Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
File:                     CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft (raw, json)
Hash identifier:          VBZ36dTDD4cZrjZYQe+eB4RL7OdDbqnsWhwEEQZhCGU=
Subject key identifier:   35:5B:8C:A8:EA:39:E2:ED:D2:37:35:EB:D2:E2:0D:F0:6D:94:D4:AC
Authority key identifier: 09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
Certificate issuer:       /CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Certificate serial:       019F92ED2B3D9C564E3A4F7AA2367544ED5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
Manifest number:          0110
Signing time:             Fri 24 Jul 2026 07:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:44 +0000
Files and hashes:         1: CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl (hash: Qx/3+QjH3nnvIAkY1zApbUmxmvubECe/2udiUV7fxMI=)
                          2: OnyZlnAGFE9z6qHS8PQZpxuPoJI.roa (hash: MSNL5ZzuAie/1vcGJ5gTivp3rjaaK9xa+gQRkIgvUMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:2b:3d:9c:56:4e:3a:4f:7a:a2:36:75:44:ed:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
        Validity
            Not Before: Jul 24 07:00:44 2026 GMT
            Not After : Jul 25 07:00:44 2026 GMT
        Subject: CN=355b8ca8ea39e2edd23735ebd2e20df06d94d4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:ab:e3:84:34:54:d7:bb:14:9e:08:13:29:
                    fc:38:fd:c9:9a:0d:d2:f7:cb:96:c9:47:7f:a8:44:
                    83:81:d6:66:62:13:e4:1e:1f:59:a7:fb:fe:e9:3a:
                    91:5a:5b:fd:0f:e1:27:2e:a1:3b:64:48:eb:82:e0:
                    43:d7:08:70:d9:01:d3:22:1b:e7:5f:78:5d:f6:76:
                    cf:0e:25:1e:2e:3c:d1:c1:e9:e5:44:14:d0:94:5c:
                    e1:65:89:a6:db:73:e1:9a:3f:ab:5b:09:05:61:50:
                    43:e7:8f:ee:38:07:15:6a:a2:e4:5a:f7:2c:1c:8c:
                    7c:fd:b4:2a:c3:9e:66:23:7d:4f:5e:88:f2:25:ec:
                    e1:06:b7:83:b0:a8:5b:59:59:c5:3f:be:0a:28:78:
                    30:52:20:b6:c7:70:f7:d1:b7:2d:79:fa:ff:15:9b:
                    8d:3e:8d:7b:d2:00:d3:af:63:b3:22:ff:fa:cb:74:
                    28:88:a3:2d:78:66:d0:8b:0a:17:e1:14:c0:b6:2b:
                    36:ce:dc:30:6b:ea:30:9e:99:97:cf:4d:1c:79:49:
                    35:04:dc:3e:9b:da:ae:4f:00:9f:a3:8e:4e:86:41:
                    f9:36:8b:72:c2:a7:a4:87:f4:b3:df:0e:22:b8:11:
                    09:b7:11:d6:4a:99:f6:42:ae:06:90:c5:89:e3:db:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5B:8C:A8:EA:39:E2:ED:D2:37:35:EB:D2:E2:0D:F0:6D:94:D4:AC
            X509v3 Authority Key Identifier:
                keyid:09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e5:a7:cf:32:01:c3:4d:7c:79:3a:ed:81:df:5b:ec:6c:a3:
         0b:23:a6:d3:a3:af:6d:42:88:2d:4d:38:97:58:19:2c:10:26:
         d7:a7:ea:6a:52:a9:fd:7f:60:50:84:0b:c1:95:7e:4f:ea:79:
         ff:c0:d6:b1:f3:2c:f1:c5:69:20:26:55:d2:80:b5:f2:da:cf:
         ca:0f:26:4b:ec:3e:65:a3:e1:98:22:ab:4e:9c:75:7b:ee:35:
         4d:14:f0:de:bb:ad:c0:70:51:79:bf:f5:48:d6:ee:d2:91:92:
         d8:25:bd:53:e2:66:55:27:dc:ed:cf:95:fb:c8:ec:a7:e4:88:
         e4:23:ca:82:c8:9f:93:81:c9:85:43:38:ac:b9:e0:0a:61:f0:
         9c:1d:d5:0b:27:f4:3e:85:90:b5:c7:bf:d0:4c:c4:d4:95:c0:
         0e:25:e0:9b:87:93:1d:2d:16:33:62:ce:2d:d4:76:68:cc:94:
         3d:a0:52:6b:ce:8d:55:58:dc:84:8b:8c:6b:ac:5a:30:3b:9a:
         88:1b:6f:e8:54:d7:5d:35:22:10:62:cf:0e:e7:80:a9:85:3f:
         41:79:1f:44:d2:7f:f4:20:2e:72:75:7e:d5:46:fd:11:9e:ed:
         d9:21:41:4a:e1:67:df:c6:1b:32:34:6d:95:f5:5a:77:47:64:
         2e:0c:4c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:55:21 2026 by rpki-client