Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File:                     4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier:          kBWQxIntAepZJaWQ2jyhdkRrEqtlCRUyhsLySRvdwAo=
Subject key identifier:   34:67:38:BC:D1:6B:3F:2E:35:4A:2C:35:BC:90:22:81:11:6F:46:31
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer:       /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial:       019FA0A86B5077345D754514FFB1B1AE0F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number:          19D8
Signing time:             Sun 26 Jul 2026 23:00:19 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:19 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:19 +0000
Files and hashes:         1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: JLyqwLblxGqe44owzohJJWdtHNEaVjZWsC04Y+OdTII=)
                          2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=)
                          3: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=)
                          4: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=)
                          5: mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa (hash: CKUhSDm/qBK/JCbTgbEQJEgA0HKSbKEajcNdo2qCwys=)
                          6: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=)
                          7: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:6b:50:77:34:5d:75:45:14:ff:b1:b1:ae:0f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
        Validity
            Not Before: Jul 26 23:00:19 2026 GMT
            Not After : Jul 27 23:00:19 2026 GMT
        Subject: CN=346738bcd16b3f2e354a2c35bc902281116f4631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:69:97:19:2f:23:40:0a:b9:f4:20:61:b3:
                    72:d1:8d:3b:5a:fb:6e:a5:b3:32:2f:d8:f8:d8:1a:
                    3e:6e:89:fb:93:9c:e1:8c:e0:77:82:7b:f7:d9:20:
                    4f:84:73:1a:41:83:82:8e:b0:af:bf:be:5b:c0:e1:
                    82:d8:fb:c5:88:3e:e6:fd:33:99:77:ac:0d:db:92:
                    17:a7:91:1d:55:9d:55:8d:1e:48:96:be:e6:06:61:
                    db:e3:6d:26:2a:1a:f7:ef:49:73:be:02:8f:e2:02:
                    b6:b2:d3:52:87:06:cb:55:2c:81:0b:ac:3a:c9:c2:
                    79:53:85:e2:bf:da:05:07:3a:cc:14:61:2d:65:cb:
                    6e:fb:72:00:de:79:cf:80:08:6d:9e:05:e7:51:b5:
                    61:c8:8f:dc:9f:9f:22:c4:4c:77:c9:01:ab:c1:2b:
                    f5:15:a0:64:e6:a6:15:21:c5:a7:cc:92:fa:f1:6c:
                    7a:7f:bb:a1:e7:20:15:6f:7e:68:a3:eb:41:e2:57:
                    60:5d:c0:f1:c0:8d:09:e5:03:eb:57:09:66:35:ee:
                    b7:0a:a8:a9:14:cb:d0:62:d6:0a:7b:1e:ee:6c:0d:
                    99:91:85:cd:ea:2e:b4:8a:2c:56:9c:fd:38:94:b8:
                    57:1e:ef:59:ba:43:a4:1f:85:ee:b8:9c:4b:38:5a:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:67:38:BC:D1:6B:3F:2E:35:4A:2C:35:BC:90:22:81:11:6F:46:31
            X509v3 Authority Key Identifier:
                keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:b8:51:fa:78:ab:1c:5c:7c:76:c3:78:90:70:77:e4:7a:
         02:d4:e6:f1:0d:cc:b6:de:71:b2:5a:7d:cc:8f:9f:ac:32:bc:
         ba:15:d7:d2:da:bd:c0:59:ec:43:ef:58:e5:d1:7e:ed:89:af:
         b8:0b:3e:f9:16:19:8b:4a:7e:f1:b3:73:8a:67:ee:53:79:b9:
         f0:f3:d3:f1:2e:ac:fb:0b:de:19:91:65:04:6d:42:54:1b:58:
         b6:19:2b:bf:d1:f1:c9:e3:15:a6:30:81:b6:15:28:41:da:3c:
         cf:6b:0e:64:69:d5:4f:ef:e0:90:a0:16:0a:14:8e:16:7a:50:
         b8:a5:05:75:05:a7:2e:8d:95:ad:bc:06:c9:43:e9:ba:c4:94:
         6c:77:83:09:f4:c6:1b:5b:12:ce:d8:44:07:b7:ff:3d:f9:cc:
         95:64:2e:1e:78:ab:1f:aa:c0:83:66:2d:ac:db:54:66:ed:fb:
         d1:cd:2b:76:10:cf:2f:d9:ae:d4:42:a9:d5:d2:d3:d4:d0:56:
         b6:d7:22:ca:70:00:53:c5:f2:ed:85:08:c1:4d:61:aa:c7:36:
         37:57:8d:e1:28:de:0c:a6:8d:5d:c2:bc:a0:ab:0d:89:22:cc:
         c1:41:8c:c0:a4:59:14:c2:85:4c:e0:da:5e:1a:0b:34:e4:06:
         bd:44:57:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:05 2026 by rpki-client