Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File:                     _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier:          9BXLUBkF8zurqi0ybKhyWkBYZy2Cs8ETCYqbY4vpJsQ=
Subject key identifier:   CF:DC:8E:D4:C5:60:2C:CA:D0:3B:C1:3B:8D:E5:28:EC:D2:22:0B:E4
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer:       /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial:       019F902303FA3DDF9B7FA53750F3B0A305B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 18:00:41 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:41 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:41 +0000
Files and hashes:         1: BGnG6gtmJf9oXbmJn6G8to3OAXQ.roa (hash: 7lUuJCGm6EGdC4KlGNBvD3jQRgoMt2XAzy3kEwKql7A=)
                          2: GRQeTTIlDXdek7LI3xSxbyP0wko.roa (hash: /36LNNo/X3fjiRfzW93svxxPJpEouDboCXaZzVepsY0=)
                          3: QIkShXbbHThv1aeU1a-peKPDkSs.roa (hash: VjCUy/EF7Rus5PhS1elNAKUIyC4Ng0/nopkU975oiO4=)
                          4: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: /PAAokyxcXWDjFObOcVZJ8FpqfPyQ4/6cI169xMawSw=)
                          5: iYHzEnXzX7Ri36tD7aub9iMoOmA.roa (hash: 1jW4is5cwWCDH+AJEWg+glpxZJwRIEFEPAYxOuttUh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:03:fa:3d:df:9b:7f:a5:37:50:f3:b0:a3:05:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
        Validity
            Not Before: Jul 23 18:00:41 2026 GMT
            Not After : Jul 24 18:00:41 2026 GMT
        Subject: CN=cfdc8ed4c5602ccad03bc13b8de528ecd2220be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:06:a2:9f:4b:ef:33:74:30:2d:be:50:04:f7:
                    09:4e:82:f5:5e:32:ab:05:3a:e7:be:e5:ef:93:80:
                    84:63:db:44:a9:36:0b:8c:bd:c0:6c:d5:13:92:19:
                    28:85:cc:34:27:03:f4:0c:ae:53:b8:2b:51:fb:7b:
                    c0:98:6e:ce:b9:fa:97:fb:b9:e9:fb:83:8e:71:4d:
                    76:8b:e3:21:54:28:d0:5e:11:59:49:12:ea:0f:49:
                    c9:7f:d2:93:88:a8:3b:55:f7:8a:0a:f1:28:17:c4:
                    9c:63:90:50:a2:c6:0b:ea:55:b1:5a:84:fb:1a:e9:
                    19:f4:20:20:3f:a4:be:7e:93:79:a8:78:96:6e:03:
                    37:b3:dd:ed:11:99:31:80:0a:4a:29:01:96:67:fe:
                    31:5f:60:5d:fc:94:0b:05:77:9c:29:71:71:0f:ba:
                    d3:59:b7:8a:2e:6d:8d:ab:19:c7:63:81:ab:27:f2:
                    de:1b:82:31:68:10:03:d2:3f:52:bc:88:e3:9a:34:
                    31:c0:32:39:e2:5f:dd:fb:b3:06:3a:72:40:25:32:
                    4b:cf:80:40:d2:dd:cd:54:b3:8d:73:cb:aa:0e:14:
                    d9:c6:5d:4d:03:8d:2b:e6:93:5e:c8:38:00:85:8c:
                    ff:6a:25:7f:24:62:e7:df:d3:fc:79:6d:1d:de:32:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DC:8E:D4:C5:60:2C:CA:D0:3B:C1:3B:8D:E5:28:EC:D2:22:0B:E4
            X509v3 Authority Key Identifier:
                keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:cc:e7:ac:0e:a9:5b:8b:e3:ff:a8:ce:b5:54:b5:22:9f:32:
         94:15:09:f8:8d:00:77:26:0b:54:16:65:d6:a1:d0:ae:f0:09:
         7c:90:18:0b:b8:1a:27:ce:cd:06:1c:40:0b:65:93:0d:50:70:
         e8:0e:3e:bd:a7:8c:50:49:2c:87:54:ec:92:25:f7:d1:a4:8f:
         d5:e6:9b:24:d8:37:e0:57:8d:ca:d9:2f:e5:79:89:a6:df:54:
         57:4b:d2:78:8c:8c:f2:db:5a:c3:56:17:3d:e6:34:1b:43:2b:
         23:52:20:9f:17:90:c0:4d:f1:e8:25:ad:45:46:04:62:34:a1:
         05:af:18:da:c2:9e:48:53:8b:6b:81:73:aa:74:bd:53:82:8c:
         e5:de:60:e2:78:80:0c:55:cc:21:90:ca:d2:0c:36:42:8d:89:
         a0:16:74:73:bf:6a:18:63:bd:30:53:d9:02:23:6e:8a:9b:72:
         34:aa:1c:cc:14:89:71:67:e6:26:99:03:e7:69:ca:d4:e6:bf:
         8d:c2:13:0c:b2:99:ee:a9:7e:dd:cd:4d:08:ac:7d:50:a5:1b:
         3a:51:d7:f5:7d:06:bb:77:63:4a:15:b7:6c:a6:7e:04:32:5b:
         1b:0d:43:67:82:bb:95:af:aa:ab:38:95:8e:bc:37:19:f7:c3:
         f7:8d:6c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:27 2026 by rpki-client