Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File:                     F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier:          dX6Ja9Vx19f/nO3ZUq+pWrmQlNd9H8s+us8zCzzTdKM=
Subject key identifier:   BC:E5:43:F2:85:6B:8B:13:63:BA:E5:64:E2:22:AD:4B:6B:BA:B6:4F
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer:       /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial:       019F9F96420DEDDBC362C833FE80548144BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number:          19DC
Signing time:             Sun 26 Jul 2026 18:00:52 +0000
Manifest this update:     Sun 26 Jul 2026 18:00:52 +0000
Manifest next update:     Mon 27 Jul 2026 18:00:52 +0000
Files and hashes:         1: 7QjRRYA7jcCFNync-7ZqAYQ9Lvk.roa (hash: Ww9Vf4lv8aoiNND6Ah1rgZbAtQ03hE7wpG+7oWtfpX4=)
                          2: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: lE9NJVbYWi7r89ji+rnLePCCfPp6TttZBLFatIvsBVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:96:42:0d:ed:db:c3:62:c8:33:fe:80:54:81:44:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
        Validity
            Not Before: Jul 26 18:00:52 2026 GMT
            Not After : Jul 27 18:00:52 2026 GMT
        Subject: CN=bce543f2856b8b1363bae564e222ad4b6bbab64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ad:7b:f6:78:9a:23:d8:97:70:76:52:f8:01:
                    e2:e9:e5:ef:30:81:92:1c:d5:94:ba:2e:b0:df:e0:
                    9e:cf:4e:f1:04:e6:21:b6:73:a8:24:09:63:fa:36:
                    4c:76:6f:61:df:d1:0b:04:9d:39:50:5c:ee:35:a4:
                    a3:50:e3:99:d5:8d:ad:d9:0b:7f:f6:ca:97:04:31:
                    5b:1b:21:1c:55:c1:2b:a1:55:27:f4:71:99:e6:24:
                    12:71:11:ae:51:ff:57:99:16:a2:14:d4:c2:11:89:
                    a4:e7:20:fd:42:3b:0b:81:72:00:1c:d3:c2:f0:3d:
                    e1:c6:da:97:e3:c6:39:33:cf:12:ae:20:5e:c4:b0:
                    5e:ef:ba:9d:cb:65:8c:9b:af:10:8e:a5:b6:63:76:
                    23:e4:69:f4:e1:7f:3e:40:43:6f:c9:aa:94:c8:b9:
                    f8:fe:9b:5f:ce:dc:23:29:00:51:34:74:06:2d:29:
                    a0:15:87:a2:49:47:f8:5a:0d:75:d7:6a:39:27:30:
                    7d:27:96:d2:de:e0:79:8c:2c:1d:2e:5c:e4:67:7f:
                    88:51:5a:1d:d0:a5:fa:39:19:42:5c:13:8a:50:5f:
                    23:a6:b6:45:5f:1a:89:35:b5:06:d3:18:37:96:2a:
                    a0:7a:36:6e:66:6c:23:7f:f9:9a:94:7f:1d:e3:e2:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E5:43:F2:85:6B:8B:13:63:BA:E5:64:E2:22:AD:4B:6B:BA:B6:4F
            X509v3 Authority Key Identifier:
                keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:69:71:be:98:d9:ed:f7:68:82:57:07:41:d7:e0:31:4c:
         aa:25:da:4d:be:57:60:dc:79:ee:88:07:33:1a:9e:e1:3c:36:
         69:37:54:b2:e0:6e:f0:50:c5:14:05:ec:46:0a:03:79:9a:71:
         3c:23:c5:b2:34:e2:a1:04:53:94:88:aa:ec:e2:40:ad:a4:a2:
         54:ba:12:58:e4:e3:25:9b:22:ae:9d:0b:be:03:12:8c:59:90:
         d6:7c:cc:ae:c3:41:17:45:9a:fa:ab:92:ef:2a:86:3f:9b:1a:
         0c:ba:5f:f4:30:f7:65:10:80:4b:9f:cb:2f:a6:e3:0a:f2:89:
         66:1f:c5:1e:dd:3d:c7:84:52:ac:2f:ad:60:c1:ea:39:12:3e:
         19:8c:36:7a:2e:95:a6:58:04:56:51:01:e4:3e:d6:20:9b:43:
         a5:ff:ee:ff:fb:8b:3d:9e:22:ea:48:63:d6:0b:c2:14:76:78:
         60:25:35:ab:e9:9a:93:b7:a8:0c:cf:ea:af:14:8d:e6:ec:8e:
         e3:98:dd:9d:bd:58:5c:46:bc:09:d4:2a:c5:85:f1:8c:2e:0a:
         94:85:23:30:1b:90:a7:e7:37:ec:70:d1:0d:1a:67:6c:9f:c9:
         95:60:02:cf:bf:90:04:90:f3:80:82:fe:08:27:ea:ed:ab:76:
         2e:a3:fc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:13:16 2026 by rpki-client