Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File:                     V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier:          igJ5x5DxoZOoh313xYOWWgRNfx8+zWpQZObeQFDa+aw=
Subject key identifier:   C4:F0:B6:34:A0:D3:13:73:A3:5D:48:66:BE:A0:90:5C:5E:9B:4D:50
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer:       /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial:       019F92B5EC1706352BC2376D472FCE2C6D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number:          15AE
Signing time:             Fri 24 Jul 2026 06:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:23 +0000
Files and hashes:         1: FYrxidhhtPiG6AB9OzYcqk5p8Aw.roa (hash: mzI1U2535anRJzFg3sJ4dHBKcfZC4WY6B6B0DzwBsDM=)
                          2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: Qy4lYYAwzxGT6Js3YLK12coYhgjLOL26TfzK7Y6xpL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:ec:17:06:35:2b:c2:37:6d:47:2f:ce:2c:6d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
        Validity
            Not Before: Jul 24 06:00:23 2026 GMT
            Not After : Jul 25 06:00:23 2026 GMT
        Subject: CN=c4f0b634a0d31373a35d4866bea0905c5e9b4d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:83:13:9b:5e:dc:58:b3:e7:90:34:21:dd:
                    6d:ad:87:37:88:6a:16:f0:a7:7e:e9:c1:ab:fb:85:
                    80:d5:09:ae:35:73:c1:ac:4a:6d:6e:77:f9:1a:e8:
                    8b:00:be:9b:0f:ab:66:f1:ca:f4:97:a1:eb:07:af:
                    42:f6:81:50:70:5e:8d:36:96:f6:72:64:c3:cf:fc:
                    ba:94:31:e3:5f:23:03:9e:93:14:e7:d9:02:07:f1:
                    6d:2f:02:06:98:74:d9:d4:06:d7:9d:3e:0e:d9:9a:
                    00:90:e5:fe:b2:bb:35:63:f3:6d:af:de:85:92:5c:
                    a6:0e:79:06:bc:09:5b:4b:61:dc:27:a8:5c:42:84:
                    63:9d:6f:bc:89:8b:1e:32:26:f5:7a:2f:1f:06:77:
                    cd:da:29:d0:ba:5a:1b:f4:27:50:18:1e:6b:fd:72:
                    9c:26:b2:fa:e3:f1:61:2e:2a:3c:b7:67:a3:2d:89:
                    b7:c8:51:15:9a:ff:9c:cd:33:0f:d0:57:90:57:38:
                    b4:d8:ae:2f:46:cc:75:26:5e:26:70:69:e2:a4:c2:
                    65:82:08:0c:ca:d3:0d:81:ba:92:61:09:8a:b0:7c:
                    47:4f:38:10:95:19:d1:ff:1f:91:1b:03:5b:7a:df:
                    3e:80:36:0e:ad:43:c8:9c:6d:eb:a5:f6:ec:ff:56:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F0:B6:34:A0:D3:13:73:A3:5D:48:66:BE:A0:90:5C:5E:9B:4D:50
            X509v3 Authority Key Identifier:
                keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e7:f1:9a:06:3e:9b:a6:08:c8:24:62:b9:00:5a:2e:af:97:
         89:05:2c:0a:cf:64:e9:67:2b:35:59:dd:cc:63:8e:19:d0:e1:
         68:74:ad:e5:53:80:da:45:03:a9:4d:40:26:65:d8:5e:5c:0f:
         dd:80:c9:af:3b:9a:33:77:0e:1c:ad:9c:6b:64:f7:54:d6:3c:
         f2:9c:0b:f1:18:d4:54:2c:a4:28:49:55:6d:d9:92:17:83:f9:
         72:31:1c:26:f3:16:da:2c:59:fe:ea:da:df:64:5d:c8:0e:25:
         1d:93:e3:86:18:9e:c6:09:2c:82:39:b1:b3:b6:ec:4b:be:09:
         24:0e:65:1d:56:2e:52:7b:fb:aa:c7:b0:00:4b:6e:d8:b7:64:
         99:f1:58:d3:d9:02:02:f0:b6:8c:44:fa:8b:7a:bb:d2:cf:14:
         bf:7e:9d:1c:b5:d8:49:5e:9f:ac:28:8f:f6:25:ed:58:a1:41:
         c1:57:d3:8e:71:b8:3f:a4:e4:58:3d:98:04:a5:6b:68:a3:a5:
         e3:a2:53:c3:9c:e8:f4:7d:02:55:5f:0b:cd:f3:44:ab:c1:40:
         87:f8:31:80:b9:24:31:b4:71:06:43:08:39:d0:ea:b9:dc:a6:
         66:03:f0:2a:cb:de:59:5c:7b:cd:7c:80:9c:e9:46:e6:89:f0:
         c8:54:6d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:56:44 2026 by rpki-client