Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
File:                     o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json)
Hash identifier:          rhfzTvEvs+sfDnBM9+IHV4F5op9smmbMFTGzdgpKV2I=
Subject key identifier:   10:9D:72:37:B2:92:CA:7D:6B:1E:8A:0F:36:67:6C:BA:E7:D2:80:43
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Certificate issuer:       /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial:       019F927F7579C6A824CA1CF63B76CCFC9833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
Manifest number:          14EA
Signing time:             Fri 24 Jul 2026 05:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:54 +0000
Files and hashes:         1: E0FhH7aNsDOMh5ZSlQ4FDkv-nU0.roa (hash: q/8wfiJe6Z5yCg6R7Ws4sjAshSjQMW+hXl1C4xiGP+U=)
                          2: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: aumOZZm2RK1pN+/PfjiZwvLi4+GlduNPJLvj6C9oD+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:75:79:c6:a8:24:ca:1c:f6:3b:76:cc:fc:98:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
        Validity
            Not Before: Jul 24 05:00:54 2026 GMT
            Not After : Jul 25 05:00:54 2026 GMT
        Subject: CN=109d7237b292ca7d6b1e8a0f36676cbae7d28043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:1b:3e:0a:83:2c:37:da:50:66:68:45:25:
                    88:ef:1c:3d:46:7c:8a:81:e5:e2:0a:53:0e:73:d3:
                    c8:6d:2e:7a:50:71:fd:8b:1b:79:e9:76:bf:33:f6:
                    72:3a:65:dc:5b:ea:d7:a6:f0:32:95:be:af:14:99:
                    e2:20:c6:b9:e4:e4:cf:21:a1:78:13:f9:fb:bb:cd:
                    b0:fd:4b:e6:2c:15:ba:3f:37:38:d5:4f:39:cc:db:
                    34:ad:10:5e:d7:cc:ad:48:85:a3:ad:23:67:17:c9:
                    09:fa:fd:8c:33:06:83:5f:58:ef:89:9c:f4:45:2d:
                    86:f0:26:04:32:4a:9c:48:ad:8b:da:89:68:6b:c3:
                    81:b6:88:c7:37:0b:0e:16:f1:30:9c:75:11:07:de:
                    dc:ed:05:49:0f:d3:fd:cb:94:61:58:c9:76:f8:73:
                    0b:d5:0e:a9:05:96:12:c7:e1:22:36:60:d0:c2:c0:
                    be:89:ea:5d:a5:47:db:85:f7:50:5b:2e:20:75:61:
                    0e:a7:77:9f:d6:67:f7:fa:80:3d:e2:e5:34:c3:df:
                    e8:12:4a:b2:7a:63:ef:10:63:a6:b2:97:a9:b0:85:
                    04:60:6b:18:64:71:3a:fd:0f:39:81:50:87:b8:19:
                    c7:03:c6:a3:bc:30:df:a3:40:b3:a9:5e:26:bb:6a:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9D:72:37:B2:92:CA:7D:6B:1E:8A:0F:36:67:6C:BA:E7:D2:80:43
            X509v3 Authority Key Identifier:
                keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:80:c5:86:6a:86:6a:82:2f:d9:34:5d:cc:0a:8c:57:f9:1c:
         f3:c9:90:95:24:12:78:4a:c9:8c:e7:66:3d:5e:08:23:c4:27:
         b9:13:ec:c6:62:c1:64:9b:fe:46:73:63:d3:57:d0:e8:4a:d0:
         ea:33:1d:1d:11:7d:94:74:b4:bd:04:c3:6b:44:80:00:7e:e9:
         d4:b2:03:f6:ab:fe:6d:9a:c8:90:39:0b:60:1e:f9:02:33:e3:
         de:db:97:99:66:b6:77:dc:1c:34:ed:38:f2:fd:ec:a7:8b:5d:
         dd:0c:28:d5:36:0c:91:35:10:9a:8e:31:56:b5:d6:d9:f5:6d:
         1e:c4:e6:76:68:9b:73:a3:58:f1:fb:dc:ec:85:4f:66:00:8a:
         b2:6c:59:9b:4d:ea:8a:62:88:a5:45:79:f3:13:69:a6:ee:05:
         35:3e:e5:7f:71:93:8c:81:18:3c:21:77:c3:8a:d6:b3:de:f0:
         49:da:0c:51:fc:ab:5a:37:7c:29:fa:d8:5a:1a:bc:42:e7:7d:
         db:05:86:13:94:84:33:35:0b:99:f9:72:24:5e:02:13:85:ba:
         e8:cd:a5:5a:64:7c:02:a1:ee:13:a0:46:6c:dd:ea:b8:1b:8e:
         72:e8:2e:b5:f9:54:fe:70:4c:9f:85:59:b2:38:fb:f1:56:a2:
         fb:34:da:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:24 2026 by rpki-client