Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File:                     45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier:          JextaLrMyyT6fZ8IxJb5ywwdiFk7/RzoVZ2SiNKYLW8=
Subject key identifier:   C0:13:14:8C:0B:18:81:75:C2:80:59:1D:3F:C0:30:E1:13:83:87:4A
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer:       /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial:       019F9022A201DF5B57678670C8DD2EE5FACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 18:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:16 +0000
Files and hashes:         1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: frfGuaJO+RfYNjjy+XANbmOAHdiZCHa4y2f121lLfeM=)
                          2: acUHfVCy5j8WfhXBkKrvtIIZ6u4.roa (hash: A0ZoDSyXeoOjiHDBQQXTi7qUdiWgsEQgspWWgoPcjbU=)
                          3: mY4iCleNhrzf8aXMLmHiJ52ay4A.roa (hash: XzaZ+/TpO1ZESBFBMtwiRlJAL9YVrFYukINjmUNi5KQ=)
                          4: mflNPwnPi4f5wBAod8r23N6IFVQ.roa (hash: eCHOBETtrQl/yFYeuqvktndVXTn5G2F5otfDMkWdMXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:a2:01:df:5b:57:67:86:70:c8:dd:2e:e5:fa:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
        Validity
            Not Before: Jul 23 18:00:16 2026 GMT
            Not After : Jul 24 18:00:16 2026 GMT
        Subject: CN=c013148c0b188175c280591d3fc030e11383874a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9e:75:ef:08:23:38:f9:e5:02:21:e8:63:95:
                    55:a1:20:18:80:b9:ed:2c:77:7c:ad:b4:9c:ae:a5:
                    ec:59:28:50:22:77:72:cb:52:56:6d:cf:d1:0c:3f:
                    75:02:0e:2a:43:db:e2:42:02:72:d3:2c:18:c2:15:
                    d0:15:56:3b:5a:44:d5:43:29:fa:06:cc:20:26:af:
                    b0:bf:db:c2:8a:c6:4f:b7:bc:14:28:47:e5:06:80:
                    dd:c9:2c:48:f1:33:6c:76:d4:c2:b6:3a:e5:cc:19:
                    99:3a:eb:3b:7e:47:6b:ba:c9:b8:db:45:06:81:f5:
                    c5:0e:00:31:24:6f:b8:67:d4:b7:85:c8:33:41:31:
                    e8:08:c5:1a:6a:08:bc:48:b4:39:ff:3a:65:98:cc:
                    83:36:8d:b1:be:ef:b7:8f:b3:33:0c:f9:4c:33:4d:
                    cc:c4:20:44:f2:8c:19:f7:84:72:84:eb:a8:3c:d7:
                    e7:2e:0f:d1:a8:3d:c8:0c:b9:e5:a3:bf:6c:4c:a8:
                    25:62:7b:56:9e:04:b9:f1:82:a7:c6:5e:61:55:3f:
                    76:e4:97:46:85:e3:dd:2b:73:b3:29:80:5a:b4:66:
                    a7:1b:49:1d:12:2d:c0:89:ca:5d:61:fe:df:e6:4f:
                    fa:f9:d9:b5:e0:d8:d2:2a:72:44:45:c1:31:fc:0b:
                    a6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:13:14:8C:0B:18:81:75:C2:80:59:1D:3F:C0:30:E1:13:83:87:4A
            X509v3 Authority Key Identifier:
                keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:df:8c:fc:45:1a:e9:02:dc:d2:a6:6f:05:a0:c8:4a:54:a8:
         f9:4f:50:83:89:d8:27:50:67:cc:45:fb:e1:5d:f5:ba:76:8a:
         2e:69:7a:2f:0d:b5:d1:8a:4a:44:30:d7:42:b4:b6:aa:a2:08:
         0c:05:82:de:2c:0a:1b:94:d0:61:be:d5:fc:e5:a5:79:36:b0:
         9f:a4:54:69:18:4c:16:1b:62:a4:39:2e:00:7a:13:9f:f2:11:
         24:2e:e7:da:d7:22:7d:6a:12:47:d7:56:0b:fe:16:3d:69:10:
         ff:8f:64:fe:ec:4d:02:1a:86:91:ce:4c:39:94:22:b2:da:fa:
         be:98:ca:c1:18:ed:e8:5c:66:56:fd:6e:97:1d:3d:39:b7:d5:
         92:e7:32:d9:6b:4c:05:c9:44:b0:34:71:d2:73:c1:bb:ce:7e:
         e8:74:fa:b9:49:6c:8f:b7:0b:4c:e7:85:8b:1c:05:b0:1f:00:
         33:3a:60:fe:c8:fa:2d:dd:77:69:95:bb:3f:38:6f:e4:35:55:
         66:5e:9b:d4:50:1f:27:7e:dd:fe:64:6b:bf:83:09:4b:aa:f6:
         5c:d3:df:e8:3e:5c:af:86:02:79:31:83:2c:ac:80:00:0f:04:
         fd:db:ac:1e:a4:f6:7f:25:00:62:77:a7:4f:f7:53:73:71:17:
         49:72:4f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:30 2026 by rpki-client