Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File:                     0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier:          J/3mJRYh1fk/28YegkBRRmm3XNHU3gEMn5hVMIBiZMk=
Subject key identifier:   6A:F5:7C:6D:01:F8:36:69:D3:17:46:A1:FA:EE:1A:8D:0D:65:C5:10
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer:       /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial:       019F92482D89EB910E4E4A746F6BEFD99644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 04:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:31 +0000
Files and hashes:         1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: ZsEHWudv+RwJsLbJO7bDNw7pGNW2ynpSU6Ena2R8QFQ=)
                          2: 5s6XKsomdWNWDCdDfvlwJ_bv16M.roa (hash: 2MYOlX42yAcrFD0bmpi2VtXwK7LzEOj6ivS2Lm4VbdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:2d:89:eb:91:0e:4e:4a:74:6f:6b:ef:d9:96:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
        Validity
            Not Before: Jul 24 04:00:31 2026 GMT
            Not After : Jul 25 04:00:31 2026 GMT
        Subject: CN=6af57c6d01f83669d31746a1faee1a8d0d65c510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:f4:1a:77:a8:d4:fd:ba:55:59:9d:a9:5d:
                    f9:ae:5a:b8:bc:29:ad:d5:af:39:ac:61:97:4a:14:
                    73:33:7f:a9:bf:74:53:8a:b3:9f:32:f1:95:9d:92:
                    43:0b:e1:b9:f1:79:fd:76:d1:b0:7e:3a:bc:59:5e:
                    e6:80:92:80:10:38:ea:21:c9:a7:77:5b:98:0c:33:
                    13:f7:e6:64:64:10:c3:b5:0b:c5:93:e5:26:e0:a0:
                    be:67:95:72:14:c0:d6:4b:6a:eb:0f:ae:76:b4:d1:
                    b7:13:93:6b:25:31:a4:7a:30:01:86:58:8e:8a:bc:
                    bc:dd:8e:ef:d4:94:db:cf:ef:a8:10:65:3c:e5:f9:
                    c0:d8:85:09:13:cd:c4:cd:a9:88:49:a6:bb:c7:37:
                    7a:9f:90:9a:c0:54:af:d9:85:cd:47:70:2c:0f:ac:
                    6e:49:a4:2b:10:82:86:5d:1d:a6:bc:2d:15:58:71:
                    be:43:cc:ca:21:36:3b:fc:fb:5d:88:1e:47:f2:1d:
                    c1:75:02:03:72:fe:a1:1c:1b:13:29:87:24:8d:0d:
                    a5:e0:c7:08:39:7b:ca:06:f8:ee:58:48:d1:a7:6b:
                    cc:a7:a1:ba:a3:96:bd:61:69:ec:ef:57:57:6f:63:
                    85:e0:75:87:35:6b:d6:7a:0b:4f:7f:3b:81:84:94:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F5:7C:6D:01:F8:36:69:D3:17:46:A1:FA:EE:1A:8D:0D:65:C5:10
            X509v3 Authority Key Identifier:
                keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0f:1c:61:9a:9c:46:ab:51:32:6e:4c:83:38:11:90:23:cb:
         3a:1d:10:fc:e7:4d:e8:b0:98:58:1d:8b:8f:a1:f1:ea:fa:52:
         44:60:24:4e:4f:73:7a:8b:20:fa:20:5d:f1:19:da:68:c4:b3:
         78:66:31:96:28:1e:15:b3:f6:65:db:6f:ef:df:4b:ac:2e:95:
         bc:ec:a1:ce:3c:6d:f1:be:ec:42:e9:1c:03:7a:72:3f:60:e7:
         db:d5:89:35:0f:3c:17:7d:7d:17:3a:07:8a:b1:9d:eb:3b:5c:
         35:37:69:db:be:13:75:79:74:81:dc:4c:91:c4:18:c1:68:19:
         9b:f6:79:f8:f8:02:32:d7:d9:7d:23:95:f7:29:3a:14:89:36:
         24:ff:ca:20:27:fb:a5:16:c4:ad:21:63:89:9c:93:6d:ec:91:
         bc:93:6d:98:8c:f2:ad:e7:26:3c:45:e5:b0:36:2f:a7:60:23:
         22:c1:73:d7:e2:01:51:7b:02:f2:e0:f5:b5:ee:3e:55:09:d9:
         6f:3e:fd:ae:74:5a:9b:34:01:72:ff:22:c1:fa:08:82:e6:44:
         c9:54:88:ee:ac:01:64:f9:3b:13:62:0b:77:31:c9:4c:70:25:
         33:44:e5:37:13:8b:89:d2:1b:bf:35:15:c1:a4:c4:82:6f:ea:
         cd:4e:83:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:51 2026 by rpki-client