Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
File:                     cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft (raw, json)
Hash identifier:          6taa1E03gHh6sXIe1iyJMXh9fznxX98ilnqxP6K9zDg=
Subject key identifier:   D2:0A:23:D7:54:72:EE:6F:47:20:1D:01:2D:B3:B1:D2:8E:29:94:9F
Authority key identifier: 73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
Certificate issuer:       /CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Certificate serial:       019FA0A919ECDD9AEC8D3747C7D42919B569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
Manifest number:          19CF
Signing time:             Sun 26 Jul 2026 23:01:04 +0000
Manifest this update:     Sun 26 Jul 2026 23:01:04 +0000
Manifest next update:     Mon 27 Jul 2026 23:01:04 +0000
Files and hashes:         1: StxoWp_RJ1797k0oHsjoVvZHf10.roa (hash: nD5a2Jb4fZiufTRyTRxdHS8BCxtbGh40rJHL37nPIac=)
                          2: cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl (hash: lEztqj8jifhq08Qt52LNxtb7XAEHO2BxAtwJKkySBu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a9:19:ec:dd:9a:ec:8d:37:47:c7:d4:29:19:b5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
        Validity
            Not Before: Jul 26 23:01:04 2026 GMT
            Not After : Jul 27 23:01:04 2026 GMT
        Subject: CN=d20a23d75472ee6f47201d012db3b1d28e29949f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:21:14:8c:27:7c:96:da:fa:28:8f:3d:36:
                    23:f3:46:78:ec:99:73:de:47:de:e7:60:b3:4f:30:
                    2d:c1:8c:b2:1e:2c:c4:61:47:5c:48:6b:ad:c2:26:
                    e8:50:cd:d3:31:f9:03:66:a3:70:cb:31:df:14:fd:
                    b3:03:b6:4d:89:88:77:2d:1f:49:f1:3e:ab:e6:cf:
                    b9:08:20:21:95:c1:da:18:7f:f8:ec:4f:52:dc:78:
                    da:9f:a4:75:4e:d9:6a:90:89:7d:bd:79:9a:33:38:
                    e6:9d:4c:ad:17:ef:7b:4c:dd:97:6f:69:96:3d:9d:
                    4c:fc:e3:b3:03:c5:11:e5:bc:2f:e0:2c:e9:ea:2d:
                    40:1a:bf:80:80:a4:9c:a5:eb:e0:e9:5c:99:fd:16:
                    78:56:2b:29:e1:2d:83:29:0f:c0:6b:86:ae:32:40:
                    e1:2c:34:ff:11:ae:c3:ba:0b:95:1c:39:a1:8d:86:
                    0e:40:d2:15:ce:6b:f9:3e:7f:e6:c0:80:25:c2:82:
                    8f:01:08:56:cd:69:78:d9:6d:b5:43:0d:34:84:49:
                    af:3b:95:25:0f:65:5d:06:7b:59:af:29:b2:fc:73:
                    f8:34:0f:e2:ed:1e:ff:4e:3e:3d:d9:28:12:72:a1:
                    84:af:6c:9b:92:e6:00:d8:65:f2:68:b4:2d:ac:41:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0A:23:D7:54:72:EE:6F:47:20:1D:01:2D:B3:B1:D2:8E:29:94:9F
            X509v3 Authority Key Identifier:
                keyid:73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9a:d0:51:c1:bb:62:61:1d:ad:f0:59:e1:c7:92:50:70:c9:
         5f:a8:2e:dc:dc:f1:c4:bd:36:b3:6b:71:a5:23:c1:0b:d4:40:
         30:ed:f5:e6:a1:18:e2:2a:d4:49:8f:b9:ad:1a:0a:06:79:9a:
         ad:58:de:8a:dc:19:97:18:64:1b:57:3b:bd:5b:df:3a:2a:a5:
         1d:ba:4b:88:e4:32:9f:23:b8:0a:a8:d0:10:5e:1f:07:fc:64:
         bd:6b:aa:43:a9:1c:bd:e8:0a:70:a6:6b:4f:1b:e0:c1:f8:f6:
         8b:f9:cb:72:e4:96:4b:04:24:55:20:50:6c:6c:18:91:60:4a:
         30:e0:0a:3a:05:1a:4e:0a:fe:45:f4:70:5c:f8:31:6d:d6:d4:
         03:4e:78:85:39:50:a3:9e:c2:74:9b:12:aa:e2:b9:2d:29:2f:
         cc:05:a6:a7:b0:3e:22:e9:d9:df:46:31:7a:f0:c3:33:b1:07:
         ac:9d:75:93:81:82:ef:0a:3c:82:c4:f5:26:01:51:e1:2f:24:
         95:0b:4f:85:10:e3:c1:ff:da:66:44:da:f0:fe:4e:e6:16:08:
         3c:07:14:d3:f9:d3:64:09:d1:3d:bf:a6:a8:0a:8a:3f:92:0a:
         59:cb:23:c5:70:27:59:0b:e3:71:e5:2e:94:53:12:1e:cd:2d:
         53:4c:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:37:46 2026 by rpki-client