Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File:                     0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier:          3pzH7Zb9QpujPIudZy+/bSuWxT5ZWYI6vsEplWw12/0=
Subject key identifier:   2F:77:A0:EB:80:F0:38:26:AD:F1:A3:02:46:6B:E9:70:06:0B:1B:4E
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer:       /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial:       019F90233B8E32922F6D36F2263E4788AEE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 18:00:55 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:55 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:55 +0000
Files and hashes:         1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: TZsxLnFOC+YRaZXh+el888WEENf0gzoIFR022wP7OG0=)
                          2: knQYsypbRhqwvEH3fTnKrdPWqWY.roa (hash: WNEtwLYJf9qeEVFV6iUsuz+sfad0kenK8BH3vda/2QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:3b:8e:32:92:2f:6d:36:f2:26:3e:47:88:ae:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
        Validity
            Not Before: Jul 23 18:00:55 2026 GMT
            Not After : Jul 24 18:00:55 2026 GMT
        Subject: CN=2f77a0eb80f03826adf1a302466be970060b1b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:31:14:63:f7:8a:7b:04:e7:c3:d5:fc:41:
                    4f:ac:3b:ba:95:ad:70:7b:21:dd:b9:98:50:57:df:
                    14:69:3f:4a:9e:31:75:67:a4:15:f9:f9:7e:74:61:
                    ed:82:9c:18:a0:48:9c:de:5d:49:63:cc:d0:7f:87:
                    02:b1:7c:52:04:e5:b6:d3:bb:b5:5b:b0:68:98:76:
                    c6:bf:91:25:c5:54:3c:f0:5e:5d:59:17:3b:2f:7f:
                    dd:20:54:45:fa:a0:e6:bd:3d:b0:2b:c2:c6:3f:5f:
                    be:96:74:51:ac:09:a3:bb:6d:30:e4:1f:1f:61:b7:
                    86:10:2d:1c:0e:96:6e:6d:3d:2f:f6:37:b8:fd:70:
                    b6:27:ee:12:b2:e9:9f:f0:96:c9:4c:01:ab:b7:84:
                    73:b3:e0:07:26:68:14:e0:73:3f:d7:e7:24:31:0b:
                    62:18:03:7b:0c:a2:87:28:b7:c2:c7:71:e3:d9:db:
                    ac:1d:5c:0c:d2:86:6b:03:7f:79:82:ee:00:33:cb:
                    29:9b:de:5f:8d:b0:b1:09:77:f2:7a:40:1b:b6:47:
                    39:61:3a:57:12:ab:10:83:f6:ef:33:41:6a:bb:84:
                    ca:63:c7:87:fd:80:d5:a6:d2:28:ce:ed:1d:ba:21:
                    4a:0c:2f:8c:01:7f:f6:45:d3:85:0c:c4:c3:c4:6a:
                    92:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:77:A0:EB:80:F0:38:26:AD:F1:A3:02:46:6B:E9:70:06:0B:1B:4E
            X509v3 Authority Key Identifier:
                keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:78:7a:1e:3e:ca:54:c8:ce:76:77:6e:e8:ff:75:40:e8:03:
         19:fb:3d:9d:db:44:5b:dc:a7:ea:a5:02:f2:9a:d4:14:da:75:
         70:b2:08:c8:cd:f6:df:46:fb:b0:5a:2e:c2:30:a6:43:7e:5f:
         f2:a5:a4:4d:c2:42:12:01:6c:15:9b:54:a4:01:1e:04:ec:ae:
         7a:ec:0c:2a:9d:72:08:c0:b1:9e:8a:47:e2:d7:8f:6c:48:7a:
         a4:34:52:78:6d:6f:38:92:4a:64:21:cc:81:57:bd:98:f1:99:
         27:a4:84:f8:e7:0f:b3:8d:62:38:25:5a:4b:3a:c0:dc:78:4e:
         e8:21:70:9f:d8:1d:fb:89:a0:9d:05:65:ba:33:62:d4:93:75:
         ee:11:fb:7b:30:b2:00:ac:39:45:09:87:e8:a4:09:bc:2e:77:
         46:47:7b:e4:54:5b:c2:96:92:19:d8:06:38:64:3e:e5:e2:02:
         fb:89:b8:8b:9e:f7:fb:a5:be:72:4a:94:6b:1d:81:53:42:07:
         5c:e8:2c:23:43:99:2e:15:93:b0:6e:40:d2:53:72:c3:4c:4b:
         5b:08:2b:96:d7:da:19:79:6a:df:21:c8:b3:f8:7d:b2:61:2a:
         ff:4b:59:ef:c2:8e:b9:af:fe:e4:03:b2:02:db:72:fb:06:cb:
         8c:e5:13:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:45 2026 by rpki-client