Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File:                     DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier:          p2vwzPtshh1MKwI1hNLGmsE4gfI0wFLALSGV9cSX1BA=
Subject key identifier:   CF:FB:23:B3:DD:EF:EC:9A:15:A1:52:AA:41:FD:EA:6A:3F:BC:40:F2
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer:       /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial:       019F91A42AD489B21824BEE224571046685D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 01:01:22 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:22 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:22 +0000
Files and hashes:         1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: uTtRqk9vXLHNOlM9pG1XuPR3rU4WkUEfOVMOBUzkDS4=)
                          2: FNGdELpGS2bwEGg4hvaYUE_r1O4.roa (hash: Ei6sBNoGSjj3ahbV1+2LrTjtk8IEn6iFKEC198BdvPQ=)
                          3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
                          4: zdTKCzMNYrD_vxLGScehqegrrJk.roa (hash: Al6OIKoNSWVa63JvchjYlE1VIlKOSAurCVguG0aSQOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:2a:d4:89:b2:18:24:be:e2:24:57:10:46:68:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
        Validity
            Not Before: Jul 24 01:01:22 2026 GMT
            Not After : Jul 25 01:01:22 2026 GMT
        Subject: CN=cffb23b3ddefec9a15a152aa41fdea6a3fbc40f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f8:b0:e8:37:81:a3:72:9d:28:56:f6:01:cd:
                    e9:b7:59:59:aa:ad:19:6c:4e:89:5c:da:1d:52:a0:
                    84:ae:da:6a:32:11:8c:40:82:6b:2b:01:38:f3:48:
                    a8:b5:e0:b1:9d:7b:3a:5e:64:9a:43:72:e3:26:da:
                    e0:95:f4:81:02:f7:9c:ca:48:72:7f:bb:fc:58:7b:
                    bf:fe:15:42:97:b2:14:31:04:76:1e:ee:74:de:84:
                    64:fd:e1:7b:1b:75:9c:07:04:14:e5:44:58:09:48:
                    5b:70:6f:5f:0a:6e:38:7a:ba:84:40:f9:22:b3:42:
                    26:b6:c3:b7:b5:43:d2:63:ed:46:90:82:2e:01:c0:
                    ee:64:ef:d5:27:ec:f7:f2:9b:dc:71:c4:bd:63:0a:
                    6d:ca:cf:0a:54:fe:4d:ef:b7:e7:c8:19:9d:71:27:
                    3c:62:8b:79:06:90:e7:63:47:76:a4:76:b3:7a:99:
                    5b:0f:a7:df:6c:b8:e0:94:7e:d5:ab:02:f6:75:3d:
                    22:95:b6:63:f4:b1:fa:cb:cd:da:9f:d4:f1:fa:99:
                    c0:01:01:a4:51:16:36:3f:17:7e:aa:3e:ac:8f:89:
                    f4:43:64:16:a4:bb:16:e9:94:01:b6:17:09:68:91:
                    d9:5f:c8:9e:86:2b:71:fc:a2:22:42:05:fc:28:c7:
                    fd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FB:23:B3:DD:EF:EC:9A:15:A1:52:AA:41:FD:EA:6A:3F:BC:40:F2
            X509v3 Authority Key Identifier:
                keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f2:37:56:03:0e:d6:55:a0:50:df:4e:42:33:c9:6d:8e:22:
         b4:e9:10:f5:dc:36:66:f1:3b:6c:46:f3:a5:43:66:d1:c0:29:
         35:7f:18:f2:69:03:e2:90:b1:82:56:3b:4a:59:64:59:98:25:
         0d:d0:77:4a:f1:ed:de:40:64:8b:8b:73:5e:9b:84:43:a0:7b:
         6a:13:77:9e:df:ad:19:d3:06:31:33:e3:38:d8:b0:68:7a:69:
         b9:73:d9:26:6a:a0:63:08:af:8d:12:b7:3a:ac:72:4e:44:f0:
         75:be:10:01:21:08:36:c6:79:d6:a2:26:c5:54:63:02:64:ba:
         0b:f0:63:47:e0:b6:27:ad:94:e5:ae:2b:a9:c8:ff:3d:57:c2:
         f9:d9:19:1d:6f:ae:13:24:fe:83:e0:a2:a3:24:2f:5e:ad:2a:
         49:cc:b8:ed:bc:b5:93:fb:2c:e0:5e:e5:28:eb:fe:a4:c8:22:
         20:f1:12:5a:58:6b:fe:9d:4b:3c:4e:08:74:18:3a:19:cd:72:
         4c:84:d4:e9:be:da:e5:f4:fa:6b:98:6e:3a:c7:e5:5d:4f:57:
         47:49:0d:bb:6a:03:8b:90:ad:06:b2:1f:f1:49:5a:8c:15:26:
         5d:e0:ed:27:56:7a:8d:c9:f3:1a:32:5c:37:fe:6f:80:7d:b3:
         6a:5b:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:54 2026 by rpki-client