Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File:                     CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier:          A+vZTsjB1dkftx4r2fwz7TTbPildew9uY2IswJn02Jo=
Subject key identifier:   A3:7E:BC:07:E5:1D:64:06:BF:96:8B:64:12:17:FB:7B:A4:CC:BF:9C
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer:       /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial:       019F8F7E9D35D44D58F4880BFCE677310D2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number:          19C5
Signing time:             Thu 23 Jul 2026 15:01:07 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:07 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:07 +0000
Files and hashes:         1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: LFgky6ShgaVzxzZoxDzS2jZhua6UndmyQotp/ybqCZ8=)
                          2: bcgCJp2ss3z06m9HQCfHzCBP0hQ.roa (hash: NnbPwHGrcdim6yrTkVQg/I67nU9XxwzvJk8QjULLx4A=)
                          3: oZr_EXsyQjW2TSmeXVYxNow-uRc.roa (hash: MMqu7TNNLRdy1w2DS9JU9E6roUikurSMo3WnZQdO9kU=)
                          4: zd8dlXTmCT-0m9TffsLEUAvTJYs.roa (hash: PkfGxsX99XUZA8APj8L5438qH49FAld+9Ynqz6Rjm9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:9d:35:d4:4d:58:f4:88:0b:fc:e6:77:31:0d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
        Validity
            Not Before: Jul 23 15:01:07 2026 GMT
            Not After : Jul 24 15:01:07 2026 GMT
        Subject: CN=a37ebc07e51d6406bf968b641217fb7ba4ccbf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:68:23:54:4d:a3:2e:25:bc:18:f5:6c:4e:
                    45:f8:44:de:ee:d8:29:ad:59:c7:6f:0c:40:02:41:
                    2c:95:46:47:80:42:24:98:20:ad:f9:6e:ee:33:9d:
                    67:8b:09:d9:a6:b5:e9:0a:36:9b:c6:df:fb:60:60:
                    68:86:39:a6:45:2b:37:69:51:d1:7a:d2:03:94:76:
                    64:69:7f:37:3a:f3:77:e4:a8:cc:0b:2f:68:28:1a:
                    ab:76:33:af:5c:78:13:e8:b2:4f:d2:ac:95:cd:89:
                    fb:44:ef:2f:ab:2b:3f:fd:20:d1:c0:9a:7a:70:04:
                    f5:f1:00:5a:8e:fe:ce:cc:b7:07:c0:1f:36:9f:29:
                    f7:6b:74:9f:e0:14:2c:1e:84:e7:a9:78:47:b6:fc:
                    ab:06:8e:50:4c:b2:de:ec:8a:3c:19:b4:2b:1a:44:
                    6c:c0:07:fe:8c:23:7a:62:15:96:7d:5b:74:ec:03:
                    20:ec:d7:c8:69:98:27:15:af:6e:e1:dc:3d:65:ad:
                    c6:8e:93:c5:f0:58:ad:67:5a:47:7a:72:8b:2a:42:
                    bd:13:b1:79:8c:10:d3:c3:cc:f8:b7:b3:b7:dc:ec:
                    2a:6f:3d:b2:2f:7c:e1:41:64:dc:8a:7c:d7:1a:db:
                    13:ee:ad:8b:17:35:82:6d:87:56:ba:51:48:ae:3c:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7E:BC:07:E5:1D:64:06:BF:96:8B:64:12:17:FB:7B:A4:CC:BF:9C
            X509v3 Authority Key Identifier:
                keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:99:dc:d5:56:8c:75:56:74:9a:c0:95:34:39:c2:d5:69:43:
         dd:22:f3:55:f6:b4:0c:93:26:50:b5:a3:48:cc:84:44:03:47:
         43:74:ad:5a:ea:f4:98:37:fd:c3:f6:4b:83:fc:46:ef:2a:07:
         05:48:cc:2d:1a:df:37:fb:19:5d:51:86:f2:69:93:e7:91:da:
         97:ac:49:7c:9c:55:a0:c5:a7:be:c4:79:78:85:4a:8c:f8:1f:
         ba:80:23:f4:97:c5:9d:70:60:a4:ac:1e:66:4b:2c:e8:6b:84:
         18:eb:5b:da:d0:bb:ea:1d:41:b6:9f:a0:00:5c:c8:df:85:92:
         1d:38:ee:b7:46:83:1b:15:b8:0b:bf:29:46:cc:9c:b0:68:7c:
         b4:bb:c6:e6:0b:b7:8b:6c:0e:bc:b3:dc:71:d6:84:dd:f0:74:
         1d:8a:5e:57:bf:d4:c8:7f:76:2d:41:9c:b9:0a:37:10:7b:5c:
         41:f4:53:f5:f4:8b:77:86:55:e6:b2:9d:ae:aa:a6:d5:7b:36:
         85:1a:6c:12:24:ea:d5:18:56:52:9e:8e:b5:17:74:dc:03:19:
         d7:bc:09:71:94:61:0b:2e:af:3a:07:31:38:ed:83:20:b0:62:
         97:87:af:d3:68:29:09:a6:d6:1a:66:aa:e8:47:8d:ac:98:5c:
         6f:80:e5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:45 2026 by rpki-client