Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File:                     mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier:          DYQ/DaQkpdB3V2Bfd8O9PavQWi42IBijT5jHq4hJgus=
Subject key identifier:   15:ED:8C:A5:C4:C5:62:2D:83:81:6E:73:E0:C6:1F:33:92:ED:9A:EA
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer:       /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial:       019FA2600F06F6109BCE68D72802964E70F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number:          1964
Signing time:             Mon 27 Jul 2026 07:00:31 +0000
Manifest this update:     Mon 27 Jul 2026 07:00:31 +0000
Manifest next update:     Tue 28 Jul 2026 07:00:31 +0000
Files and hashes:         1: ii2y3_3OasAT5vVqpy7EkID9V2Q.roa (hash: eHIEjyO4o7PMmo5LxlNBD9RVF/znC0lnkJD1jokxFWo=)
                          2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: 7a9HOT4jkiUEJHAwBFC0XBT2WHc8rT7shR0BiMr2Ygk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:0f:06:f6:10:9b:ce:68:d7:28:02:96:4e:70:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
        Validity
            Not Before: Jul 27 07:00:31 2026 GMT
            Not After : Jul 28 07:00:31 2026 GMT
        Subject: CN=15ed8ca5c4c5622d83816e73e0c61f3392ed9aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:87:7c:a9:35:b6:cf:05:27:f7:e3:b8:1f:
                    a9:7c:d0:a0:ff:9e:7a:50:d7:5a:09:20:e2:f3:ec:
                    21:ce:ed:91:b7:e0:a5:60:45:ac:83:b8:6c:48:ad:
                    50:69:8a:cd:6c:21:7a:31:bf:23:e6:f3:6d:a2:36:
                    4d:70:0b:92:c9:db:b2:20:b5:c8:b0:3f:05:6f:0a:
                    91:42:97:3d:c7:25:f6:57:78:40:89:1c:f5:92:15:
                    a4:83:49:52:98:0b:8c:01:38:01:03:19:7e:52:f1:
                    26:9f:e4:78:ea:6b:3f:b6:01:6b:24:ec:fd:d4:13:
                    79:32:2e:0d:cb:d7:2a:94:c4:99:be:1c:7d:75:35:
                    c1:dc:e3:21:1f:43:96:1e:47:12:8e:31:37:55:f3:
                    06:94:3b:98:49:b3:c3:31:6c:28:ca:05:56:76:66:
                    60:9e:4f:ca:fa:4c:65:f6:d0:fc:31:ca:da:66:da:
                    1a:21:f1:1c:fe:2b:d0:b1:6f:a1:85:11:42:d2:d5:
                    46:bb:97:91:6f:93:f6:11:42:6d:46:43:0e:f3:a0:
                    12:a1:c7:2b:d1:94:5c:2f:4f:76:fa:6a:b2:1f:ea:
                    1a:ca:1a:f0:25:28:5e:2a:c6:b6:bb:28:d6:99:ed:
                    95:90:46:0b:0d:0f:14:f6:f4:33:5e:a8:40:9f:14:
                    56:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:ED:8C:A5:C4:C5:62:2D:83:81:6E:73:E0:C6:1F:33:92:ED:9A:EA
            X509v3 Authority Key Identifier:
                keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:50:63:cf:d6:f6:e3:a5:9b:0f:98:2a:3c:ab:53:77:ab:d2:
         c8:bb:9c:2a:b8:22:96:ee:48:20:f9:2a:c2:05:71:07:a2:4c:
         f7:e4:0a:76:1a:31:09:6a:91:0a:23:4e:d2:a4:d6:b4:ec:77:
         90:3b:c7:ee:37:0b:ab:c1:9e:9f:89:df:30:7b:3c:4e:6c:2b:
         38:5e:e8:b9:60:ab:5e:4a:8c:60:08:c3:42:81:2e:84:b2:bd:
         39:47:65:be:f4:30:a8:43:ff:1c:67:23:24:90:e9:b2:3e:44:
         e2:a9:ed:ad:5d:a5:96:8a:29:14:e9:88:a9:dd:8f:cc:ab:77:
         17:e1:5e:dd:99:1a:0f:1d:ea:07:89:d1:79:2a:8b:6c:e9:ef:
         e1:c7:c8:be:bd:2b:88:9a:63:7d:bc:a5:58:93:fb:a0:1f:63:
         b9:9d:4c:db:fe:84:19:d2:2b:83:3f:a2:4c:4f:96:de:92:10:
         7f:76:e4:34:42:31:ad:19:c6:43:be:b5:f3:f7:fb:84:19:67:
         38:d3:ab:ab:19:3a:71:68:db:68:7d:bd:6e:bd:02:26:95:f3:
         e5:c5:90:c7:67:b5:70:b9:b7:0a:68:ee:58:91:69:f1:25:93:
         fa:68:24:94:c0:16:ba:99:ce:1c:5f:b5:be:b9:cd:33:e5:5d:
         3d:51:73:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:40 2026 by rpki-client