Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File:                     N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier:          3WMVi9GWNslGt3hhIdUJSzQV1voDzL3jqDHEb8fyWso=
Subject key identifier:   7F:3A:F2:0A:EE:7D:5A:60:03:CB:A3:D1:AA:E4:10:ED:FD:19:93:B4
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       019F4C2C87074CB89D8E7FE0953FAA70AF1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number:          19FF
Signing time:             Fri 10 Jul 2026 13:16:54 +0000
Manifest this update:     Fri 10 Jul 2026 13:16:54 +0000
Manifest next update:     Sat 11 Jul 2026 13:16:54 +0000
Files and hashes:         1: 0wjE02Yih3QAwuX89YG9WK4LcqU.roa (hash: bgUpHxuxo5z/X3a9dt7qzrpb6s2kPlXWMM/YmhyYNmc=)
                          2: 1Ikbuy_DUz_8gty98LDVB8xGq50.roa (hash: zrTNzGLxlgMZow7vDwHgzsumwcJBM47dodboiin2uMo=)
                          3: AYYfOelXA_KC94AmW07goJ1sDNM.roa (hash: G3bFe4ykRMrvksPEIPlMzRpYOczTGF04bPmehlKEdvY=)
                          4: CMrPIdkb44qxQh52DtLH2me7jkw.roa (hash: itZcbLbqeJ3hQd52B6qbtQV5jsaCYlBbwqCtZuToeLQ=)
                          5: KHg4o_qYiFjIj1z7MMn1-JjQ0Ws.roa (hash: p0GS7gC/hvGTse2L+VAI4dc9d7pLdHRfk34pCCnPCNQ=)
                          6: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: S250CkqVCpoagi9ivyhrGvF9LN/Mglg+2IPAeR74+J0=)
                          7: V4awU416NdKWqSEhx0pKd4Dy2Xs.roa (hash: sHQn1RdsThojWX4t8ioY7M8sO+pX5hQoHqvVLBAXHMA=)
                          8: cQKpfWEtQeb4fA54RswsJeiFVQY.roa (hash: C9TBgzVVQS+nfqWgVytFXPcNcoSQYcfdOHlhq4bXBns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:4c:2c:87:07:4c:b8:9d:8e:7f:e0:95:3f:aa:70:af:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Jul 10 13:16:54 2026 GMT
            Not After : Jul 11 13:16:54 2026 GMT
        Subject: CN=7f3af20aee7d5a6003cba3d1aae410edfd1993b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:a3:21:78:86:0c:2e:f3:47:d9:0d:f3:54:
                    98:8c:37:da:9a:a9:de:e8:86:1f:cd:91:5b:e0:92:
                    43:8c:9a:9a:37:c3:39:d0:39:73:10:fc:47:86:19:
                    29:e6:d9:12:45:33:13:7d:b6:51:03:e5:48:6b:d8:
                    d3:8e:89:24:fb:56:d8:63:53:35:46:bb:5a:b6:33:
                    17:8f:ec:9b:b5:ba:5b:f3:99:a2:dc:d6:b4:ba:2c:
                    97:13:15:91:84:ab:05:26:40:78:aa:2b:2e:c2:b0:
                    e8:b5:0f:df:91:b4:d8:6d:21:fb:2f:a3:bf:8f:f0:
                    d8:5b:ae:00:a7:05:71:24:04:4b:01:9e:39:56:f6:
                    9c:17:c1:d6:3c:2c:c7:23:db:af:12:a1:a2:9b:61:
                    cc:fb:02:8d:c8:d7:b0:ba:78:9a:c1:c5:87:24:5e:
                    3e:6b:7f:7e:56:4a:5e:46:d9:95:0a:e1:74:7d:1f:
                    de:33:e5:2e:a5:cb:b7:4b:5b:3d:b4:a7:8b:7f:07:
                    73:1d:35:11:6d:fd:20:59:16:d3:d4:4e:a2:80:b6:
                    e7:fc:33:dc:37:6a:4d:f9:1b:37:80:fc:b2:d4:75:
                    1b:2f:f7:9e:67:d8:91:de:e7:a9:7f:25:10:ba:a7:
                    29:a7:64:b5:3e:44:86:6b:60:81:6f:80:6d:ba:e2:
                    5a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3A:F2:0A:EE:7D:5A:60:03:CB:A3:D1:AA:E4:10:ED:FD:19:93:B4
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b4:b5:a1:64:40:19:cc:37:86:b1:cc:d2:e3:3e:ac:df:5a:
         01:80:86:9e:a9:ab:d0:fb:85:57:12:15:bf:3e:b5:1e:c4:ad:
         95:5f:08:6f:1d:f7:e9:1c:e8:28:15:24:fa:e2:bd:19:73:f7:
         c4:25:f3:3b:2d:2d:87:3b:70:27:62:87:fc:67:22:f8:0f:bf:
         d3:e0:e6:52:63:c9:32:06:da:a5:59:4e:b6:a3:74:6b:51:bf:
         c5:e9:66:7e:fb:b3:98:6a:f5:24:77:8b:d6:64:05:35:a4:78:
         92:42:41:00:f7:d2:f1:d4:38:ef:5b:0a:70:52:d8:94:be:44:
         64:a7:8b:24:96:41:7b:14:16:72:03:e4:05:6f:5e:ba:b9:b7:
         8d:b6:49:b9:ca:0e:e4:0e:46:e9:6b:82:0d:fe:ef:f5:3d:59:
         3f:5a:d4:49:e2:97:d2:88:98:80:42:3f:00:a3:3c:6d:1b:b4:
         c0:02:eb:86:42:cd:a5:bd:99:56:df:fc:c5:a6:16:21:44:7f:
         49:4e:fa:ac:c0:79:e8:b6:15:41:ac:17:a2:f3:92:c8:21:1e:
         9b:1a:53:90:a4:0e:f1:e0:aa:87:8c:ab:a6:f8:d7:a0:86:24:
         8c:00:85:dc:63:53:3f:7c:4b:9d:bc:94:5e:0a:aa:ce:47:3f:
         5b:0a:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:32:48 2026 by rpki-client