Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          Skqj2CVaOhcfI/zDcjUcOIE2raHKGPOmI7KY13O5Vrs=
Subject key identifier:   35:C5:1B:C5:7D:11:1B:27:60:94:14:77:3F:0F:5F:6F:74:CA:81:D9
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       019F8FEC8E8A7F28EA68F0DEA77C18B5F254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 17:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:12 +0000
Files and hashes:         1: 8q11ZXlsuNY-5BnKL-DZjg8yXCc.roa (hash: ouWFvShqIiSVhc7XwLMg1RvjjhIXPIC2TEXQAFnoIdY=)
                          2: NWmG-3ib3K9ny2X2v2uTxM0DQqA.roa (hash: CGIiGH/Yy5fY3u/pl6DzCecfrnnhokhuxjI5pup6gIw=)
                          3: W0KBm5HEcFXtVXifacsZfmIqvhY.roa (hash: W8Izm3ucgflTtw/kXP/v/wyRWH1PXzlBhUPfbe4tfxo=)
                          4: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: UTgORTt4dnRUtIsz0WXBQVE3+6IK63PpBWdhPc/yt9o=)
                          5: hFwOd0_YEOVcJRwShM4Rz_JX8w4.roa (hash: 2ZVK7MUTm4O+cKvEyp+XBJuaZn8IX75XJYPFZQbyyqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:8e:8a:7f:28:ea:68:f0:de:a7:7c:18:b5:f2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: Jul 23 17:01:12 2026 GMT
            Not After : Jul 24 17:01:12 2026 GMT
        Subject: CN=35c51bc57d111b27609414773f0f5f6f74ca81d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:37:56:b6:6f:74:c8:85:41:45:f6:12:62:e2:
                    d5:29:89:1f:73:08:85:53:51:06:a7:88:2b:9a:59:
                    9c:a4:dd:b6:01:de:05:7b:d4:0f:01:4f:05:cf:54:
                    60:60:00:44:fb:11:55:de:e5:2d:73:bd:c5:f1:7f:
                    23:a3:67:5c:38:01:19:6a:4a:0b:07:40:63:73:59:
                    37:bf:d9:fd:89:bc:e4:43:f5:62:3a:a4:00:14:94:
                    ae:4e:dc:72:06:43:6f:02:c0:88:22:7e:5d:19:11:
                    78:7f:f3:e1:b8:1b:55:04:62:eb:b5:64:4d:19:1b:
                    de:a8:d9:25:6c:fe:c7:50:8c:ac:5c:e3:b4:4c:aa:
                    8b:35:fc:7f:e7:1c:94:6c:f6:a8:cd:7e:52:2a:48:
                    38:48:28:85:10:5c:ab:c0:86:87:80:90:48:b1:94:
                    14:66:ba:5b:e1:25:26:6b:a5:1c:40:a3:e1:70:74:
                    ef:1d:e9:11:cd:67:b5:d0:e2:68:f6:1b:d4:82:a4:
                    c4:3c:f0:9c:1e:a6:4d:b9:a1:21:cd:63:7d:1d:e7:
                    b5:2f:16:f2:ac:fb:93:40:8e:5d:a7:b6:c9:a5:b3:
                    82:5c:23:e3:b6:a8:ab:75:cd:6d:ef:b5:7a:0f:23:
                    eb:a7:29:d2:12:2a:a8:2b:1c:e2:99:a3:53:9f:fd:
                    b4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C5:1B:C5:7D:11:1B:27:60:94:14:77:3F:0F:5F:6F:74:CA:81:D9
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7e:af:e3:0c:df:ee:30:cc:1d:70:0a:20:28:64:ce:82:a8:
         c7:af:31:3c:f3:9b:db:bd:8e:36:a3:e0:74:2b:5d:d4:74:d1:
         c3:dd:d4:c1:59:80:cb:61:dd:5c:3c:43:2c:7c:54:9e:6f:93:
         01:f9:7e:90:20:87:3b:36:d1:b6:2c:ec:01:a7:0a:c8:d7:73:
         a8:bd:45:e3:7e:10:ca:78:f6:c2:ad:b6:35:8a:f3:fc:49:7a:
         bb:c0:2c:a7:6f:cb:84:52:9a:2c:a9:63:3c:36:ca:dc:03:53:
         4d:c0:6c:ab:e9:e3:fb:d1:8c:98:af:0f:f0:a9:89:d5:84:78:
         82:03:e0:36:2c:89:e6:7b:8f:16:a9:3c:d0:c0:dd:72:34:63:
         39:f9:81:72:17:57:5d:67:6c:33:45:a3:dc:74:53:1b:bb:04:
         66:a3:c2:3b:af:a5:82:3a:3e:64:57:f7:52:44:d4:24:ca:d5:
         d3:ec:00:99:b9:db:4f:f5:65:02:4c:5a:65:a2:bd:aa:e9:b1:
         43:95:ca:86:01:33:d4:12:d3:34:3c:98:32:1d:01:27:53:ed:
         5a:94:d1:f3:12:51:53:c5:ab:44:fa:48:e0:07:a0:63:8c:3f:
         bd:12:b4:20:99:79:d1:0b:5f:f7:cb:36:ba:b7:08:a8:4d:ab:
         ea:e8:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:16 2026 by rpki-client