Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File:                     E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier:          yK/+rYOx+K8ttDBTnw16Jtf5u4stEga942Y6DWCtUiE=
Subject key identifier:   77:0C:AF:51:33:A5:07:55:77:B2:13:88:14:CE:C3:40:45:C4:1D:BE
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer:       /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial:       019F860D23C7949D6D8559A0FDC92617EFB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number:          19C3
Signing time:             Tue 21 Jul 2026 19:00:35 +0000
Manifest this update:     Tue 21 Jul 2026 19:00:35 +0000
Manifest next update:     Wed 22 Jul 2026 19:00:35 +0000
Files and hashes:         1: CvvGlgWm1GcrOms2BMDm3Ft3YIE.roa (hash: BlTzWac/CA3jlASMLpb4LLRmE80n50trJVbAwjMNvXU=)
                          2: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: gtDonuu9MHKx9hOcjvtGto7/BCrwTYd98mRUfdFGsnQ=)
                          3: dkLJNc8YE1qupqt8vejn4yN_8pU.roa (hash: 9F30pB6QAME+aQUtJBPApccmf32qIQY7Y6P8efT0WEs=)
                          4: fvrmT3BDya5vUxums74XuzYqty0.roa (hash: q+hIuLuMabVUkBWiWW3pA8MFsL2LuFbfABq1AZhRA2Q=)
                          5: j4On1jEgDqGHCrQyanmlHTLIPfU.roa (hash: FBZAhcfJ9YrnvMKAbA0ULbxZIF42C1VrsQa2aWPitG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:0d:23:c7:94:9d:6d:85:59:a0:fd:c9:26:17:ef:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
        Validity
            Not Before: Jul 21 19:00:35 2026 GMT
            Not After : Jul 22 19:00:35 2026 GMT
        Subject: CN=770caf5133a5075577b2138814cec34045c41dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:6e:4c:f4:1a:ac:00:f1:46:ed:de:1c:72:
                    57:aa:bd:49:68:71:e8:b5:4b:37:6d:78:38:4e:ef:
                    b3:06:9e:0b:b6:75:1b:ae:16:b3:a8:0d:49:73:25:
                    4a:37:f6:47:2b:22:c0:be:8c:0e:12:75:05:aa:51:
                    84:92:1d:42:67:fb:05:fb:cc:96:2a:09:56:65:fe:
                    59:5e:09:e8:72:a9:85:72:8f:47:9c:bd:f8:e9:95:
                    f0:75:65:3e:f8:58:57:7e:85:1a:6c:d2:c8:76:91:
                    55:72:0c:bd:43:4f:88:bd:2d:ff:59:3b:a2:26:16:
                    f4:99:04:a4:bb:07:f1:16:55:fe:fa:6f:5d:ec:2f:
                    d0:92:18:19:84:0b:f0:46:aa:4f:b8:38:1a:47:4c:
                    5a:e7:57:d5:26:74:20:7a:b0:39:4f:26:0b:68:d9:
                    44:b0:bf:b4:2e:fc:63:e8:7d:41:b4:b3:c3:10:a1:
                    e4:b8:24:43:a8:eb:4a:ca:fe:89:8d:29:f8:c5:1c:
                    ac:2f:dc:67:42:1b:ad:94:e7:ed:cc:3d:08:d3:4e:
                    15:3f:65:07:86:5e:3a:56:d0:ec:38:3d:0b:60:9c:
                    79:0d:aa:dd:0b:5e:73:a1:31:c2:a8:2d:01:35:09:
                    44:95:0e:27:20:81:03:18:39:9a:88:9f:72:42:c1:
                    46:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0C:AF:51:33:A5:07:55:77:B2:13:88:14:CE:C3:40:45:C4:1D:BE
            X509v3 Authority Key Identifier:
                keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:74:49:36:ad:e2:be:8f:ea:98:f3:b3:ea:0d:09:a2:7f:27:
         09:e5:6c:5b:31:a3:29:93:18:3f:da:14:33:91:95:7c:0c:44:
         66:87:ff:c2:91:bd:34:e1:37:3b:10:c7:36:a7:52:00:46:88:
         7a:6e:f9:60:ec:8e:6a:7d:29:5c:33:f4:b4:af:0e:81:c0:8e:
         a8:69:4e:10:4d:b8:49:0c:cd:49:d0:2b:06:45:a6:e6:b1:84:
         ce:98:37:16:cc:03:33:90:ef:07:77:8f:50:5f:60:31:3a:66:
         7e:8b:92:37:79:7f:c4:fe:ac:9b:fb:64:76:0d:99:81:a0:40:
         29:f5:2c:fd:98:4c:ff:1b:3b:f5:e3:df:f6:84:e6:f4:39:c7:
         b9:57:11:2d:71:bd:3c:19:72:b4:b7:62:c3:58:01:92:86:dc:
         94:fd:fa:25:91:a0:56:66:90:66:0b:99:7e:21:ff:a6:7e:5a:
         bb:25:81:52:97:bc:dd:a2:37:3f:80:c5:40:02:8c:42:45:51:
         2f:52:92:5b:12:ba:71:fb:b5:d7:a6:2b:9e:21:e1:7d:e4:01:
         5f:ea:dc:e8:76:25:fa:08:92:1d:19:27:63:8f:c2:fa:73:07:
         d1:0a:e3:85:63:f9:31:51:03:e3:25:b1:8e:97:f1:a5:2f:88:
         fe:4e:59:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:36 2026 by rpki-client