Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
File:                     cke6Q-JwyYvcZCqePCGMpSTrD1M.mft (raw, json)
Hash identifier:          ujqg6YTG+T+RZEGSIV4PyWdGzxNg8hgCs0bxVjiKvrg=
Subject key identifier:   BC:AB:CA:EF:70:3F:A1:BF:7B:5B:AA:A7:D2:57:FD:F1:2C:4B:97:B3
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Certificate issuer:       /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial:       019F4240266765AAF5BAF20625FF57025493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
Manifest number:          19A2
Signing time:             Wed 08 Jul 2026 15:02:08 +0000
Manifest this update:     Wed 08 Jul 2026 15:02:08 +0000
Manifest next update:     Thu 09 Jul 2026 15:02:08 +0000
Files and hashes:         1: Mqg9n_WUaz8lrRzhy3caQEnobVw.roa (hash: LZsbKsdzQng7HRZZhi5z+bLzwdV0hD5QUy5L6JqoYos=)
                          2: Sjf82uCdVmtpzmm_PptJx8toCPs.roa (hash: Na57mpKelyc0/Twd5ZReEfbwHbuJ2m4/rTomEx1gwXE=)
                          3: Zvu226f1fBrcEihPAWh1s6Daxf4.roa (hash: JpmLyxsFn08hdPg/l1P8dzonTsKrdWYeS04Q9Rr9wLI=)
                          4: cke6Q-JwyYvcZCqePCGMpSTrD1M.crl (hash: alwZuyPM3hzzaT4bP23qtONVy99ZZM3SO/LQaz06XtM=)
                          5: r12czjd3hmL-yG97PfK3Dj9akbk.roa (hash: jVaf6gTo2ZlEb+vsLBsz2owvWSdPoh6WJGm9n3ARZyY=)
                          6: x7X4IhRx8R31zbrI_fkDFLJclLM.roa (hash: 3Kt/g3hdmBw96M1CeEe5O0V80J3A8nueYPJIfjF0KKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 13:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:42:40:26:67:65:aa:f5:ba:f2:06:25:ff:57:02:54:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
        Validity
            Not Before: Jul  8 15:02:08 2026 GMT
            Not After : Jul  9 15:02:08 2026 GMT
        Subject: CN=bcabcaef703fa1bf7b5baaa7d257fdf12c4b97b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:77:09:bf:e2:09:b9:71:30:56:72:29:1b:
                    50:dd:48:9a:b9:71:aa:5e:90:c3:23:59:fa:44:bf:
                    79:28:94:e6:a4:04:db:f0:fb:27:98:c1:8e:5d:a8:
                    33:d4:84:86:a7:e6:b1:eb:49:a3:78:d0:43:54:84:
                    05:c8:dc:ad:81:36:b2:ee:92:ce:a1:f8:41:9e:80:
                    e5:1a:0a:25:98:14:75:6f:9d:6c:50:26:ac:4f:a8:
                    47:f2:e8:b7:7c:fc:49:02:25:3c:85:dd:eb:e3:a8:
                    64:83:0f:9a:1b:ca:88:4b:11:64:c4:bd:a2:b2:ba:
                    97:58:fb:24:cd:24:8e:db:a0:75:b3:01:76:d0:ee:
                    10:5e:ae:96:95:38:18:23:ed:fd:36:a9:03:68:bf:
                    9c:f0:6c:b0:20:49:87:18:bf:02:3b:be:41:ab:a6:
                    ce:fb:e5:12:2e:5a:79:93:51:f9:95:d5:ce:38:2d:
                    c0:30:44:1a:40:c9:f0:8d:f9:c4:73:fb:53:6f:0d:
                    7a:53:02:cf:a3:7d:79:c8:4e:78:df:ba:10:2d:7c:
                    b0:d7:ae:97:63:fe:b9:85:4d:18:42:aa:73:a2:5e:
                    70:6a:12:04:78:95:d8:21:57:d6:9a:ef:4e:ce:fc:
                    30:a5:bc:de:c9:2e:c2:22:51:f1:6e:b9:64:8a:82:
                    41:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AB:CA:EF:70:3F:A1:BF:7B:5B:AA:A7:D2:57:FD:F1:2C:4B:97:B3
            X509v3 Authority Key Identifier:
                keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:fb:d9:7a:c9:2c:90:52:76:f0:27:cc:96:55:ed:57:47:b3:
         b3:59:fb:70:a1:3c:36:05:27:3a:d3:56:9c:cb:da:e8:c3:53:
         8f:46:a2:be:f6:fc:bd:8c:bf:5a:77:01:91:9f:1b:56:10:9e:
         1f:a1:e0:8d:cb:23:83:1d:d1:1b:a2:a6:f6:f1:46:a1:45:7c:
         14:34:46:1e:ba:7e:e7:10:ca:6b:dd:0e:b1:a3:56:cd:bf:df:
         ba:45:86:1f:0c:53:97:55:73:f1:40:bf:7f:91:c5:24:c8:32:
         a6:db:04:a7:74:36:ed:e0:e7:c2:b9:61:ad:93:0b:b8:82:96:
         ef:4a:8b:a1:ed:64:fa:d7:58:7e:1c:a0:64:9a:46:49:37:17:
         7e:04:ed:93:be:1b:f2:4e:78:89:1c:25:bc:c8:82:d5:db:90:
         cc:35:5d:2b:ce:3e:4f:a6:ef:64:f2:c1:fc:52:30:d0:d7:be:
         9a:6a:0a:9a:3a:07:f4:62:72:c3:e4:2b:36:0a:0d:34:c6:42:
         85:a1:43:1a:71:1c:6e:8a:ce:d1:60:e6:31:f9:33:20:93:26:
         1f:2b:eb:00:71:e8:c8:e1:3a:2a:6c:d7:08:76:91:49:8f:be:
         75:28:b9:77:e9:14:e1:84:45:d2:a3:56:33:b8:d8:c0:93:24:
         f6:c5:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:37:07 2026 by rpki-client