Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File:                     fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier:          A5coowK3fFKtLNmlLQjIIjFHUntGflq+nCv5+YVs0zM=
Subject key identifier:   61:60:21:5D:E0:58:D4:A3:08:EF:52:57:24:EF:18:73:B1:CA:8A:D5
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer:       /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial:       019F8A20EA4F457B7B0ACE9A82E936CE6A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number:          19C6
Signing time:             Wed 22 Jul 2026 14:00:40 +0000
Manifest this update:     Wed 22 Jul 2026 14:00:40 +0000
Manifest next update:     Thu 23 Jul 2026 14:00:40 +0000
Files and hashes:         1: WJpebRSVLbQrdcjeB04EXCpIhRg.roa (hash: XP6zMi85BeS7CS6gjX07ym99dXpvUnSFZsiLXXS4Qvw=)
                          2: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: 18j2MmlAjKrbKjPllixxu0hOZ4ux0I7AZVDka2qfIME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8a:20:ea:4f:45:7b:7b:0a:ce:9a:82:e9:36:ce:6a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
        Validity
            Not Before: Jul 22 14:00:40 2026 GMT
            Not After : Jul 23 14:00:40 2026 GMT
        Subject: CN=6160215de058d4a308ef525724ef1873b1ca8ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:ab:1d:e7:b6:56:11:14:c8:1e:96:18:5c:
                    45:42:fc:a0:53:8e:23:50:04:94:10:87:69:b3:71:
                    79:3a:e6:4a:e6:ba:52:e9:22:99:4a:db:a4:2e:ce:
                    8f:74:98:15:9a:2c:b4:b8:bc:f9:d4:60:81:9f:ed:
                    94:f6:1f:1f:b5:33:b1:6e:14:e2:92:78:b9:b1:4a:
                    69:6f:d1:79:cb:76:d1:8c:23:80:37:48:76:43:ea:
                    17:4d:8d:19:d1:b7:c2:24:f9:fd:74:ae:52:95:f4:
                    d5:eb:93:52:dc:4c:13:a1:87:b7:6f:38:b7:81:3f:
                    a7:5d:ba:e1:75:87:55:d7:5c:ba:35:93:bf:20:4d:
                    13:1d:7e:a7:2d:2a:a8:2c:cb:af:2c:63:99:94:ea:
                    9a:eb:36:5d:d6:cf:c1:9b:f9:a1:11:9f:ec:00:ee:
                    e2:82:44:3f:d5:93:1b:a8:48:90:56:cf:39:05:9b:
                    2c:0f:ce:d7:22:53:c3:64:58:94:67:82:c3:30:a4:
                    e6:92:32:ac:f9:cf:e5:5a:7a:ef:51:b0:ff:d7:c9:
                    b9:88:ad:2b:13:d9:2e:e8:83:4a:17:10:26:18:aa:
                    0a:0b:c6:80:ea:a1:cf:51:73:2c:c8:ba:fd:cc:6b:
                    23:96:74:6e:a8:c4:fa:61:58:18:15:4b:96:8e:4b:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:60:21:5D:E0:58:D4:A3:08:EF:52:57:24:EF:18:73:B1:CA:8A:D5
            X509v3 Authority Key Identifier:
                keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:f8:7c:62:4c:93:b2:24:90:61:b4:3a:c2:d4:7b:80:98:
         16:95:01:5e:6a:a9:32:21:88:ac:ec:75:fc:94:c2:0e:38:3b:
         20:0d:59:70:50:fc:30:28:68:e3:dd:64:30:cc:07:37:55:7a:
         57:a3:79:ed:ff:43:81:b7:a3:b9:f4:92:bf:f9:03:f9:cf:e2:
         95:d3:0b:50:92:1f:e7:95:3a:59:20:64:9f:6a:fb:c3:80:db:
         84:a0:10:c1:11:be:0a:c0:72:8a:33:e3:27:11:23:67:6f:15:
         f0:6c:c2:ca:65:fc:07:59:23:55:49:d5:5f:5a:f3:ae:f9:68:
         d9:c7:d7:ec:ff:a7:95:64:0a:17:e6:7f:b5:be:aa:eb:78:2f:
         f7:ac:e7:0c:14:b7:29:35:35:9a:81:2e:97:80:bd:d0:1b:e6:
         7e:d2:74:cb:0c:3c:f5:f6:c9:d1:72:65:6d:13:c6:7d:c1:51:
         cd:56:00:7b:8f:54:59:82:2b:f8:64:c7:1f:df:3a:ce:eb:83:
         f6:c3:ee:16:92:20:5c:6d:07:11:61:76:fa:29:78:de:63:99:
         e8:dc:cf:ff:60:f7:c8:ac:6f:61:60:54:4d:8d:3e:24:78:6f:
         98:5e:d8:85:f0:40:86:22:d0:3b:8c:49:6c:37:38:15:28:7b:
         9e:f8:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 22:35:57 2026 by rpki-client