Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
File:                     sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft (raw, json)
Hash identifier:          kDYVZTRhddSOIQoMw6jhRZjvb2d3/f2n6nEbucCYpUU=
Subject key identifier:   7A:EE:DC:4B:43:BE:66:15:92:15:31:E9:D5:3F:8E:B3:C7:DE:CC:89
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Certificate issuer:       /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial:       019F9F96172A70CBBD377663CECE0C5C8C70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
Manifest number:          19CC
Signing time:             Sun 26 Jul 2026 18:00:41 +0000
Manifest this update:     Sun 26 Jul 2026 18:00:41 +0000
Manifest next update:     Mon 27 Jul 2026 18:00:41 +0000
Files and hashes:         1: 9Jm99UXcqPRq8OxdnEb6zi_aR8o.roa (hash: GY9WqnOMNWsURSj0hWz57Qy0Df2wIczJjVYdicJBrfI=)
                          2: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl (hash: 3NCES3thQEfvv2zswl597lOqbvwAQ+P01/7VGi7gn/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:96:17:2a:70:cb:bd:37:76:63:ce:ce:0c:5c:8c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
        Validity
            Not Before: Jul 26 18:00:41 2026 GMT
            Not After : Jul 27 18:00:41 2026 GMT
        Subject: CN=7aeedc4b43be6615921531e9d53f8eb3c7decc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:da:c4:3b:c5:b5:59:05:35:ea:74:0c:c2:
                    af:88:4d:22:93:fc:0c:d6:fb:7d:99:36:39:76:f7:
                    d2:a1:2f:3f:5a:54:14:e1:2c:c5:59:d7:86:d6:f2:
                    57:26:f6:a9:4f:43:01:47:b7:36:c0:0a:3f:65:13:
                    e7:eb:da:98:f3:25:88:21:a2:3d:8c:cc:54:3c:d1:
                    e9:8d:6f:38:61:bd:0f:d1:cf:7e:be:04:86:2c:55:
                    fb:74:62:0e:63:14:37:44:d7:b1:bb:d5:6c:64:60:
                    09:b4:10:4a:03:f3:6a:19:56:2c:05:f6:4a:ad:c5:
                    f7:dd:00:e5:f4:76:dc:c7:56:64:4a:61:1f:85:36:
                    b9:b1:fc:f3:24:8d:9e:79:04:cd:33:2e:b8:66:fb:
                    b1:ed:73:42:03:97:12:de:7c:d4:bd:37:cb:50:61:
                    64:c4:07:3a:65:74:4e:a7:bc:63:4e:ee:b1:40:26:
                    12:db:64:23:d1:50:58:09:40:24:c0:91:7b:03:28:
                    c2:d6:32:1e:5c:48:d7:5f:30:51:22:b3:ae:eb:a5:
                    1c:19:ef:f6:dd:44:ae:9d:42:0f:38:70:4b:98:3c:
                    86:5e:51:ad:bb:a8:0c:74:b6:4d:f2:80:75:ac:24:
                    83:3a:63:58:8b:70:37:13:b0:ff:21:55:a2:ce:ec:
                    06:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EE:DC:4B:43:BE:66:15:92:15:31:E9:D5:3F:8E:B3:C7:DE:CC:89
            X509v3 Authority Key Identifier:
                keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6b:e1:7f:ed:b8:03:a1:df:94:cf:39:61:05:c9:f3:50:0c:
         ab:d8:47:e7:49:ce:7f:a9:68:f6:25:e3:95:34:b5:e0:2c:f5:
         19:a9:e4:fb:a6:45:af:aa:55:73:12:f3:d9:e2:e5:1a:49:51:
         bc:e0:5e:2e:0e:39:ce:71:f8:73:85:d6:03:b3:63:d0:f5:9f:
         8d:60:d0:10:1e:86:ee:95:66:de:0b:e5:e9:d3:b3:4a:4d:6a:
         9c:08:e8:86:17:e8:9a:b3:f9:f2:f6:79:a4:3b:00:a3:03:59:
         18:27:96:fc:17:93:fb:be:ce:9e:e8:e7:51:e9:95:66:78:22:
         5e:db:a8:88:73:22:06:05:51:bb:1f:5e:d9:3d:42:59:87:66:
         bb:62:91:54:37:73:0b:4a:3f:8b:00:5a:ba:54:4a:0c:fb:bf:
         e8:60:4e:96:25:c6:27:1d:72:93:78:33:15:a7:af:8e:15:ba:
         f7:8d:3f:02:cb:93:15:0e:6a:6c:d4:73:f2:5b:a7:67:95:38:
         56:ff:73:90:94:45:78:81:f5:76:e0:ac:c0:da:d2:4d:b8:e5:
         6a:65:62:04:a4:76:15:9e:79:3c:a7:4f:3d:87:b9:66:ff:10:
         f4:3a:ba:98:44:74:e3:7d:8f:89:dc:24:0d:ab:05:99:94:67:
         fe:6c:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:39:40 2026 by rpki-client