Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File:                     Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier:          y0sM+cHcMtaTVbstg5TqjibAE8XwVHQf1lkCE8qe+qw=
Subject key identifier:   90:3D:46:33:42:64:32:B6:B5:81:76:92:BC:20:08:71:19:06:2A:AE
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer:       /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial:       019F710615119137EE358D5E88A80039E0F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number:          19B6
Signing time:             Fri 17 Jul 2026 17:00:51 +0000
Manifest this update:     Fri 17 Jul 2026 17:00:51 +0000
Manifest next update:     Sat 18 Jul 2026 17:00:51 +0000
Files and hashes:         1: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: yLL/fOjZygYP8cKauvU9sie2f73fAasY8E4xrGy5zqM=)
                          2: TDkaS-JTvMNiWICWG4ymOlGuWbk.roa (hash: rdEwK1puUd5tKIYhWm5xSUw39iHc4PHVAw0g6tLwiHU=)
                          3: xfHjlvR4GqmLKHrBF2UQj5zlnl4.roa (hash: 8M7wSB8jbbP+DfjlEMm6KSFYNEcYB3CLaxYLFnfuaa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:71:06:15:11:91:37:ee:35:8d:5e:88:a8:00:39:e0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
        Validity
            Not Before: Jul 17 17:00:51 2026 GMT
            Not After : Jul 18 17:00:51 2026 GMT
        Subject: CN=903d4633426432b6b5817692bc20087119062aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:d1:83:00:47:79:79:7e:b4:7f:f3:d9:a3:
                    47:30:54:6a:e3:35:d6:d8:52:25:9d:fd:12:df:96:
                    0b:12:88:29:57:2a:4f:7a:7b:61:4d:42:d8:5a:ec:
                    76:50:76:b5:db:40:60:bf:a8:ce:f2:1d:66:2f:43:
                    46:72:c7:9f:da:10:02:08:91:54:59:e5:eb:89:18:
                    8b:9b:92:4a:65:53:2b:73:a9:97:d6:b6:e7:0d:37:
                    e6:3a:00:67:cf:02:da:17:ce:b8:a2:f6:bc:f4:b8:
                    29:0a:e5:ee:03:c4:19:82:db:18:fc:bd:9c:ff:65:
                    06:c0:b9:6e:ad:e7:69:bb:9d:4a:00:04:04:00:4f:
                    0f:f6:4b:95:9c:0f:15:1c:8e:c7:98:94:72:54:cf:
                    27:04:21:c5:61:4e:18:3b:d4:51:e5:b8:a5:0d:06:
                    98:fe:af:3e:91:27:34:38:56:c9:16:07:56:ca:f2:
                    ec:d0:92:6d:a9:3e:89:ad:60:17:7e:e3:ea:0c:67:
                    b1:94:d8:f7:17:25:b4:65:ad:30:b3:a5:c3:e3:4b:
                    6b:17:7c:60:33:2c:36:40:5d:26:66:5b:bf:7b:ed:
                    0e:a3:61:5f:dd:0e:8e:85:a5:3f:eb:4e:93:5a:67:
                    37:a7:3c:b0:70:3c:a7:a1:06:56:b7:4b:bf:8f:8a:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3D:46:33:42:64:32:B6:B5:81:76:92:BC:20:08:71:19:06:2A:AE
            X509v3 Authority Key Identifier:
                keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e5:8d:3f:43:b2:a9:e5:68:80:9b:81:d2:1f:96:ef:81:ae:
         cb:1d:67:f7:66:92:59:83:16:d0:aa:d6:28:97:1a:21:b8:e6:
         0b:f3:b5:b4:5b:28:80:11:b1:8d:e1:e3:41:ce:1e:22:b3:69:
         b8:d9:da:01:8b:a4:62:eb:dd:d7:aa:df:fb:42:b5:e0:c9:8e:
         40:55:e0:3d:60:de:b5:1d:7f:b6:21:fe:5e:42:88:4c:e9:37:
         c4:90:94:a5:f7:1c:ac:94:88:03:d2:01:d3:6f:99:8c:56:1e:
         2a:dc:5b:07:7a:6a:63:d0:5d:9f:2d:db:04:6c:b7:69:f1:72:
         47:6b:b6:1a:0a:67:f3:af:09:c3:3c:c1:f9:e4:af:1d:dd:b5:
         d9:04:d0:86:98:9c:7b:57:56:6e:f6:a6:87:67:4c:0d:6d:bc:
         3d:06:c7:59:00:9c:a9:c1:d4:7e:11:30:51:53:ba:c3:84:c8:
         a4:81:c9:7f:47:16:93:08:6b:ea:92:c2:eb:72:94:de:d4:bb:
         ec:3e:76:e8:35:9a:4a:98:b4:de:2c:e6:73:59:1b:d6:9e:14:
         09:e3:82:84:48:81:7c:05:36:7f:ee:50:4e:0f:c4:7c:79:04:
         72:8f:df:eb:1e:a7:8e:79:86:ab:fa:c1:d1:3e:1d:5c:96:71:
         35:63:70:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:25:48 2026 by rpki-client