Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File:                     USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier:          VdFNsX498oghzo3isB0oPT8IQ7ik9/xFxFrUwgRtcyU=
Subject key identifier:   6B:17:37:50:79:CE:9B:8D:37:D8:C3:D9:8B:D6:B7:6F:49:51:C8:D6
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer:       /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial:       019FA03AD6B9495A21DEF801103228391B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number:          1660
Signing time:             Sun 26 Jul 2026 21:00:38 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:38 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:38 +0000
Files and hashes:         1: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: 4ZDfE+uJEcK/fZsk5BMNLUUWi5MHse0xN2TreN9A6Vk=)
                          2: eImEyRrzQaMBiFlZOhGNpdB8A3o.roa (hash: ohTX7uDCv7TQkH+WJ6CBAXHjVpePbGZrEFWaegxzw/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:d6:b9:49:5a:21:de:f8:01:10:32:28:39:1b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
        Validity
            Not Before: Jul 26 21:00:38 2026 GMT
            Not After : Jul 27 21:00:38 2026 GMT
        Subject: CN=6b17375079ce9b8d37d8c3d98bd6b76f4951c8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:00:ca:78:67:dd:96:a6:00:5f:6c:0f:7f:
                    5c:f7:a4:36:5b:23:13:5f:1b:71:ee:f6:d2:34:f5:
                    34:9e:43:ce:73:07:93:7e:b9:f2:84:bf:3d:62:ab:
                    d9:c5:cf:b8:ff:a1:b7:b3:b8:e2:63:fa:7a:6f:6d:
                    55:38:bd:85:0d:84:ce:f6:58:6f:30:3d:f5:c9:94:
                    1e:18:7f:54:ea:e7:fe:62:73:14:a7:54:84:09:cd:
                    42:be:a6:40:29:dd:5d:11:01:00:56:3d:d9:b8:5c:
                    4b:b6:62:2f:04:19:89:98:0d:b4:a2:54:f9:21:1d:
                    98:41:28:ef:cf:32:65:b9:f0:2a:9d:e2:11:33:4a:
                    4e:31:af:52:b6:69:ee:18:41:26:57:cf:11:59:c3:
                    5d:e0:65:97:f4:4d:3e:cb:7f:6f:b7:99:dd:b3:ca:
                    5b:a8:05:2b:c9:20:ee:bb:42:51:db:75:37:17:4a:
                    e4:79:2e:32:99:ae:8f:22:36:08:d6:68:14:2f:b8:
                    28:cd:96:4d:bc:9e:d8:d3:aa:ad:ad:15:3c:18:af:
                    82:99:f5:b4:b5:ee:c7:c5:ee:8c:57:ea:6a:af:c4:
                    4f:1b:f5:e9:0a:f5:0a:ae:81:bb:34:70:36:67:e8:
                    29:55:63:65:40:92:af:4b:3b:96:44:0a:c3:44:3a:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:17:37:50:79:CE:9B:8D:37:D8:C3:D9:8B:D6:B7:6F:49:51:C8:D6
            X509v3 Authority Key Identifier:
                keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:03:80:32:31:76:c9:d5:2c:df:cc:90:13:f3:0f:f0:56:
         77:b2:c8:8a:71:40:5f:ba:53:a2:b9:4d:7f:f5:29:b3:c4:f3:
         03:dc:dc:ec:b0:ea:61:4f:b4:92:02:f3:56:cf:9c:e2:51:78:
         0e:29:6a:db:5d:50:2b:b4:93:9b:81:b8:d8:7f:d0:5d:5e:d8:
         9a:ea:93:06:02:13:17:79:64:a9:4e:57:cf:fd:e3:ec:39:c5:
         5b:d0:c2:08:fa:be:b3:15:e2:a3:c6:f2:4b:ef:95:0b:bf:31:
         a5:c9:9e:c0:15:5e:09:56:f8:fe:17:6e:e3:ba:5d:4e:1f:70:
         e0:e3:d4:33:70:8f:05:fc:e8:f5:c2:c0:0c:f7:a4:99:f8:19:
         2f:69:bd:1c:38:4d:12:35:ea:ba:9e:5d:30:16:05:fe:e5:7c:
         fa:be:ac:15:a7:98:d1:cf:38:34:87:ef:4c:1a:fc:b4:75:20:
         41:cc:bf:1e:5d:be:7e:59:06:40:4f:52:49:72:25:f6:b7:1a:
         2f:be:73:ab:7e:5c:7a:bd:d5:4b:b9:0d:3f:7e:87:69:03:a8:
         12:41:56:2d:6b:53:f7:97:58:fc:be:0f:8d:82:50:8e:7f:43:
         40:a0:cf:aa:66:b4:74:f6:c1:6e:67:95:fc:ae:65:bc:80:19:
         c2:74:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:15:08 2026 by rpki-client