Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File:                     1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier:          +YQFr5ozHgtrP+JtWXnH3x89NEW8BCsjBjuK8/bAdK0=
Subject key identifier:   DE:0C:DE:BD:6A:7C:B8:5A:A0:4F:4D:39:7A:D4:84:D9:67:B2:28:37
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer:       /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial:       019FA071822422865307E20EE6ED586FB0BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number:          19D2
Signing time:             Sun 26 Jul 2026 22:00:21 +0000
Manifest this update:     Sun 26 Jul 2026 22:00:21 +0000
Manifest next update:     Mon 27 Jul 2026 22:00:21 +0000
Files and hashes:         1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: KNYbG/luekRzQQmKsNzjYGVQox40t53zHe099yxZrqY=)
                          2: B_KGcXQ0DuIdghhkI0CttQjaBiY.roa (hash: vrjC5dTNYvxDZ+tn/uxjJ/eLDEIZEWZ3qbbhNWSnHdg=)
                          3: Fzbx011u7RVOot7S1xohG9qyhz8.roa (hash: d3cH8nlBzo4ygFaoC3yncTUnU72/qEe1SfOmm7ZS+sU=)
                          4: ZMvIxxGP7qocWq6cskVSeYzqx0o.roa (hash: 3C3h+rU23U84LO7lG7BTF7dtlYQvYrPkr1tHRpjMHRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:71:82:24:22:86:53:07:e2:0e:e6:ed:58:6f:b0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
        Validity
            Not Before: Jul 26 22:00:21 2026 GMT
            Not After : Jul 27 22:00:21 2026 GMT
        Subject: CN=de0cdebd6a7cb85aa04f4d397ad484d967b22837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:e5:08:c1:26:f6:1a:53:6a:6b:0c:0a:cc:
                    f7:b5:4f:71:9e:3a:22:0c:ae:ef:3f:1d:b9:10:e4:
                    d8:d8:bd:0f:43:7a:e9:58:80:cb:aa:6a:d0:dd:6e:
                    74:96:9e:21:f3:0d:7a:24:ef:d6:d6:07:23:14:ae:
                    77:4a:f6:56:72:f3:ae:24:f6:76:03:aa:57:ae:e2:
                    1e:25:4c:d2:34:c8:46:bd:c3:3f:e7:cf:49:22:fb:
                    9d:29:9f:d7:90:4b:61:38:bf:72:94:2e:78:b3:94:
                    e0:af:b4:27:7f:2a:ba:57:46:d4:a0:d4:7c:60:69:
                    70:cc:0d:a3:de:e3:61:1c:2b:a7:30:69:76:a2:7c:
                    e7:17:8b:97:48:1a:9c:0a:57:a5:23:49:6c:92:bf:
                    d7:9c:d3:87:88:5e:6f:54:df:0e:14:d0:63:66:5e:
                    98:92:8a:fc:64:37:35:cc:5d:80:67:95:65:0d:de:
                    71:ae:5f:1c:cb:78:2b:57:0b:fe:65:ec:17:20:65:
                    c9:2e:a5:6f:91:1d:08:34:09:7b:b4:ef:d9:42:04:
                    5a:26:11:b9:97:11:b0:ed:ff:38:bc:64:2b:0b:2f:
                    f3:42:86:78:b9:b8:55:fd:71:24:08:35:85:2c:9c:
                    3d:cc:a2:69:8f:cc:81:1d:d9:70:79:74:3e:f5:3d:
                    10:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0C:DE:BD:6A:7C:B8:5A:A0:4F:4D:39:7A:D4:84:D9:67:B2:28:37
            X509v3 Authority Key Identifier:
                keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8f:03:a8:c2:06:db:7b:2c:19:f0:22:7e:ec:e1:03:b1:e8:
         c6:a6:35:07:a7:94:6f:84:76:7c:19:eb:37:74:e8:46:dd:a4:
         ff:21:f5:1c:0d:40:1c:b6:09:96:ec:b1:40:ae:e7:9d:f4:0b:
         64:d7:6d:7d:de:85:73:51:f8:b0:0e:1e:fb:83:bf:58:cc:39:
         96:ea:05:11:a5:3e:a3:51:a6:80:b2:74:81:36:5a:53:2a:7b:
         e3:43:9d:f3:e0:69:5f:50:33:af:6d:76:f8:77:14:b6:6c:63:
         55:1a:de:c6:6a:c8:7a:1a:5f:dd:ee:6c:6f:ef:6d:ee:ee:32:
         8c:8a:40:a5:59:d8:e2:7d:ce:f7:cb:fb:80:90:9d:b0:ee:76:
         c0:38:83:e2:58:4b:22:f0:3c:39:97:d1:27:27:08:a8:d3:2b:
         74:56:df:64:29:d4:75:42:75:e8:93:7d:96:8a:8b:28:46:01:
         fa:8e:e0:4e:c9:6a:3d:97:3c:eb:4c:81:9f:3d:90:44:3c:7c:
         9d:99:d7:f2:67:60:23:80:b4:16:3e:63:55:46:79:b8:5d:e8:
         de:b9:3a:45:38:86:45:51:7b:c8:c4:6c:6f:1e:80:6f:dc:a9:
         3a:d8:49:57:ae:b3:4e:95:a2:7b:2d:4f:3a:aa:94:4f:ff:05:
         38:3d:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:32 2026 by rpki-client