Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File:                     g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier:          qebs+onblGTqdFUp72oM+PCKI9kHWqoNYTAbsJCMfKE=
Subject key identifier:   06:FD:4C:99:F3:64:4D:A1:CE:CB:41:D5:B0:36:EA:F0:A9:FC:B9:C3
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer:       /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial:       019F9624CE8AC0A9912D612567C29FC5D4E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 22:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 22:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 22:00:22 +0000
Files and hashes:         1: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: UksVgYRlPV0Y43/y2DCsEbEK6twZvvhKHkXbIUSswP0=)
                          2: jUh5kPqCBDpArkt6K7K31qvOD8c.roa (hash: qUwUoHmjfXhrPLn74zGv7aYCTKLavD/2JI0PvwjIvp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:24:ce:8a:c0:a9:91:2d:61:25:67:c2:9f:c5:d4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
        Validity
            Not Before: Jul 24 22:00:22 2026 GMT
            Not After : Jul 25 22:00:22 2026 GMT
        Subject: CN=06fd4c99f3644da1cecb41d5b036eaf0a9fcb9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:e4:73:c3:1a:44:cd:24:cd:04:a9:09:34:
                    83:7f:5e:aa:36:ea:a2:34:9a:47:58:0a:79:63:67:
                    a4:57:0e:5c:f4:ea:e5:10:cd:fc:73:5e:11:f8:03:
                    ee:54:2e:d5:31:07:78:be:19:ff:33:80:89:c4:96:
                    9a:93:78:76:24:f2:8d:f9:14:12:61:cc:8c:7f:c1:
                    1d:f9:a3:d3:68:f6:7a:34:6a:fb:b8:88:82:b7:39:
                    7f:a8:ac:24:c4:83:6c:14:8d:92:93:f1:fd:d7:42:
                    1e:75:39:ab:1d:df:28:21:fd:6e:47:f0:8d:45:87:
                    6a:39:50:3c:55:c0:2c:8b:79:3a:95:ce:0f:c8:2e:
                    51:d6:ce:8c:e6:95:c7:dc:3e:96:52:6e:f1:4b:11:
                    96:52:a9:a5:ff:79:40:41:5d:76:f2:b1:f3:08:de:
                    04:0e:33:a0:a9:59:47:23:42:4c:a0:d5:91:f0:4d:
                    ca:9c:d8:94:d6:01:16:91:73:0a:e5:b8:99:bb:43:
                    14:9a:d9:36:f7:18:1c:39:eb:50:91:2f:96:ae:5b:
                    8d:95:8f:ab:36:ee:f8:a3:81:a6:e5:9d:ab:76:89:
                    09:b9:b9:24:37:3f:c5:55:b8:7d:c6:e1:35:b5:2f:
                    c6:aa:a9:e5:f5:2b:d3:b6:fe:bf:ff:e3:fb:73:68:
                    e3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FD:4C:99:F3:64:4D:A1:CE:CB:41:D5:B0:36:EA:F0:A9:FC:B9:C3
            X509v3 Authority Key Identifier:
                keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2b:a4:b3:8b:f2:33:18:48:f1:ec:a2:c7:4f:ed:18:24:3f:
         a6:ec:f9:d4:fb:f7:2a:e2:67:33:a6:dc:56:29:9b:1c:eb:de:
         9b:37:45:c7:8c:8b:09:47:05:4f:b9:1c:fe:b8:30:99:01:ab:
         a9:1c:6d:12:9a:82:c3:5b:0d:21:20:fe:bc:20:b0:82:f2:2b:
         31:a4:44:69:69:2f:25:e8:31:1c:63:7c:4f:e2:04:8a:bf:ed:
         8e:ce:a3:5b:24:e2:d0:7c:30:83:fd:4b:19:20:71:3d:be:37:
         a3:95:fa:45:48:f5:66:19:39:9e:1e:00:aa:d9:c8:17:f9:05:
         f6:52:21:e9:1d:5e:6b:d8:3b:39:93:86:93:4c:62:49:7a:f4:
         43:83:d1:bd:65:ad:04:6d:57:db:c5:96:a6:bf:7a:6b:5b:ee:
         ab:bc:8e:af:38:bd:c5:2b:b5:a0:01:63:90:62:31:24:12:33:
         6f:16:9f:a8:9f:96:e1:b6:ff:87:58:ac:bc:50:94:bc:fc:42:
         b7:4a:ae:1d:9f:e8:6e:21:e3:5a:69:6c:ad:91:14:f4:e7:8d:
         1e:12:b7:d8:ad:4f:72:0b:0e:33:fe:88:bb:20:a4:16:f8:75:
         4c:f6:76:6c:02:ea:d5:dc:e8:bc:2a:e0:97:4c:11:59:8e:d6:
         c9:0e:62:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:00 2026 by rpki-client