:cc:0e:fc:0f:6b:
         ed:2f:a1:a9:60:b5:aa:84:22:f1:7e:8e:f1:8e:76:f3:02:ec:
         80:21:e8:29:25:de:91:03:11:30:6f:55:87:7d:2f:09:b3:46:
         b9:66:68:59:c0:f0:f2:74:6b:ae:3b:f5:69:b2:1d:fa:f7:d0:
         98:c0:d2:f4:3a:a6:a4:7a:da:3e:a8:f4:38:b6:b8:83:d2:df:
         0c:57:df:7f:3f:c6:41:e7:32:14:3d:b8:11:5c:3e:13:14:eb:
         f4:78:cd:06:8a:38:13:84:f1:c8:5b:2e:66:21:dc:d2:5a:50:
         a6:27:46:a1:80:f0:7a:58:88:b0:7e:a5:a0:41:26:4f:16:7b:
         69:cc:50:61:35:6d:44:db:41:91:74:41:e3:4f:3a:5a:26:92:
         f5:fb:71:29:22:c6:d5:b0:63:9c:7d:2d:8b:a4:8d:64:3c:b5:
         e5:15:41:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:06 2026 by rpki-client