Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
File:                     dRWCm38DQRu-IbGiAEmM7r9cBsA.mft (raw, json)
Hash identifier:          PA9SNETrgNIsixPZ4ePOR5qb9e39KUZsVafrL6YLNxE=
Subject key identifier:   EA:8E:56:00:FA:82:04:A5:AF:EB:06:40:B6:45:B1:50:7C:46:68:E6
Authority key identifier: 75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0
Certificate issuer:       /CN=7515829b7f03411bbe21b1a200498ceebf5c06c0
Certificate serial:       019F927F4A5D865472EFBB0D0BD783601CAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
Manifest number:          023F
Signing time:             Fri 24 Jul 2026 05:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:43 +0000
Files and hashes:         1: dRWCm38DQRu-IbGiAEmM7r9cBsA.crl (hash: +hGJt/vT7s7Ou0NUkmx6SP2FwDbkLwhGeaQIAj1gdiY=)
                          2: xtgzbsY4RQgAHqGjGSJ0iMYk8Y4.roa (hash: z72ZDa/NMuWUT8gblQL7edLWi92ZNQzGqAeFXRe+TZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:4a:5d:86:54:72:ef:bb:0d:0b:d7:83:60:1c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7515829b7f03411bbe21b1a200498ceebf5c06c0
        Validity
            Not Before: Jul 24 05:00:43 2026 GMT
            Not After : Jul 25 05:00:43 2026 GMT
        Subject: CN=ea8e5600fa8204a5afeb0640b645b1507c4668e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:80:a8:14:6f:32:57:eb:fa:b1:d5:4f:81:3e:
                    52:cf:af:f7:aa:b6:77:24:29:01:5f:37:02:7f:f2:
                    bd:f7:21:30:3e:28:6a:66:93:2a:03:92:ae:f1:56:
                    ca:26:b3:ab:5d:7c:f9:6c:27:9a:32:21:30:0d:b5:
                    58:8b:bd:e3:1a:9d:82:18:7c:cf:aa:b1:9b:ed:7f:
                    02:86:59:14:c8:85:74:49:0a:0f:9b:2a:af:95:af:
                    30:8f:b9:48:59:5a:66:0c:48:f1:37:3d:62:95:28:
                    99:31:d3:e4:d3:5a:4e:8e:70:09:34:d1:ff:59:57:
                    f0:21:ff:db:f1:28:7a:e7:dc:eb:7b:e7:8b:1a:61:
                    ea:40:4f:db:6d:be:37:69:90:0b:e3:0a:86:c7:af:
                    28:6d:ff:d5:06:c2:02:19:98:f9:17:8e:bb:e0:56:
                    71:ce:23:9f:fc:ca:30:28:1d:1f:19:de:1c:a0:ad:
                    c8:a3:44:d6:16:e5:43:80:da:a1:af:0a:73:52:bf:
                    ba:78:34:23:a0:8f:39:fc:54:34:b1:b9:34:52:ff:
                    e2:9b:ac:09:11:48:b6:23:cc:3b:5b:88:b6:08:d6:
                    85:48:a2:4e:23:38:30:d2:30:3e:56:73:70:4b:84:
                    ea:9c:5e:83:27:2c:02:4f:51:47:77:7c:bc:a6:95:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8E:56:00:FA:82:04:A5:AF:EB:06:40:B6:45:B1:50:7C:46:68:E6
            X509v3 Authority Key Identifier:
                keyid:75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:5d:1c:bf:ed:5c:9d:19:05:63:b4:15:75:0b:10:43:89:e3:
         bf:c7:7e:0b:47:35:7d:45:a5:02:97:11:8d:d7:6a:e2:ea:c3:
         27:3a:f3:be:28:04:1c:e8:6e:81:8b:5d:19:7c:41:d6:e7:29:
         db:d4:d4:43:3e:4f:5c:b9:f8:3c:3e:66:20:78:f9:b9:ad:0f:
         8d:f8:e5:55:47:2f:e4:13:80:1e:94:ad:d9:41:df:ef:70:96:
         f3:27:51:e6:ec:92:6a:e1:b1:6d:08:ad:87:fb:30:b5:19:5f:
         ee:74:db:f5:80:84:04:36:8b:78:6c:aa:89:84:fa:54:d5:8d:
         a8:b3:b9:fe:c9:45:7a:9d:e1:e3:ec:5d:26:a7:5e:79:ee:32:
         c4:f0:08:11:83:0e:03:29:24:65:bf:97:7a:df:f2:06:a8:fa:
         df:ee:8b:73:ea:23:50:aa:7f:e0:76:38:5f:c1:20:79:ad:91:
         ee:8a:c0:9e:60:92:26:5c:03:b9:e4:79:ce:97:ba:d1:2a:f4:
         9d:36:b4:7e:68:b5:9f:05:41:8f:f4:98:bf:2b:d3:6f:06:73:
         9a:19:13:9b:be:b3:03:5f:b4:1c:64:fd:35:ce:ed:c3:6e:80:
         66:3d:cf:ce:10:98:a6:01:06:2d:91:81:d4:21:6d:b4:82:9f:
         5d:a9:87:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:54:11 2026 by rpki-client