Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File:                     yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier:          a5PDbZOeXO4lne8Z88JarrnLX2w88mC53rSiHQ0oVMs=
Subject key identifier:   E9:81:16:B8:AE:FE:F9:33:A4:1C:0F:F7:C8:C0:26:11:76:80:A0:7C
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer:       /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial:       019FA18436158261F6EA9E1D6415CD969E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number:          19D0
Signing time:             Mon 27 Jul 2026 03:00:24 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:24 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:24 +0000
Files and hashes:         1: 1Y3Jx-pHnnlaAgkd81VS3ppPNg8.roa (hash: tTjmMx7gS2w8jTpbpktEzeLgDcYSzx93pMRGzj4kGes=)
                          2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: CkEsr71Td13al0TgliHNZ+bFRWxuhXYrlEBxqg6Qa7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:36:15:82:61:f6:ea:9e:1d:64:15:cd:96:9e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
        Validity
            Not Before: Jul 27 03:00:24 2026 GMT
            Not After : Jul 28 03:00:24 2026 GMT
        Subject: CN=e98116b8aefef933a41c0ff7c8c026117680a07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:16:83:2f:7a:32:74:27:02:ff:02:8f:67:ee:
                    78:b8:c1:d7:ef:4c:03:0d:7c:d4:0c:90:3f:2b:bc:
                    9c:26:cd:0c:ba:b5:aa:d2:82:0e:48:4c:ee:27:50:
                    11:ba:6c:ae:25:48:d3:7c:e7:e8:c8:f9:0b:63:98:
                    fb:7f:59:fa:3b:7b:e3:41:e5:59:1b:40:3d:1d:11:
                    f9:cd:2e:fc:88:4b:de:02:62:db:d7:c6:9f:e5:19:
                    68:64:8e:86:01:4f:3e:43:a1:e8:e1:3b:68:35:6d:
                    18:69:9f:3d:d6:b4:74:cf:c3:b3:3f:94:c0:ab:28:
                    f0:dc:3a:d3:21:12:a0:a6:31:74:47:b4:2d:c6:2a:
                    b8:bc:f0:4d:08:0f:05:c8:fe:00:a3:2c:e5:d1:a9:
                    4c:3c:15:2f:45:1e:da:12:e8:8a:87:6c:6e:47:34:
                    8e:1f:ea:96:34:e9:6b:bb:77:4f:6c:ca:9b:a7:af:
                    52:1b:f8:01:70:ca:69:7a:9a:6d:c4:49:ea:1b:29:
                    6f:e5:49:6c:fb:d2:33:a1:d8:9a:ad:8a:04:fe:9e:
                    8a:2a:fd:c5:55:92:df:0f:85:5e:52:b8:36:aa:e8:
                    43:15:92:8e:32:b7:f6:6f:43:91:ee:0b:8c:d8:69:
                    0f:21:ce:66:9d:8a:18:cf:9f:be:ce:7c:14:dd:0e:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:81:16:B8:AE:FE:F9:33:A4:1C:0F:F7:C8:C0:26:11:76:80:A0:7C
            X509v3 Authority Key Identifier:
                keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:24:e0:32:51:87:bb:b3:e4:f2:07:d8:8c:ca:65:ce:63:36:
         44:00:2c:0a:75:dc:d9:34:fa:cb:30:93:f3:e5:00:d1:64:88:
         24:d3:2a:16:86:cf:f6:54:87:b3:51:13:cd:e1:9b:3d:85:a3:
         6c:16:71:6a:18:7d:03:9a:7f:e8:20:39:a8:da:ad:91:0b:be:
         cf:f1:0a:24:95:e2:be:a3:b6:dd:ef:22:43:9d:9a:a7:82:a0:
         42:62:32:ac:33:8d:6d:50:b2:1d:c6:24:ce:30:be:e1:3f:f4:
         1c:dc:e8:b0:e2:3b:a9:b0:10:1c:09:de:11:0b:fc:ba:b9:0a:
         fc:57:5c:8e:84:a2:1a:72:3a:aa:a6:87:32:56:ef:94:37:f0:
         a4:82:ee:07:44:71:78:0f:70:73:52:a5:4e:3c:d3:97:12:14:
         d6:fe:63:6c:d3:58:ca:fe:da:45:8f:85:36:ae:d1:8e:25:a6:
         6d:bf:78:10:2c:ef:fa:2c:e6:5d:27:fb:56:8e:30:79:2c:4a:
         8d:8a:3d:b9:da:39:5e:a5:4d:ae:e7:6d:f2:f2:2b:e2:ff:00:
         8e:83:b4:c8:3c:d9:1f:9a:94:0f:4f:eb:03:66:6d:79:ab:82:
         01:2b:85:ca:2a:76:1e:f5:ba:fc:23:9a:cd:38:37:0b:f6:3a:
         e1:f2:7d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:05:37 2026 by rpki-client