Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
File:                     vE8eawEfTWMxoSeVWlSPpQUlgKU.mft (raw, json)
Hash identifier:          3+V0ypMcBIoYrAfufN5kMpVaq6DxnVhP4t6ZeroGO7E=
Subject key identifier:   C1:61:1D:E3:C3:D8:CB:F0:3A:82:EC:29:5C:CD:D2:6A:1D:71:2C:3D
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Certificate issuer:       /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial:       019FA4178DCC9711179D1266FDA14BEBA2CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
Manifest number:          19D4
Signing time:             Mon 27 Jul 2026 15:00:34 +0000
Manifest this update:     Mon 27 Jul 2026 15:00:34 +0000
Manifest next update:     Tue 28 Jul 2026 15:00:34 +0000
Files and hashes:         1: Y-wzvP3OyKelpaxWEwdHMeF9K8k.roa (hash: V1H9z7tRL5qSfBvpxCwsmztKo7ytMvvx2XjMrup+mfA=)
                          2: aoYPhsTIFF-ZRbj6_xiKg3VbYUc.roa (hash: VNCClnv/XVF60bxM7vBP7Gf+3o6ieH1yV7iuVnvTEkA=)
                          3: jG4WSmG-xXEWodjP13_7K7HSQG8.roa (hash: CsZTy+c92ZJOl54ewvYtYiNxeF6FGAF7oJqgyUzk8Uk=)
                          4: vE8eawEfTWMxoSeVWlSPpQUlgKU.crl (hash: c+KYs8776vxGevTPAyPLfvyjkQf/jZSgw0uFd93rZvY=)
                          5: w4XW2p6ELMHxqyCP4OQW9fgfzfA.roa (hash: I0kThNaOy3rd6EMJewACkngTS9RmK2ddcj5IKnlI7p4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:17:8d:cc:97:11:17:9d:12:66:fd:a1:4b:eb:a2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
        Validity
            Not Before: Jul 27 15:00:34 2026 GMT
            Not After : Jul 28 15:00:34 2026 GMT
        Subject: CN=c1611de3c3d8cbf03a82ec295ccdd26a1d712c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:f5:ce:85:b8:fa:ef:32:2e:59:30:42:1b:
                    7e:ea:d2:15:c9:35:05:09:a6:e8:ba:3c:be:09:93:
                    c2:47:19:3f:a5:10:ad:d7:98:7e:54:7d:53:7b:2b:
                    0f:4d:1f:b0:5e:98:34:73:94:f9:0b:1e:e4:ac:fb:
                    7c:e6:d3:dd:77:5b:9c:8a:58:c3:df:19:fb:2a:31:
                    90:44:cf:15:a0:3c:e5:48:8b:92:0c:52:2a:95:94:
                    e5:1a:ae:48:e4:eb:1d:f4:ae:f4:69:f8:3c:1f:fa:
                    8a:8d:e9:a6:7a:6d:be:1b:4f:2f:4b:24:09:c1:9e:
                    d9:79:f9:a2:1e:82:fa:59:32:00:3e:6c:4a:e1:62:
                    67:59:fd:30:59:1a:f8:dd:b8:0f:fb:3b:d7:ec:d8:
                    0a:6e:36:5f:e7:c5:65:c9:1a:0f:4f:99:24:4d:51:
                    3d:71:81:0f:af:09:ee:e1:e3:3d:82:01:26:5f:fb:
                    00:a6:f6:ae:c9:cc:3a:10:4b:3c:70:c0:d5:99:cd:
                    d1:7e:ee:06:62:64:c3:f3:2e:23:7c:45:ff:04:93:
                    4a:a0:e3:9b:51:01:f4:a3:04:5d:6d:6c:1d:41:b2:
                    db:80:ab:ed:26:7e:4c:03:a3:3b:55:93:ad:74:9d:
                    85:4a:ce:99:7e:f5:1b:6a:d7:d9:ab:ac:ae:78:96:
                    5a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:61:1D:E3:C3:D8:CB:F0:3A:82:EC:29:5C:CD:D2:6A:1D:71:2C:3D
            X509v3 Authority Key Identifier:
                keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:03:92:3a:bd:56:fd:cd:19:15:c8:21:98:20:76:f9:ea:93:
         3d:4a:7e:28:96:ff:43:73:12:37:3b:87:1c:d3:3e:dd:14:06:
         db:1a:31:7b:6b:8d:4e:98:db:f3:34:56:ba:a6:6b:7d:cd:9d:
         05:0d:59:64:34:1a:6d:70:19:ad:e2:bf:20:38:ca:15:d6:19:
         cb:84:7f:f6:06:40:e2:ae:a4:1e:7b:ec:bb:43:6f:7e:51:80:
         d5:aa:57:f9:59:83:31:a8:61:22:bb:aa:05:3f:fe:58:0e:b5:
         2e:3a:67:fc:59:ac:b1:2d:92:08:12:5b:48:96:d1:e2:1d:c6:
         ea:b3:3e:c9:ee:8c:52:89:24:aa:cc:7a:38:11:28:74:28:67:
         08:7b:89:2b:78:74:27:7a:68:13:19:49:e3:1d:dc:88:59:7b:
         5d:11:82:55:6e:00:e3:15:5e:88:02:22:ca:a1:2d:e7:6b:93:
         ff:f0:db:d5:de:f6:91:3d:f2:f3:42:7e:4a:a2:38:cc:b8:2e:
         5b:87:7d:51:ff:8f:ad:8b:96:c9:fb:e0:80:d8:99:e1:eb:a3:
         45:cc:b1:56:20:e4:e0:5a:cb:b6:3d:ba:2d:91:da:02:2c:02:
         60:ba:02:26:89:64:88:6f:76:04:6d:41:64:2b:39:13:6a:c3:
         f9:76:52:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:11:13 2026 by rpki-client