Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File:                     L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier:          OmYxILaRJrC3I66QxgCpUioHtDFktgELkYdig+0poJ0=
Subject key identifier:   8F:55:A4:75:D9:A3:14:33:C5:4E:22:BF:8F:8B:CC:A8:1A:8D:B6:25
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer:       /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial:       019F92ED83674752D94A859D5751D4BB2D89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number:          19AD
Signing time:             Fri 24 Jul 2026 07:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:06 +0000
Files and hashes:         1: 7w7oDCky3AV97MuZ6NwGQ3x9HGU.roa (hash: 7XBb43aHvOCSfipcR6qByLYTIyX5HDAp9+iD4nMHLV4=)
                          2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: /SK4z7C+RalNINb6JVKv4LmerGc8sfn4rXBxrm2YYLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:83:67:47:52:d9:4a:85:9d:57:51:d4:bb:2d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
        Validity
            Not Before: Jul 24 07:01:06 2026 GMT
            Not After : Jul 25 07:01:06 2026 GMT
        Subject: CN=8f55a475d9a31433c54e22bf8f8bcca81a8db625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:93:04:a7:63:09:a8:91:00:a6:a3:3c:5c:
                    52:82:1d:6c:b7:e4:b8:98:dd:50:f7:48:c0:0d:a2:
                    5a:41:b8:6f:fb:b9:3e:91:bb:9c:d1:48:78:a6:1e:
                    87:d2:0e:03:80:09:a2:91:65:17:a1:ee:6f:47:0f:
                    96:61:ec:21:de:1d:5f:1b:f3:ae:73:60:08:53:08:
                    2e:39:3e:39:62:71:2f:c2:e9:6a:d2:60:fa:27:df:
                    ba:2f:d2:d8:24:34:7a:5b:7c:1f:34:df:1a:42:cb:
                    7a:82:85:dc:81:32:a1:68:c0:3b:8d:de:83:2e:a8:
                    14:b0:cd:26:78:8c:91:a7:f0:d9:03:86:3a:51:6b:
                    58:63:fb:e9:78:91:2a:3d:41:ec:49:37:5a:7f:68:
                    22:91:1b:ec:74:24:7e:4b:fd:d5:da:5d:2d:3e:12:
                    48:be:2a:41:3c:73:fb:ee:ff:95:f1:66:ed:99:21:
                    66:89:03:e2:04:e6:7b:c6:61:0c:91:95:c2:48:10:
                    90:07:97:18:f2:d4:0d:28:4a:fc:b0:2b:69:d8:99:
                    56:43:78:46:ff:cf:b4:ef:8d:35:46:88:b6:0c:b5:
                    96:4c:e7:77:22:f1:cc:d6:a0:7a:b9:b5:12:8f:fe:
                    b7:89:d9:ce:e1:87:4a:11:44:ab:f7:89:ab:27:18:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:55:A4:75:D9:A3:14:33:C5:4E:22:BF:8F:8B:CC:A8:1A:8D:B6:25
            X509v3 Authority Key Identifier:
                keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:40:54:ea:e6:3d:d6:fa:03:e4:9f:4b:49:91:6b:b9:0f:
         34:bc:09:37:4c:93:a3:8d:83:4a:8f:b2:71:a6:8b:83:ef:45:
         a7:ce:57:d8:57:fe:4e:10:9c:fd:93:e4:c1:6e:b9:58:61:32:
         b5:4d:ed:c1:bd:05:ce:cc:7b:86:8a:50:1f:95:81:16:91:a1:
         e7:67:5b:4d:4a:ad:3e:d9:b3:3e:e2:1f:48:e4:c4:b6:8c:75:
         c7:79:5a:bc:9f:cf:ab:36:b6:c3:f7:b4:1b:4a:92:3d:ec:6c:
         d1:39:b5:1a:60:98:11:a2:f4:bc:09:f2:52:94:cd:c0:61:33:
         a1:fa:1a:dd:eb:74:72:68:7a:80:a9:c6:12:85:7c:5c:20:dc:
         e0:fd:68:7a:33:e8:40:c8:b6:71:a5:ed:7d:74:8f:f8:49:e9:
         f9:90:97:51:5b:04:1e:96:66:d0:fa:b7:e8:bf:fc:99:ba:3b:
         51:1d:c5:b9:0f:5a:56:7e:2b:11:bb:b3:f2:02:ab:a4:b2:24:
         f1:c6:31:52:0d:f9:73:e1:43:f1:19:ea:70:f5:9c:97:f9:5a:
         79:1e:1b:7e:0e:88:c6:a9:ee:8c:6b:02:14:8d:39:9a:d7:a7:
         53:99:19:13:40:cf:6c:0a:e3:35:44:54:a6:18:7a:f0:20:18:
         11:4f:83:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:33 2026 by rpki-client