Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File:                     SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier:          5hB9k8Xi/WpE/lDALAkUZ9o1vInGHjs/zJveQqhKcXc=
Subject key identifier:   64:53:B4:9D:B0:62:18:65:3D:1D:A4:84:32:B3:F2:18:0D:68:F4:CA
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer:       /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial:       019F9211018B0D2676FBB9359461F6525462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 03:00:15 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:15 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:15 +0000
Files and hashes:         1: 1-_tolY0Ku6cjK7uWuGIDT-aOsUM.roa (hash: zHmw/JUfBT58tzI52qKI6ZXBHiMslg81gZfcAbrW9BY=)
                          2: 1cDQdypkn0cjo9FfkDhM0paatNY.roa (hash: +ByPIkalEzr2Rwt/bFmRxra3ZwfCDb/OP1YXhCyI2zk=)
                          3: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: bQ+72zCY+Rm+kZS2ZBqIwmqktfkF1Dt1bBAQkuh2SjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:01:8b:0d:26:76:fb:b9:35:94:61:f6:52:54:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
        Validity
            Not Before: Jul 24 03:00:15 2026 GMT
            Not After : Jul 25 03:00:15 2026 GMT
        Subject: CN=6453b49db06218653d1da48432b3f2180d68f4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:11:63:72:36:1f:28:3c:bb:e9:ec:10:ba:0d:
                    82:35:fd:47:08:74:ea:28:b0:5d:a3:b2:28:a9:d0:
                    16:e0:28:6a:69:56:d8:eb:a5:64:a2:1d:73:77:99:
                    37:93:df:b0:03:9f:99:11:de:12:71:0e:ea:0b:5e:
                    eb:53:bb:71:b4:be:16:8b:df:93:e3:7b:44:20:fa:
                    32:5e:47:33:33:e1:55:04:d3:a8:d8:6f:1a:92:be:
                    38:d4:fa:f8:af:78:fb:6f:7d:45:cc:72:49:61:e6:
                    c6:fe:12:26:37:88:1f:90:cd:22:d3:47:94:77:79:
                    b9:0c:72:a3:1c:e9:c5:39:c7:cc:92:9f:e2:b5:43:
                    2d:af:d4:b2:40:a6:10:98:cb:19:1f:d0:3b:4b:54:
                    04:09:43:a4:b1:8a:16:36:c5:7f:2f:88:55:8e:be:
                    8e:3c:45:2c:8c:28:50:3c:33:48:ec:37:7d:b3:e2:
                    61:88:b9:9d:ff:1f:dd:92:b9:a6:cd:7a:64:36:99:
                    f7:d9:3e:67:49:2c:02:c9:25:b3:7c:da:1d:01:10:
                    6e:27:9b:34:81:ed:47:ad:2c:b1:ea:20:57:27:48:
                    34:54:40:da:fe:b3:df:16:1f:6b:f5:ec:87:05:1e:
                    e4:a6:fd:4f:b2:26:db:87:52:0f:1f:59:62:41:24:
                    7e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:53:B4:9D:B0:62:18:65:3D:1D:A4:84:32:B3:F2:18:0D:68:F4:CA
            X509v3 Authority Key Identifier:
                keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1a:d4:76:bd:74:da:e8:6b:50:95:31:c9:59:81:b5:55:9d:
         3e:73:5e:bc:27:e4:b9:c9:88:81:9b:b9:e2:42:a8:7c:06:25:
         3f:02:38:89:c2:0e:7c:ba:58:ab:87:16:d5:1f:b8:06:de:26:
         da:d0:35:1f:d0:05:40:41:3d:ea:f9:07:d9:65:0e:aa:f0:b1:
         3c:af:b3:72:7a:ba:14:cb:6f:cc:4a:54:23:42:a8:87:2f:cd:
         02:fa:8d:02:99:42:9d:7c:01:c3:23:04:9b:c2:97:07:83:a3:
         a7:78:27:52:2b:96:fa:20:3e:7c:43:89:0e:f2:d9:8e:00:f7:
         08:14:75:0c:5c:ff:63:f9:77:fc:f4:fe:d2:58:a8:b4:20:c0:
         fd:04:64:b1:07:85:71:1e:35:36:ad:13:98:0b:f9:6a:4b:da:
         5d:c8:fc:ad:03:97:9d:32:01:ff:de:fb:ab:eb:52:7d:af:54:
         43:b0:e0:3e:4f:ff:a9:8f:d1:b8:19:26:95:0c:d7:38:36:36:
         88:96:a8:6b:58:47:1a:89:38:5c:f9:05:70:3f:cc:59:f5:ae:
         b6:7f:38:17:46:08:c5:34:2b:9d:fd:d8:67:95:51:6a:bd:94:
         fe:d4:36:c8:47:d7:ea:72:7a:f5:ba:53:55:f7:72:8e:bd:6f:
         79:5a:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:39 2026 by rpki-client