Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
File:                     usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json)
Hash identifier:          uj2RiDNP++qKljrhUKEG8dTsYzpKbwc9ghw2YTEFcMo=
Subject key identifier:   C1:8E:4E:03:AA:ED:33:4F:84:20:A3:3C:A6:49:98:E1:5B:E7:EE:4A
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Certificate issuer:       /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial:       019FA3733DC784F9D23F00D4FA5818E66373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
Manifest number:          19D0
Signing time:             Mon 27 Jul 2026 12:01:06 +0000
Manifest this update:     Mon 27 Jul 2026 12:01:06 +0000
Manifest next update:     Tue 28 Jul 2026 12:01:06 +0000
Files and hashes:         1: JGKLr4eYvFyQS44nBzhaqSDqb4M.roa (hash: R8q2g33KJxVN+/8kBrx+AnoKYUUKSwPLQijlXQQHaMQ=)
                          2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: skdT/IQ9UL6WEolviRR11AYDIUVO+vrZXVCueXtvuUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:73:3d:c7:84:f9:d2:3f:00:d4:fa:58:18:e6:63:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
        Validity
            Not Before: Jul 27 12:01:06 2026 GMT
            Not After : Jul 28 12:01:06 2026 GMT
        Subject: CN=c18e4e03aaed334f8420a33ca64998e15be7ee4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:18:54:3a:09:3f:58:28:a1:a9:0b:d5:f2:
                    0d:41:d4:63:c5:b6:0a:92:2e:2c:47:f2:94:62:3b:
                    9e:20:15:59:53:c8:47:36:a9:5d:2e:d2:8e:95:ab:
                    45:43:cd:38:3c:37:e7:54:1a:f8:b5:bc:d6:22:df:
                    35:32:6d:17:0d:9e:d4:0f:5c:cf:d9:4c:1d:d2:20:
                    ed:6f:0d:16:82:c1:48:39:c2:36:27:d3:dd:52:23:
                    72:ee:1d:c4:24:8f:6c:a9:83:09:49:7c:ff:b1:3e:
                    0b:ec:40:28:d4:0d:8f:bf:59:14:a5:70:a0:b2:ce:
                    15:fb:83:df:68:43:e3:df:39:21:ed:aa:a9:80:61:
                    b2:7d:e0:19:00:89:fa:1b:2e:89:92:c0:3c:c7:87:
                    9c:c5:b9:33:d8:9b:23:dc:4e:87:de:d2:36:35:10:
                    83:22:a7:a5:41:2d:f9:27:3d:56:ed:a5:10:4d:44:
                    d3:6f:d1:24:5f:89:29:e9:a4:3e:2f:57:63:85:b1:
                    46:21:c9:c5:72:dd:6d:8e:01:af:48:c9:53:59:75:
                    93:6c:3a:1b:bb:eb:6c:04:8a:4d:ce:c5:13:d5:67:
                    5d:c7:a2:82:45:9e:62:01:10:4b:3f:23:04:80:47:
                    1e:00:7c:a2:9f:64:1e:1a:62:54:fc:10:08:13:d4:
                    a7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8E:4E:03:AA:ED:33:4F:84:20:A3:3C:A6:49:98:E1:5B:E7:EE:4A
            X509v3 Authority Key Identifier:
                keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d8:16:2a:50:b9:a3:18:9a:d0:c7:46:94:e0:79:51:04:b3:
         49:a1:6b:86:10:49:49:fd:01:28:62:63:cf:0e:2b:8c:cb:6a:
         e0:8f:b9:83:e7:c8:f2:04:f5:cb:7b:c9:20:75:0b:71:47:5e:
         31:89:58:17:a8:47:b9:ea:ad:42:50:03:b6:4d:a7:d3:c8:47:
         b3:aa:cb:bf:6b:a5:89:01:33:73:17:99:4d:48:48:b3:f7:a6:
         fd:e3:6b:15:e7:f9:1d:41:00:f3:63:32:99:26:c7:03:9c:30:
         5e:39:fc:58:7d:72:4f:5b:73:d6:2c:6f:84:33:eb:80:a6:db:
         87:e5:30:70:cc:ce:30:20:db:64:0b:f2:14:df:35:3f:59:e8:
         1d:07:0a:da:52:f2:41:ae:53:a1:ec:44:d6:37:f3:f3:7b:10:
         ec:56:74:d3:9c:e8:29:47:d4:e2:96:ff:33:64:6d:11:ba:3b:
         b2:cb:ba:26:c7:78:96:25:f0:fa:41:df:3f:43:68:c4:be:2d:
         c5:1f:88:40:21:3d:74:70:54:a6:90:49:9b:2b:18:b9:ed:34:
         35:17:52:31:a4:98:ff:e8:f3:5e:62:f3:72:7f:89:2c:fc:d9:
         a0:12:9f:c0:bf:42:49:19:1b:14:10:c6:ca:66:e3:4a:c4:3f:
         06:5a:33:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:25:18 2026 by rpki-client