Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
File:                     Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft (raw, json)
Hash identifier:          C+yhLeiatNBdIL+LP9ki/uH4+gjXq4BmikEq7dniaXo=
Subject key identifier:   E8:E3:D4:DB:10:44:20:D4:EB:80:7B:A2:6D:21:42:1C:9D:BF:47:81
Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
Certificate issuer:       /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Certificate serial:       019F9022CC348B78084458124427D5187D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
Manifest number:          0E5A
Signing time:             Thu 23 Jul 2026 18:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:27 +0000
Files and hashes:         1: Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl (hash: VoOdW4LjW7IoYuw6iWAG/LhV9rQbGwXFW3VFGgVByAc=)
                          2: vGbYlgAHGuxAtkX_gF1BeSRqyBw.roa (hash: AoXRDljrLO0qQScHnB2yMCrZvRd/l+376wR7c+Uavms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:cc:34:8b:78:08:44:58:12:44:27:d5:18:7d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
        Validity
            Not Before: Jul 23 18:00:27 2026 GMT
            Not After : Jul 24 18:00:27 2026 GMT
        Subject: CN=e8e3d4db104420d4eb807ba26d21421c9dbf4781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:b3:1e:12:f3:b2:6c:61:0c:ea:a0:62:b8:
                    74:14:5f:14:90:66:a0:a3:60:6a:2e:fc:8f:49:6a:
                    9c:84:7c:00:54:66:27:31:8a:ca:a4:bc:10:a9:8b:
                    95:9b:d7:13:57:3f:fc:23:a1:73:43:cd:a8:99:aa:
                    5e:a7:c6:e9:81:f9:06:af:94:75:8b:dc:92:65:e0:
                    92:a3:92:43:af:44:69:06:14:87:47:fb:fa:9d:b1:
                    0d:14:9f:d6:da:6f:c7:f4:86:54:c2:e4:f8:1f:91:
                    6e:2f:e0:d3:3f:56:73:9a:74:6d:04:66:25:f1:44:
                    fe:94:16:cb:1a:b4:68:35:d9:30:6a:2d:f3:99:c2:
                    97:e3:8d:42:38:da:0a:8f:95:2f:df:c6:f0:b2:9a:
                    c0:21:36:3a:ff:4c:6a:f8:45:87:a4:61:ab:f8:91:
                    f6:db:f7:a4:bf:14:7c:44:bd:44:83:85:ad:3d:64:
                    cc:4c:c7:bc:7d:c5:e3:5c:e1:97:16:17:53:3b:8f:
                    ad:ca:04:7a:e8:6a:ed:ea:bc:96:06:b1:b5:61:e5:
                    14:28:08:f5:31:4d:7a:4b:9f:95:2b:4c:ec:74:81:
                    d9:39:d0:75:d7:22:06:0f:46:4c:e4:c9:c9:c4:75:
                    42:36:6f:8d:d5:2d:14:32:69:e2:ee:66:33:92:5f:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E3:D4:DB:10:44:20:D4:EB:80:7B:A2:6D:21:42:1C:9D:BF:47:81
            X509v3 Authority Key Identifier:
                keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d9:b5:d2:0a:ea:52:f7:fb:ce:ad:4c:4a:1f:78:29:73:79:
         c2:da:35:bf:84:97:77:8d:72:bf:36:9d:ee:8e:97:26:ff:18:
         8a:9d:42:f9:84:26:9e:52:9f:f6:3e:6f:5f:74:90:ca:b1:61:
         31:2c:96:9e:5f:4e:1f:ca:9b:8e:ae:27:b1:c8:01:ca:21:b6:
         cb:d5:ea:86:65:e0:19:a8:68:cb:36:79:3b:83:4b:25:c7:ce:
         d8:3b:9b:cd:ab:1d:8b:ea:ad:4a:88:c0:1f:70:e6:7c:2e:31:
         52:2d:31:77:d4:12:df:83:65:cc:94:19:e3:f3:03:04:12:cc:
         6d:b8:05:50:74:e5:cf:be:f8:73:17:22:a4:ba:ae:36:da:63:
         f1:b5:ec:d3:43:f3:32:23:aa:42:4d:5c:46:85:68:6d:c6:ce:
         26:11:1b:5f:ed:09:90:87:b4:12:09:0e:5e:2c:dd:68:d9:9c:
         19:56:0c:49:55:87:09:90:10:58:c6:89:d1:a4:57:d8:8c:e5:
         a9:82:04:7e:6d:2b:b2:43:4d:10:ce:c4:07:86:95:8c:70:46:
         3c:af:36:5b:c4:ca:a0:df:e3:4f:68:92:c8:3b:fa:9d:d9:66:
         1c:12:70:03:ad:97:59:82:7d:46:7b:6d:48:f5:d9:b7:1a:0e:
         21:f2:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:39 2026 by rpki-client