Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File:                     ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier:          hPICnrfuHqzB624g2K0c7/EvHgNxGxua8J/VzyAc9HU=
Subject key identifier:   4F:2F:FD:13:86:3C:21:8D:03:08:EE:E2:CC:76:26:96:6C:A1:EA:9F
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer:       /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial:       019F95B77B49E2D0B207148FCB2DA414AA60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 20:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:57 +0000
Files and hashes:         1: FomC0OD_NwetWkEPOTha3fWVMKU.roa (hash: dczkmLKUdcB3drX74PqMZvKfYmTs+5M5HtjBYhjGfvk=)
                          2: drBhV9alP4OW6ofNZOxW9TLw2f0.roa (hash: lbZ8swZRlTMR5bgvRpyD4YhMPyncb/ksvL8xrpAMysA=)
                          3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: Az87shxHggPpwTropoV3PDN1JdOS7ptqkgrjve55548=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:7b:49:e2:d0:b2:07:14:8f:cb:2d:a4:14:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
        Validity
            Not Before: Jul 24 20:00:57 2026 GMT
            Not After : Jul 25 20:00:57 2026 GMT
        Subject: CN=4f2ffd13863c218d0308eee2cc7626966ca1ea9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:5e:29:94:d8:3c:1e:ae:10:36:40:89:e1:
                    c3:ce:56:1c:0e:e2:0e:34:b5:07:dc:ba:0b:4b:48:
                    ef:e4:ab:1b:36:6b:bb:8a:f2:cf:bc:27:61:59:61:
                    a5:e9:35:54:48:a6:ad:c8:bc:b2:68:b4:4b:b2:fe:
                    b7:95:e8:9a:f7:f3:03:7b:8e:b3:59:ae:e3:ce:28:
                    27:21:02:05:f6:52:ff:0d:e8:b4:a9:21:eb:54:a0:
                    69:fd:bc:12:eb:46:22:74:23:04:ea:11:b3:1f:55:
                    f7:40:c5:64:cb:5b:1a:c0:0d:8d:5f:66:25:74:f0:
                    54:64:b7:c5:91:c7:60:bb:07:eb:0f:6e:a4:ba:89:
                    96:fc:d3:89:6e:5c:6f:36:72:2a:e6:7f:ab:74:1a:
                    d0:1d:84:7e:3f:3c:42:bf:52:9d:db:30:32:d4:94:
                    ca:ce:30:46:e6:e5:91:4e:b3:57:d2:61:df:04:40:
                    98:71:d9:3b:e7:c3:cc:a6:96:83:f4:06:85:92:88:
                    56:9c:f4:42:f1:bd:9c:ab:e1:a2:8f:1e:73:8e:1c:
                    9d:d5:47:05:d9:7c:27:56:18:4e:6a:26:33:67:14:
                    8c:e0:b2:78:b8:ee:fb:06:a8:1f:68:7e:06:2b:d8:
                    eb:9c:72:13:0e:80:9a:1d:2d:dd:c8:83:6d:6f:ce:
                    8b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2F:FD:13:86:3C:21:8D:03:08:EE:E2:CC:76:26:96:6C:A1:EA:9F
            X509v3 Authority Key Identifier:
                keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:61:49:8a:6c:37:a7:c1:be:75:0b:86:b3:16:c3:15:58:ac:
         98:34:55:6f:b5:68:b1:3a:e0:93:40:5f:41:db:56:a4:b5:d3:
         be:d2:b1:b0:7e:97:40:9f:87:5d:f0:cc:89:c0:38:39:a9:55:
         56:91:94:fb:59:13:f7:d0:6a:17:55:80:63:14:14:41:9e:ff:
         4e:42:55:be:ac:7c:31:0b:a1:df:c0:ac:90:a4:25:e7:ab:17:
         f2:09:6f:61:d5:26:ef:b8:d4:9f:65:aa:d6:3e:6e:85:0b:59:
         a7:59:76:3d:53:f5:45:6a:5a:57:47:75:14:ad:52:22:f2:a9:
         b0:00:00:0a:8d:5a:1a:2a:3d:1d:2e:8b:48:66:03:a2:c8:40:
         75:fc:bd:6a:a2:31:43:ba:6c:03:3c:28:bf:70:84:55:52:18:
         53:a6:14:76:bd:01:8d:b3:a8:19:a0:bc:1f:0f:99:a0:c4:29:
         3f:92:fb:e7:24:30:71:95:20:3e:26:c9:54:f5:12:9f:c6:a4:
         4d:fe:e9:56:b6:0f:1b:02:70:d1:64:e0:e9:4b:2a:03:e6:50:
         c8:74:06:8c:ac:d4:9c:7c:40:4c:b7:63:09:de:55:b2:97:34:
         56:7f:bd:c1:33:9f:52:b7:a0:81:bb:bf:b3:cb:0f:95:9d:39:
         07:b8:76:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:09 2026 by rpki-client