Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File:                     96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier:          P0np6VbjM/N1U+c1y8NNIzuCKr5EmrqmymWYjL6Dknk=
Subject key identifier:   AD:0D:70:A5:D1:23:CC:EB:62:B6:32:2C:D1:25:B9:0B:68:D1:EE:E9
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer:       /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial:       019F9135B5D19443FC43F07EB17A3DEF6E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 23:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:44 +0000
Files and hashes:         1: 1-Yjv_9mU_kRWoY6V1JwyH5eDzqM.roa (hash: 82tasXTqmj9u9YWsMF9gFr7ezWFi2yhFOj1F8O/axqQ=)
                          2: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: lBu2iZrWWTY9k3samQqNazLFr1Ql0kf3Bij58283K+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:b5:d1:94:43:fc:43:f0:7e:b1:7a:3d:ef:6e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
        Validity
            Not Before: Jul 23 23:00:44 2026 GMT
            Not After : Jul 24 23:00:44 2026 GMT
        Subject: CN=ad0d70a5d123cceb62b6322cd125b90b68d1eee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:db:47:4b:d2:11:56:1a:1f:78:ad:c5:35:
                    8c:31:fa:ca:2b:16:5d:99:70:8b:3d:ba:9e:51:08:
                    00:ae:03:9d:ad:36:7e:0b:f6:30:9f:3f:0e:6a:8b:
                    60:af:05:24:9b:05:35:21:9e:2d:98:cd:c6:12:a6:
                    46:82:81:04:80:4d:05:28:27:2e:ea:c7:b9:10:4e:
                    18:bf:76:99:ad:cf:87:db:82:e3:c8:d2:f7:39:8f:
                    e0:89:7f:2a:66:b7:73:14:8a:5c:46:d1:c0:da:d1:
                    6f:1d:48:20:91:49:65:fd:6e:26:9c:62:3b:a6:5e:
                    62:12:02:52:a3:78:1d:a9:cd:cb:c5:3c:18:22:75:
                    e7:98:62:7f:ef:d6:fe:6a:ac:b6:e0:8d:0d:f6:1e:
                    6c:4d:66:ee:ab:ee:52:50:29:6e:3c:47:08:4b:8e:
                    5f:64:aa:31:34:a8:4f:51:80:7f:c2:9b:ba:d7:41:
                    5b:f9:2c:20:4c:52:28:04:db:a9:98:a1:19:f2:60:
                    14:0d:53:8c:c5:80:28:15:89:8b:45:9d:5d:91:70:
                    b7:06:88:78:4f:10:cc:48:65:89:36:8c:ae:ac:3e:
                    2d:6f:8a:49:0d:00:aa:97:e0:b6:29:5a:d7:96:ae:
                    29:77:06:bd:8b:d9:dd:86:c8:dd:8b:e3:e7:9b:ae:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0D:70:A5:D1:23:CC:EB:62:B6:32:2C:D1:25:B9:0B:68:D1:EE:E9
            X509v3 Authority Key Identifier:
                keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a8:3a:e2:f7:17:cf:b2:ca:79:16:d3:b6:12:69:24:e7:2f:
         95:0a:bb:0e:5a:e9:4f:30:6d:6f:82:63:31:ff:9f:cc:a9:51:
         05:ec:71:69:1d:6b:86:4a:d9:9e:1a:7b:b4:9b:fd:8e:a8:83:
         b0:59:18:b7:cd:fb:7a:69:b9:52:97:6b:4e:21:f1:c4:2a:b6:
         92:3d:0f:86:9a:a1:9d:47:2d:15:36:b0:1b:c7:e2:d5:50:32:
         9a:d3:8a:60:31:80:f9:38:d9:e3:f3:8a:32:98:af:1e:b0:68:
         74:90:52:17:26:2f:53:9d:7a:c8:32:c3:b2:bb:36:13:63:a2:
         5b:87:ca:a8:5a:12:72:1a:7e:27:bd:3c:f6:2a:53:b4:8c:b8:
         ab:91:25:6b:83:d7:f1:08:61:7b:ab:e1:c0:2d:17:a7:4f:59:
         8c:9a:13:54:8b:eb:70:f4:08:b6:a1:c9:f3:fd:d7:93:16:72:
         dc:3d:2a:0a:02:19:55:d9:89:c1:6e:be:73:9e:1b:88:67:90:
         0e:df:f9:c2:1b:c4:25:27:a8:cd:96:7f:93:ab:7b:a7:3e:91:
         75:82:ce:cb:0f:ff:1b:50:40:a5:c6:fa:e3:1d:b2:de:00:17:
         3c:d5:bf:f0:8e:c2:c1:75:9d:88:4f:84:d0:25:6e:e5:b3:a7:
         ba:88:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:39 2026 by rpki-client