Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File:                     fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier:          4v7w4gye4ntDyvCdNWkjNp8QoDIg8ud8iqM1nAmP2FE=
Subject key identifier:   04:91:86:48:0B:4E:08:F5:74:EF:2F:80:94:08:BB:02:83:A7:20:1C
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer:       /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial:       019F9436CDB2EABE855683FE94A87827E607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 13:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:47 +0000
Files and hashes:         1: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: 8OexI1HRP5wRykGfqJ5kJWwp7dfAFCP5ABNujwSzNF0=)
                          2: vypF4u6T8pornEd354CldlnvJ5Q.roa (hash: X/qPs2fMpklVg8cmNTWhzWpJY0nHbNqBSCIvT5rmL0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:cd:b2:ea:be:85:56:83:fe:94:a8:78:27:e6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
        Validity
            Not Before: Jul 24 13:00:47 2026 GMT
            Not After : Jul 25 13:00:47 2026 GMT
        Subject: CN=049186480b4e08f574ef2f809408bb0283a7201c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:f6:af:61:c4:70:3b:3b:67:00:5a:47:a1:
                    24:a0:61:ba:ca:e1:36:71:b2:9d:b0:37:96:2f:a9:
                    53:10:81:73:a3:e6:68:16:78:8d:a4:6f:88:24:49:
                    29:54:77:81:ee:0b:5d:c8:e3:c4:6f:3a:27:1e:36:
                    ac:c3:6a:57:a8:4e:d3:93:c0:72:07:aa:5f:67:dc:
                    1a:ad:33:8b:0e:3f:b8:48:91:c4:49:c6:83:fe:c5:
                    61:19:66:0d:a3:c0:1c:cf:1a:0a:54:f7:75:fb:6d:
                    3c:25:f9:ac:9f:0d:d6:3e:60:a8:1c:2e:0e:61:96:
                    b6:d3:1e:f1:bc:5e:cf:6e:93:0a:ff:cd:a0:a6:d5:
                    1f:16:be:87:da:05:59:3c:9c:fb:af:bb:b5:17:19:
                    05:e6:b1:56:11:e4:ac:fd:ce:de:4a:c2:4c:1d:aa:
                    27:81:d3:3b:47:f1:f7:84:0c:8a:9a:02:af:b5:8b:
                    a8:23:27:4b:99:09:a8:86:8d:3c:95:32:71:09:2a:
                    a1:d3:4f:01:ea:00:cd:79:03:bd:9e:de:a2:b8:ad:
                    23:42:9d:2e:6e:35:a7:06:df:d9:aa:c7:b6:e3:e9:
                    17:76:65:07:ef:25:72:61:dd:c8:e9:9f:00:4d:56:
                    d4:a5:20:7b:36:93:cd:81:6b:0d:c5:4d:94:7a:87:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:91:86:48:0B:4E:08:F5:74:EF:2F:80:94:08:BB:02:83:A7:20:1C
            X509v3 Authority Key Identifier:
                keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:75:4d:0c:33:46:87:e8:78:1f:27:f7:de:1f:78:df:a4:10:
         9e:d5:c2:85:96:58:ee:f7:ac:9d:b1:f9:3e:67:41:98:8e:60:
         5f:76:67:c6:d0:28:43:fb:07:a4:73:3f:ce:e5:d0:cd:4e:b8:
         d1:49:50:6b:77:16:4a:22:40:f3:7e:1f:5d:4e:f7:de:53:98:
         e4:16:6a:73:29:35:f1:1d:39:7f:4d:c4:7d:5d:00:dd:56:92:
         d8:5a:6b:99:c1:a8:c6:c8:c5:5d:7e:14:d7:9d:eb:e1:56:fc:
         81:ec:db:61:54:df:28:19:a0:01:c7:ac:45:6e:23:7f:48:43:
         ed:38:34:94:30:bf:62:39:24:07:0d:2b:0a:35:0e:97:2f:38:
         77:5b:a6:43:c6:74:fe:83:35:ac:f2:7b:26:62:55:92:86:69:
         77:47:06:e1:d1:f4:c6:ae:ad:80:57:b9:94:e2:02:7e:4a:1f:
         65:f7:69:4d:0a:72:f9:18:a7:d4:9e:9a:31:ca:2a:1a:da:24:
         9f:bc:15:5c:3e:43:c8:32:f9:02:e3:6c:b1:65:9c:40:77:2c:
         ba:8e:fd:98:34:6f:e0:e0:94:d9:92:89:fe:ad:1d:b4:e8:2e:
         c6:cc:36:0e:c4:a2:dc:c2:01:ed:a8:21:19:0d:01:9c:de:cc:
         9c:63:d3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:30:36 2026 by rpki-client