Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File:                     Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier:          eOGFoi+c6hELgXhz3m+xhSzkYeHRF4ghU8qQsLdWbPk=
Subject key identifier:   5B:9B:98:BC:F5:BA:5E:F1:7F:4A:EB:F8:6D:4A:4F:CE:D3:35:08:0B
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer:       /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial:       019F935C2B3DF2393F195F867CF3DF37CAB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 09:01:58 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:58 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:58 +0000
Files and hashes:         1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: oMwl0hkdjlZg54U/uV7uDJ9qgL2QCE19UJLigE9uZGM=)
                          2: ISm6RQxOZnxLUyH-R-CphPRNqZo.roa (hash: T+YGLuiGKtWgSDHKqlkXSycewSm5xaVhDYtV47JELiM=)
                          3: OYrxag2gdKVWmcS_MSjERgU_Ji0.roa (hash: Up6LnAiF7e1D845y6IhDGcXjWiOaIs0vsPTFZeoDQ24=)
                          4: p5utnLd33eKKva_RAEO_Xi-exGo.roa (hash: o9yl5ENus82WxKAzd4PkSoVYVHhX9LlBVWPF96ouh8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5c:2b:3d:f2:39:3f:19:5f:86:7c:f3:df:37:ca:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
        Validity
            Not Before: Jul 24 09:01:58 2026 GMT
            Not After : Jul 25 09:01:58 2026 GMT
        Subject: CN=5b9b98bcf5ba5ef17f4aebf86d4a4fced335080b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:58:c0:96:a6:af:10:5a:43:5d:87:d9:3a:99:
                    96:e0:a2:7c:bd:9f:2c:f0:b1:af:95:8b:ee:0d:27:
                    74:f5:2c:e6:79:2f:6b:42:a4:db:55:d7:1b:f7:75:
                    f5:2c:fc:90:81:89:91:2d:c6:ec:ee:17:af:bb:a0:
                    a5:b3:82:8f:77:64:d5:80:b6:7c:09:9d:e3:e6:0e:
                    3b:f9:8e:8a:2a:d0:2b:db:e4:86:16:15:76:85:e6:
                    92:91:6f:dd:ac:c7:7d:78:c9:bf:df:3b:3a:dd:d5:
                    44:6b:60:60:a8:3b:1c:32:b5:ea:d6:dc:62:44:95:
                    7a:58:30:3a:5a:d6:4e:bf:ca:26:2a:66:3a:fd:cc:
                    d0:50:24:ec:82:b7:df:20:0b:c5:4d:94:e0:8e:92:
                    92:ba:88:ea:92:dc:1c:e8:63:2b:67:c6:78:1b:a6:
                    ec:34:64:3b:00:7f:43:ca:b7:e2:d3:d2:6c:97:24:
                    e0:21:07:27:4f:91:3b:27:02:35:47:fe:10:9f:12:
                    ca:8f:2b:c0:e0:e9:e9:4a:1f:30:64:4a:98:73:cc:
                    ca:14:ba:ae:a5:a9:c4:f0:07:b5:51:ff:fc:8e:84:
                    95:ec:b0:47:b1:61:18:8e:a3:1a:ae:a9:4d:0a:46:
                    06:ac:ec:16:e0:2d:7b:aa:97:a4:fb:a8:b7:fd:f9:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9B:98:BC:F5:BA:5E:F1:7F:4A:EB:F8:6D:4A:4F:CE:D3:35:08:0B
            X509v3 Authority Key Identifier:
                keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:50:3c:db:c0:72:4a:35:07:f3:7e:94:b4:02:ec:8b:7b:98:
         6d:db:5f:32:25:14:52:fa:cb:56:32:b5:65:20:a2:be:b7:eb:
         b9:ef:35:5d:9b:09:8a:1f:6e:2b:07:5a:27:1e:91:9d:63:ab:
         94:7e:d2:0a:fc:5f:80:91:ca:dc:7e:46:c7:5a:86:d3:82:b1:
         cf:02:58:ed:e6:58:70:ee:7a:77:be:5d:d8:bc:ac:33:9a:83:
         7b:4b:2c:cd:bd:82:e8:22:03:57:c3:70:47:bc:8c:b2:7d:e9:
         37:30:40:82:c7:24:43:fc:13:39:9f:dd:8d:b8:20:98:5b:a4:
         e6:8f:0e:50:35:c9:52:f4:84:61:48:2d:f5:6b:14:b6:07:e1:
         e9:7d:55:9f:7b:4a:63:59:8d:59:bf:6a:0d:c8:e7:d9:5e:0d:
         c6:98:e2:37:ff:03:24:13:9d:0f:28:ae:97:0e:d6:e5:ed:4e:
         4c:ab:b8:f1:1a:47:aa:cd:0c:a7:f3:3c:31:dc:bd:da:a5:8f:
         61:35:f6:98:ca:dd:3e:c6:39:1f:c9:68:0c:de:de:2a:b4:b8:
         8e:47:f8:ce:09:68:3e:85:69:c1:e4:84:02:db:c5:a2:77:06:
         e1:e2:fc:c5:01:36:ab:4b:c0:59:2f:71:2e:72:37:a4:82:02:
         36:da:aa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:56 2026 by rpki-client