Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File:                     33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier:          1RDb0Xxt4OfYGRsWKyt+7lM4gdVhmqNhQ3TZfyp6QMo=
Subject key identifier:   58:1C:7B:2D:89:B7:9B:DB:F5:03:F6:90:7B:82:CF:B8:C6:3C:56:1B
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer:       /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial:       019F8AFC7DF6D6A798BF838EB90BD156AA06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number:          19C5
Signing time:             Wed 22 Jul 2026 18:00:30 +0000
Manifest this update:     Wed 22 Jul 2026 18:00:30 +0000
Manifest next update:     Thu 23 Jul 2026 18:00:30 +0000
Files and hashes:         1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: Jjox1SiHva5QM5R3TGdIjhoUOhQ1yOJs6Fe5mtdVNPQ=)
                          2: VtZiDTehXWbLuvByNpvV6poX8NU.roa (hash: qzmhlPWDE6wNQJNL/swjxQrHyVqxNbrefZdH2uAfmPk=)
                          3: fK4x-x6caLzjBJ6h7UqJVWU9HNs.roa (hash: TEAA5N2BX6e88dGktvlV8qoZNHbrtanHoBnJrUnnrxo=)
                          4: g_q3_hFJu6HXUUHSAWggSZhKtYc.roa (hash: CYiIktGrTnexqrcegKNOYzL4d50/QWocPqLENQVDSYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 14:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8a:fc:7d:f6:d6:a7:98:bf:83:8e:b9:0b:d1:56:aa:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
        Validity
            Not Before: Jul 22 18:00:30 2026 GMT
            Not After : Jul 23 18:00:30 2026 GMT
        Subject: CN=581c7b2d89b79bdbf503f6907b82cfb8c63c561b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:db:2d:55:45:ad:36:d4:d7:10:fe:01:bc:26:
                    8f:ed:e0:9b:de:66:e0:ce:13:7c:4b:0c:5d:47:12:
                    c3:8d:73:24:f8:8e:b7:9e:8c:b6:e6:f5:8b:87:e0:
                    b8:fa:5d:de:30:d8:31:f2:c7:cd:67:b4:db:e8:10:
                    04:1a:25:d6:6c:70:61:5a:cd:a8:31:27:05:33:11:
                    d4:6e:56:88:8b:fa:09:2f:64:04:f0:d1:bb:21:47:
                    d6:a6:84:ef:82:9b:49:d4:61:97:fd:dd:21:fd:42:
                    01:59:54:79:62:7c:3f:6a:04:ef:13:09:f4:31:45:
                    3f:8f:f3:44:ac:17:af:1c:08:8b:8a:91:19:bd:86:
                    fa:08:1a:bc:98:9d:c2:54:02:9a:7a:18:82:f7:df:
                    1e:25:9c:08:3b:28:b4:76:ca:01:ac:7a:4c:b6:dc:
                    a5:7c:e4:80:7c:c6:bf:05:6d:30:4a:35:6f:7c:fc:
                    2e:1f:c0:2a:7d:0b:db:7d:20:cb:d4:d1:0d:7c:4d:
                    97:cf:fe:2e:87:df:33:07:12:5d:13:72:00:8f:ed:
                    a4:c5:e7:15:58:76:60:a3:fb:cd:ea:16:fc:c5:72:
                    ee:5e:cc:94:d5:23:65:8d:c4:76:c4:11:bf:66:3e:
                    f4:4a:09:1d:52:6a:15:9a:0d:d0:f2:37:2f:e6:3f:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1C:7B:2D:89:B7:9B:DB:F5:03:F6:90:7B:82:CF:B8:C6:3C:56:1B
            X509v3 Authority Key Identifier:
                keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:de:71:dc:ea:3d:dc:a6:69:8f:ed:05:1c:d7:99:fd:8b:ee:
         1b:70:67:50:0f:06:e7:1e:6f:ad:80:49:2d:73:73:c4:7b:b4:
         cf:85:15:45:3d:c1:c1:b6:ef:18:a2:0f:7e:31:e8:00:c7:23:
         23:06:2d:53:da:1d:89:8a:6e:e8:ca:a9:87:ee:01:56:de:d4:
         1d:c2:8d:7d:73:49:65:91:5d:f7:74:ff:0a:1c:7d:6f:f3:38:
         c7:33:db:b6:8a:ad:dd:2d:e9:a3:98:aa:1f:f4:a2:bc:4a:fb:
         21:3a:06:30:85:81:95:c4:56:e9:02:c9:4b:25:d1:31:c1:4b:
         11:f1:f3:11:38:29:d7:be:d1:18:d7:43:1b:88:4d:61:03:52:
         5d:f0:ea:3a:18:73:df:10:e2:13:c7:1d:ed:d3:71:59:66:eb:
         d8:01:b3:b1:c9:e8:78:3e:8e:f8:f1:02:73:1b:2e:9b:41:b6:
         68:7a:41:a3:8c:db:df:05:18:ed:b4:e9:b7:72:c0:60:eb:d0:
         c2:2d:8f:c8:73:e3:15:89:16:1f:80:33:0c:90:85:df:a1:5b:
         16:74:8d:07:98:48:00:f5:b3:9a:e5:ae:7c:b2:3a:ea:92:69:
         2d:7b:0a:4e:5c:f2:74:10:f9:05:61:a8:52:83:ae:a6:12:92:
         e5:25:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:38:47 2026 by rpki-client