Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File:                     sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier:          obeXyt6ckyVtluXmay3xs0JaZtJlC8FYQbAOIR/blpI=
Subject key identifier:   6D:16:58:42:DB:DA:58:55:FD:C8:02:C1:3E:9F:0D:66:68:4E:6E:77
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer:       /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial:       019F9135B6BBF056498DF39C77ACC719A1E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 23:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:44 +0000
Files and hashes:         1: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (hash: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU=)
                          2: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (hash: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo=)
                          3: i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa (hash: cPsXapsQYVV5sthITpOROGImuL+pHXuvlOflhuTnK7c=)
                          4: jJ8Ja4wQj77UXskU4dYzizx-fO8.roa (hash: D/f3chU7o9XZeTFLsqkW7hmyKTnJCw4DJq8f3FXAw8c=)
                          5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: 9HnmEzMnOCj86+T4tdm90+K/BP40kMSl/jS8QmTFy6o=)
                          6: umCBjEn3NnVHg79eLHC3xk9rgS0.roa (hash: /fSksQdekqYTESP/mXyQvaIFQ1BWx6zsTRDj8qcB0V4=)
                          7: y1bR5jl013Y3lzMs7c_lC8K_wF4.roa (hash: ZOf1GD5+F7Ix58HDKPiEjn4TBv+b/5vVBq1mleIzuFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:b6:bb:f0:56:49:8d:f3:9c:77:ac:c7:19:a1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
        Validity
            Not Before: Jul 23 23:00:44 2026 GMT
            Not After : Jul 24 23:00:44 2026 GMT
        Subject: CN=6d165842dbda5855fdc802c13e9f0d66684e6e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b8:35:f2:13:ca:88:49:97:e7:07:0d:e5:e4:
                    cd:56:ad:b6:b6:09:94:7e:60:be:26:a8:32:28:c1:
                    9f:d6:d8:1b:e4:28:27:06:c7:3b:80:ff:0f:33:d5:
                    d2:7f:b0:72:92:95:d3:7c:ec:2e:1c:5e:bb:d4:b7:
                    d1:04:0b:4f:04:1d:b4:b9:da:7e:d4:d7:68:c9:85:
                    ce:4c:40:3c:c0:b5:ec:b6:dd:ca:6e:58:e8:d7:6a:
                    45:76:8c:0f:c8:7d:e4:6f:fd:37:91:ca:08:65:33:
                    d2:5b:3c:cf:36:25:6f:e8:55:c3:94:ab:12:17:10:
                    3b:f2:9f:e2:6f:dd:1d:90:9b:b7:2d:6f:cb:5f:bd:
                    4a:65:55:f5:45:9c:7b:79:4f:a3:c9:6b:5c:88:ac:
                    3a:b5:e2:f9:e3:f3:ba:8c:fb:15:c0:10:05:b6:ad:
                    d6:99:98:1e:f5:e7:7d:08:db:f2:cc:7c:c9:34:6a:
                    07:a4:2e:7a:5e:18:da:09:ac:12:21:af:cb:31:50:
                    be:2a:cd:21:ba:57:7c:b5:a8:d2:c7:6f:b0:7c:3f:
                    12:0d:57:5b:fc:58:71:7e:6a:af:0d:0b:6d:67:f0:
                    92:38:5a:8f:8c:f8:74:b2:18:1f:c0:c3:01:89:f1:
                    e9:11:1e:37:31:af:e2:af:41:ce:f9:2a:37:74:fd:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:16:58:42:DB:DA:58:55:FD:C8:02:C1:3E:9F:0D:66:68:4E:6E:77
            X509v3 Authority Key Identifier:
                keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:58:e7:27:85:d3:3d:b2:d5:79:8b:6c:af:0c:b4:79:b6:48:
         7b:a1:80:84:27:d6:57:7a:04:64:4c:17:d6:ed:25:51:cf:a3:
         04:fd:40:39:c4:cf:30:f2:b5:aa:32:4c:ff:09:ed:bf:b5:98:
         96:cc:f7:02:67:9e:0f:c0:c2:90:6d:b8:df:af:f2:18:f5:06:
         04:c3:28:1e:2c:39:db:6e:04:88:90:68:ac:cb:af:dc:aa:12:
         b6:68:dd:2d:28:66:9b:bb:bc:32:b9:ba:30:de:0e:82:8d:6f:
         15:65:20:92:c3:a1:83:9b:40:5f:59:aa:9b:c1:ab:a7:b8:52:
         e4:62:ce:d6:1a:26:72:8a:bb:78:7e:52:71:5e:ea:e9:5d:d8:
         74:30:0a:1f:a1:bb:3e:d8:c5:b1:00:86:05:e9:13:f3:e6:b4:
         98:1f:23:4e:4c:47:df:d1:9d:9b:41:1f:f7:c8:ca:02:4b:53:
         98:de:27:b0:23:e2:6a:47:1c:16:b3:c9:d1:65:9a:8a:89:dc:
         db:22:1f:08:c3:6a:59:7a:99:01:60:d0:2e:1a:c9:f9:5f:72:
         6d:6b:7e:d1:27:42:2e:e0:db:4f:0f:40:19:6d:76:41:79:40:
         3f:f8:6f:fd:56:f8:4a:90:2c:81:0c:73:df:14:27:9a:a4:20:
         27:91:e6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:20 2026 by rpki-client