Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File:                     j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier:          4r+JSok70v4qJ/H+vDFEyJztgtng426e/kpE8HCGCuI=
Subject key identifier:   89:82:97:C0:C7:7C:B2:3B:F9:F7:93:1C:87:B0:1C:15:12:80:4C:05
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer:       /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial:       019F93246B3A668E7388A8ACEA0A29354FBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 08:01:05 +0000
Manifest this update:     Fri 24 Jul 2026 08:01:05 +0000
Manifest next update:     Sat 25 Jul 2026 08:01:05 +0000
Files and hashes:         1: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (hash: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms=)
                          2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: wD7M6SuRluyUnKd1YARVXksb8P7uWtfiGvda5afo7jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:6b:3a:66:8e:73:88:a8:ac:ea:0a:29:35:4f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
        Validity
            Not Before: Jul 24 08:01:05 2026 GMT
            Not After : Jul 25 08:01:05 2026 GMT
        Subject: CN=898297c0c77cb23bf9f7931c87b01c1512804c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:7a:d3:d1:32:09:0a:01:89:72:00:20:c5:
                    40:ec:6b:ea:55:df:4a:ef:ce:31:7f:fb:9c:e4:66:
                    98:10:0c:af:9f:0b:89:ac:1d:d0:43:bf:41:be:69:
                    7f:e1:f8:92:9c:c2:28:4a:5b:ff:d9:d4:75:59:3a:
                    3e:1f:63:9c:e2:f7:ef:08:2d:5c:dd:05:f1:f0:2b:
                    c7:a8:dd:1c:1e:12:cb:71:73:1f:3e:17:a9:25:a3:
                    81:60:c9:97:ff:22:af:0d:22:ee:42:3c:38:29:22:
                    92:0f:c1:95:e3:03:64:51:66:be:4f:f8:af:de:1d:
                    9c:54:de:1c:2d:ad:b7:dc:87:39:f0:4a:10:ea:4d:
                    01:de:fa:05:ea:be:09:6f:a1:10:7f:3a:7d:3f:ed:
                    1a:09:49:e5:4a:86:34:60:3f:c2:c1:44:b8:0a:51:
                    b8:5b:7c:c4:b3:1d:95:f1:4f:e9:53:0e:4b:52:95:
                    05:79:04:1f:6e:bb:7f:59:65:18:d3:6d:57:7e:b4:
                    ad:37:14:ea:34:8e:66:c8:a3:26:2f:63:19:28:a3:
                    78:eb:74:bf:6e:9e:25:34:52:3d:bf:b2:7f:7b:d7:
                    e7:16:84:c2:88:ab:06:b1:5b:34:62:69:7f:92:7e:
                    cd:d6:a6:ae:48:50:a6:43:42:54:f0:39:36:0b:a7:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:82:97:C0:C7:7C:B2:3B:F9:F7:93:1C:87:B0:1C:15:12:80:4C:05
            X509v3 Authority Key Identifier:
                keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:bf:fe:2e:9e:b7:15:6c:79:60:53:8c:2b:cf:31:40:5d:72:
         24:ec:87:65:33:8c:c3:70:4e:42:ae:2f:78:e3:33:db:b7:de:
         25:ba:05:f8:fb:ce:2a:df:e0:75:2d:c1:26:8d:b0:c5:89:a0:
         95:bd:ee:58:75:45:cf:80:50:5d:c0:f6:d1:00:3a:e0:ba:68:
         12:fd:0e:c2:2f:c0:d6:8e:5e:9a:aa:7d:c2:a8:b3:f8:26:15:
         cf:4e:ab:49:ab:78:de:3e:67:9b:7f:f0:d5:19:71:80:b2:90:
         eb:90:6c:b3:67:8b:5e:e1:4c:6e:19:20:76:b4:d1:57:03:58:
         18:8b:b6:f1:63:c2:77:a6:5f:6f:b8:37:4b:57:ab:41:2a:c8:
         ab:47:93:e0:eb:cf:04:74:04:2b:ae:cd:0b:e8:8d:0d:dd:8d:
         3c:64:96:d8:a6:73:9e:c6:ce:3a:16:22:3e:80:e1:0a:8c:57:
         70:34:74:f9:5c:dd:3a:f0:71:df:3a:1b:8c:da:ce:ed:01:d1:
         a4:05:37:85:6b:68:db:8c:50:8e:58:5e:61:69:68:26:b8:0d:
         76:4f:10:3d:d1:c6:8a:7b:b3:a6:3f:0a:22:e1:0c:eb:16:94:
         e2:01:12:ce:76:80:20:e7:b9:68:bd:8b:25:63:3b:23:d2:07:
         87:ea:eb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:20 2026 by rpki-client