Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File:                     cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier:          IT6OBcUsqCcj7SMWeFTp67PEGo489Z/7EVgmE89UQz8=
Subject key identifier:   88:B1:67:B3:06:24:D2:C3:A0:9A:6C:4D:AB:0F:F0:02:2E:8B:75:F4
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer:       /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial:       019F72189AB50EB50B7B9D76B1C04205CCD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number:          19B7
Signing time:             Fri 17 Jul 2026 22:00:42 +0000
Manifest this update:     Fri 17 Jul 2026 22:00:42 +0000
Manifest next update:     Sat 18 Jul 2026 22:00:42 +0000
Files and hashes:         1: 9GyPy5VxmA8Grjp6KPGlBXEzQEs.roa (hash: cZRk0f4ULOIcvr4Kq3jJj23UFievd5ZXiHt0/5E2LwY=)
                          2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: 8+NlmILXA97Nf9W6OA6QKMMR8XB2JRgZhZzyaXeIzo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:72:18:9a:b5:0e:b5:0b:7b:9d:76:b1:c0:42:05:cc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
        Validity
            Not Before: Jul 17 22:00:42 2026 GMT
            Not After : Jul 18 22:00:42 2026 GMT
        Subject: CN=88b167b30624d2c3a09a6c4dab0ff0022e8b75f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:64:aa:45:17:05:95:cc:9b:12:54:fe:62:
                    df:9a:32:fc:14:9c:80:d9:0b:46:91:23:b1:b8:77:
                    22:c5:56:99:1b:36:0c:c2:f5:6c:57:96:05:c4:35:
                    21:c2:3d:4f:19:74:8e:e2:15:12:e6:5b:76:e0:6a:
                    84:53:48:c1:2f:7a:a6:42:1d:4f:c1:aa:0a:11:f1:
                    e0:8e:69:3f:3a:a6:1e:b8:c4:79:6a:83:12:73:3f:
                    ed:5f:ff:7c:02:2c:c2:cb:2e:af:39:2e:de:52:36:
                    91:36:3f:6b:97:12:eb:a7:98:f3:fb:68:eb:68:4b:
                    01:5d:f9:0a:ea:c3:b0:c1:34:a1:1e:c0:ac:c0:6a:
                    30:7e:31:c3:12:9b:48:13:5a:ae:21:72:56:c6:1a:
                    1d:b2:4f:19:b6:7a:b4:e1:6c:4e:e3:3d:dc:5c:56:
                    bf:64:c6:d7:83:2b:07:a2:41:c1:23:6e:ce:37:20:
                    d0:4e:56:62:db:36:c0:35:6d:32:3e:fe:8b:f6:2f:
                    0e:1c:55:71:ae:17:83:05:51:73:c3:7a:36:e5:cf:
                    ef:b6:e7:d0:fe:a5:38:34:86:b0:a2:b1:c7:d9:11:
                    9a:87:75:9a:a1:3b:a6:83:61:c6:17:a9:74:6a:28:
                    40:cc:47:3e:70:5f:00:51:d2:87:a7:dd:95:d8:2d:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B1:67:B3:06:24:D2:C3:A0:9A:6C:4D:AB:0F:F0:02:2E:8B:75:F4
            X509v3 Authority Key Identifier:
                keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e6:84:1a:ee:ed:83:0a:9a:a7:f3:5a:32:78:b4:20:70:24:
         ab:d0:85:ea:e1:0d:31:67:b5:81:7f:6e:94:81:9b:93:dc:8f:
         16:61:04:22:41:90:a4:9f:40:83:96:78:36:49:0f:39:f8:0d:
         89:24:83:45:57:6a:e4:fa:f1:f5:c2:5a:12:3b:cd:2a:d1:38:
         25:b6:2d:2a:7e:a8:0f:26:89:4d:ff:c1:87:52:c6:8d:fd:91:
         d9:72:a9:44:fc:40:79:ed:83:05:e5:3a:b1:99:ad:8d:66:99:
         ee:98:54:da:a0:3c:b4:11:d7:09:5f:37:bb:29:e2:07:94:2c:
         fc:35:6d:85:49:bb:6a:c6:f5:41:2c:ad:45:c8:58:f6:02:5c:
         94:6c:b3:85:72:1e:da:2f:58:3b:24:23:57:f0:1b:a1:4a:78:
         c7:21:d5:a5:aa:5e:1f:a7:02:92:b5:6e:46:f4:0f:1e:af:68:
         a5:01:0c:8a:20:3b:a1:7f:da:d0:bb:3d:7e:48:7f:b3:9c:0b:
         61:b4:01:04:b9:6d:c0:4a:40:8a:59:95:19:32:af:2d:95:99:
         7e:34:d8:20:28:30:77:d6:01:1c:34:f2:f2:06:dc:bf:1a:1d:
         1e:0e:9a:7d:59:bb:11:39:13:dd:8f:83:db:eb:06:12:56:30:
         61:5b:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:24:11 2026 by rpki-client