Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File:                     lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier:          MizvFrP+kTB48qEO/fTBdzF/am6qkj7e+nfyIdqVWaI=
Subject key identifier:   6A:DF:DE:E3:FE:CF:57:BC:BA:AF:D6:C1:37:B0:EE:B6:9C:A9:0E:52
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer:       /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial:       019F9436F5F6E6DA58CB099340FFF9CD334D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number:          13EF
Signing time:             Fri 24 Jul 2026 13:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:57 +0000
Files and hashes:         1: XA0hanAouJl2ycFS_6jOkWOebDo.roa (hash: A3fTkPkEhBhccpT47iyF3/WYn8UVXxPajs9rFRIKGYs=)
                          2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: wcpBparb6bkGKF3nodSHqrHVd4+tRQZhJBf7kidxBY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:f5:f6:e6:da:58:cb:09:93:40:ff:f9:cd:33:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
        Validity
            Not Before: Jul 24 13:00:57 2026 GMT
            Not After : Jul 25 13:00:57 2026 GMT
        Subject: CN=6adfdee3fecf57bcbaafd6c137b0eeb69ca90e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:3b:e1:10:1c:47:67:00:5f:77:64:06:28:
                    2e:ce:9d:f2:03:d8:4c:6f:33:d0:81:de:28:bd:76:
                    eb:32:ac:2c:f4:e3:76:8e:25:04:a0:c4:18:35:40:
                    f8:4c:91:e9:10:53:22:6c:2a:9a:af:aa:6e:00:b9:
                    6b:72:07:91:c5:14:97:26:b4:00:d7:c3:8a:93:e3:
                    fb:4c:e0:7e:4a:69:8e:30:12:42:9e:c2:0b:e3:d5:
                    d2:7b:b1:48:d3:6d:a9:ab:79:ed:11:37:95:46:7d:
                    a8:70:6c:d1:1f:02:b4:fd:c5:d4:e9:ef:5e:7f:9d:
                    fe:61:87:4e:97:47:99:89:52:89:db:6d:8b:17:d1:
                    ad:ae:7e:be:b0:6f:ed:77:f3:28:4a:a9:be:9b:98:
                    b9:ab:ef:9e:12:4a:3e:9b:f5:c3:88:e8:49:bf:70:
                    e4:7e:97:77:69:c8:79:6c:53:ed:8a:a6:6b:f0:30:
                    e1:68:13:64:9f:f2:bc:e2:62:8e:3f:2b:4f:42:d9:
                    81:d5:9f:85:f3:d2:cd:b7:e8:da:dc:2d:85:6f:49:
                    6a:32:c4:f9:00:b4:3a:b1:4f:27:e6:e3:c7:b1:d7:
                    ea:ad:9d:a4:dd:20:bb:95:d4:79:7d:48:d2:39:d3:
                    9a:df:52:2d:83:54:dd:14:05:50:c6:32:bf:ef:b2:
                    d0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DF:DE:E3:FE:CF:57:BC:BA:AF:D6:C1:37:B0:EE:B6:9C:A9:0E:52
            X509v3 Authority Key Identifier:
                keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b5:ae:80:c4:ed:0f:68:9b:69:ca:31:5a:d1:7c:91:b0:3d:
         ec:65:00:6a:09:9d:37:ed:0d:90:5f:a1:de:3d:4c:1a:0a:bd:
         bd:5e:5f:0b:2f:b9:ff:f4:ad:29:73:4b:d2:d8:1e:04:83:4b:
         8a:3a:85:50:63:25:dd:03:97:fd:3f:5a:88:f7:84:2b:0c:f1:
         50:bb:85:19:e7:b3:dc:5e:16:e8:c9:c1:ac:d6:cd:ac:36:bf:
         6c:d3:33:ea:ea:e3:af:04:94:dd:fd:d5:7e:b0:f8:af:72:ee:
         33:65:30:01:cc:1e:bc:cc:2b:43:91:24:4b:44:e1:a0:ac:24:
         55:d8:40:4c:9d:7b:ae:85:6c:a0:75:85:bf:86:c5:e4:45:d1:
         d2:3c:cc:41:cc:4c:4a:2b:93:55:37:d8:85:51:19:ab:ec:f2:
         5c:8f:ba:98:8a:7d:3d:80:a8:8b:1b:78:bb:2d:e9:3d:97:3d:
         58:b4:71:7b:9d:67:98:17:f0:b0:51:a9:b2:9a:f2:83:66:e3:
         ef:e5:ee:26:bd:60:ed:94:9b:31:07:12:90:47:b8:86:f4:25:
         0e:33:8c:de:31:7b:cc:6e:1c:ea:76:48:ef:5f:0c:e1:e2:9d:
         82:63:59:b2:09:1c:36:a2:1b:8f:6c:62:13:d7:a8:e5:ea:db:
         24:83:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:18 2026 by rpki-client