Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
File:                     l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json)
Hash identifier:          gtOw/Ks7oBjjfiNPiSNT+fhYjfYkj21RWtt/82PqEHE=
Subject key identifier:   AB:8B:BA:F2:87:51:FE:EF:27:20:14:17:39:0C:9B:C2:C4:04:48:9E
Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
Certificate issuer:       /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Certificate serial:       019F830CCE68CE9235A4E0A6823318D5D7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
Manifest number:          19BE
Signing time:             Tue 21 Jul 2026 05:01:22 +0000
Manifest this update:     Tue 21 Jul 2026 05:01:22 +0000
Manifest next update:     Wed 22 Jul 2026 05:01:22 +0000
Files and hashes:         1: HRHfBeVR8FCErSeg_f0jsh6Y810.roa (hash: 5Uj4MHwwi5BQxM2HtVlQdjayICr5xhiFmlHmBSv92Ek=)
                          2: jWXMDv13AWDAzHmG3AwphA0uU3I.roa (hash: gbSC++TyPC7wR0U95OM82la8DG8eXm7v1JK7SFOBZRE=)
                          3: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: YsBH7rzDdCmrEWkmxqcNWl5RVUG06+AGUXzR7vKzhL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 05:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:0c:ce:68:ce:92:35:a4:e0:a6:82:33:18:d5:d7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
        Validity
            Not Before: Jul 21 05:01:22 2026 GMT
            Not After : Jul 22 05:01:22 2026 GMT
        Subject: CN=ab8bbaf28751feef27201417390c9bc2c404489e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:46:4e:76:32:c0:09:75:64:4f:f4:e0:55:
                    bb:5b:df:2f:c2:39:96:57:d9:7f:c9:48:ef:4b:e8:
                    2f:0a:d9:8f:a0:3c:cd:9b:03:ee:08:f4:79:88:fa:
                    9c:4b:cf:0b:81:09:7a:88:cb:ed:4b:f9:bb:98:a6:
                    ef:ae:3d:b2:92:43:e8:6f:43:21:d7:83:d6:5f:46:
                    7c:ba:0c:57:00:bd:1c:50:69:5e:f1:8a:e5:b2:fe:
                    1a:61:91:f7:56:65:09:96:f1:44:97:7a:be:91:05:
                    ce:5b:23:4c:26:64:85:ff:19:fd:f3:35:cc:7c:40:
                    39:f2:ab:c3:ea:62:d8:ee:17:d2:1a:c0:0b:70:f2:
                    b1:47:dd:e7:8d:62:fb:fe:ca:2d:6b:fc:26:63:5f:
                    fa:65:01:c7:ba:2c:39:a2:a7:bc:a4:38:5d:2e:db:
                    cd:ef:38:85:cb:46:da:88:8a:41:61:83:ea:82:85:
                    2e:95:37:78:bf:3b:db:16:4e:5e:08:c5:a3:36:9a:
                    24:f9:fc:12:f9:28:20:88:7c:3d:01:91:3f:cb:83:
                    e5:b0:76:c3:6f:5c:d6:fa:22:b8:69:06:3f:0e:09:
                    71:8f:dd:b7:a3:a3:bf:d4:93:b8:64:61:d5:70:fb:
                    bd:4e:6c:f2:af:7f:ed:47:e3:4f:c2:0a:ed:4b:b9:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8B:BA:F2:87:51:FE:EF:27:20:14:17:39:0C:9B:C2:C4:04:48:9E
            X509v3 Authority Key Identifier:
                keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:70:f7:ca:54:4e:48:f9:3d:4b:e9:fe:28:fd:61:49:ef:2d:
         e5:53:f2:23:14:b1:6e:bd:ed:84:af:9c:21:0b:be:52:e1:c9:
         0c:27:8a:cd:70:8b:7c:9a:4a:9b:26:94:71:2b:4a:30:c4:66:
         5d:5b:df:c2:ba:49:c6:c9:9b:1a:d3:82:a8:90:7a:1e:9c:72:
         ff:9c:fa:18:89:c9:5a:b9:0f:41:f8:8d:2b:ec:0d:00:c6:2b:
         ef:74:99:48:da:a4:f2:a1:52:25:ee:16:3c:6e:b9:89:83:9c:
         55:8d:f7:53:0b:37:9a:a3:81:64:18:fd:9a:db:ee:af:09:a2:
         4f:b7:31:f7:07:bf:42:46:45:ab:80:fd:28:62:27:34:72:21:
         99:e1:c3:81:69:9f:93:72:a2:51:c7:2f:0e:f5:6d:c1:ae:18:
         b5:97:d1:cb:93:1e:c3:40:d7:b5:20:5b:0f:38:c7:35:3f:44:
         46:aa:6d:e7:d7:55:6e:22:73:c3:d6:77:d4:8b:5b:9b:73:9a:
         df:87:05:89:31:b5:01:ae:08:74:cf:48:29:85:9f:29:ef:90:
         0e:74:92:23:37:ab:07:72:21:22:ba:a3:b5:b8:52:26:2a:8e:
         87:eb:89:08:1f:50:8c:5b:66:d2:07:d1:be:e1:ab:76:f9:01:
         6f:b7:e5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:23:13 2026 by rpki-client