Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
File:                     10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft (raw, json)
Hash identifier:          jPScZmzzelEiUsE4yM72Qb5zn1WgiNVGs4K9hcIfiAo=
Subject key identifier:   2C:C4:88:CC:9E:62:8C:ED:CF:1D:BD:CF:60:75:A0:6E:B3:9B:2D:8E
Authority key identifier: D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Certificate issuer:       /CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Certificate serial:       019F558F4E9A1C7C0933E2D8EEFBEA5FE5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
Manifest number:          19A2
Signing time:             Sun 12 Jul 2026 09:01:22 +0000
Manifest this update:     Sun 12 Jul 2026 09:01:22 +0000
Manifest next update:     Mon 13 Jul 2026 09:01:22 +0000
Files and hashes:         1: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl (hash: ambd6m3d812hgd/jylf9+D18/vG0dRDhcvpt/fjM/Fo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Jul 2026 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:55:8f:4e:9a:1c:7c:09:33:e2:d8:ee:fb:ea:5f:e5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
        Validity
            Not Before: Jul 12 09:01:22 2026 GMT
            Not After : Jul 13 09:01:22 2026 GMT
        Subject: CN=2cc488cc9e628cedcf1dbdcf6075a06eb39b2d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:fe:38:6d:76:aa:3c:22:20:3f:31:57:f9:
                    0e:1b:fa:19:b0:15:f5:36:d2:5d:d5:50:ec:41:a5:
                    9b:d7:b7:0c:d2:b8:83:b8:f1:94:e7:33:c5:5c:81:
                    4a:2d:47:c1:70:28:10:fe:b2:fb:61:13:e5:8f:25:
                    fb:27:f7:7e:79:55:98:f7:f5:db:5c:ee:79:ab:99:
                    48:13:78:e0:1e:bf:5d:f9:35:7a:55:b1:0d:42:29:
                    70:91:61:5f:8e:6a:2d:62:ef:ef:cd:0a:ed:37:e0:
                    ed:36:b0:4e:2c:c3:9e:13:8c:8f:28:d5:6b:35:b5:
                    a9:51:91:b3:ee:0a:d4:86:53:36:ed:72:37:14:63:
                    6d:55:5a:ee:84:84:4d:cf:4e:6e:fd:ea:a1:38:fd:
                    54:6d:b5:4a:13:29:88:f0:60:e2:d3:fd:7b:81:fa:
                    2b:fb:9e:b6:80:b2:25:9d:60:b4:5a:60:cd:6b:93:
                    15:b2:b3:66:71:13:c1:d2:99:22:a5:c6:6e:9c:ee:
                    53:9f:25:e1:01:42:86:07:75:84:db:e8:0a:d1:35:
                    e6:b7:c5:19:62:d5:c8:aa:3e:20:42:34:83:95:b2:
                    a8:c4:63:0f:ef:b8:d6:bc:5c:bc:50:6f:c2:cd:3b:
                    27:a4:ea:47:c4:da:03:dd:f8:db:25:6a:d6:b9:a1:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C4:88:CC:9E:62:8C:ED:CF:1D:BD:CF:60:75:A0:6E:B3:9B:2D:8E
            X509v3 Authority Key Identifier:
                keyid:D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:3f:17:d0:f7:4e:72:a7:f0:74:69:00:08:77:bb:92:6d:
         7f:6a:f4:9c:1f:83:f9:34:8b:e7:95:e1:2a:48:04:5f:f1:03:
         ca:f1:34:9f:fe:27:52:be:e8:55:23:01:44:9f:9c:ce:38:9a:
         63:b3:64:c6:14:c7:34:be:18:b3:6a:e6:24:00:a6:95:df:c4:
         df:1c:45:08:c5:91:7f:c1:c0:1e:0b:0c:82:63:23:d9:f1:c0:
         30:4b:c9:ba:8b:e5:61:11:07:a5:6c:37:f0:3d:f0:58:be:b4:
         4d:d7:02:46:ca:e6:e1:e1:4c:ab:e4:e4:fe:99:ef:97:56:b6:
         70:60:e5:86:e6:69:ca:21:6a:d4:6a:94:d5:c6:1a:64:cc:62:
         29:db:51:09:ec:3a:08:df:ef:21:92:9d:26:42:b0:02:ac:91:
         a8:ae:17:98:84:4d:a1:8d:dc:d0:8b:e9:b0:38:2b:1c:9f:7b:
         79:79:fe:3c:8a:65:26:8c:9d:37:7d:81:d9:4d:42:a7:8b:6f:
         b1:ec:5d:2e:ad:5a:12:93:44:ff:2a:5e:cf:9d:15:0e:aa:86:
         8b:34:2b:d1:8b:74:6e:cd:17:07:4a:7e:03:29:3c:66:5e:4f:
         89:ac:bc:a7:95:34:8b:88:ea:8b:1b:a2:2f:c9:f4:7e:1a:0d:
         53:6e:bd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 18:38:41 2026 by rpki-client