Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
File:                     wZ91slk8orGwpf0MVAFd4wbEfuY.mft (raw, json)
Hash identifier:          AanKFOVPbYaeyJLiBm2L9HkLmmMRi07j4UAuAEcbUBg=
Subject key identifier:   12:E2:FF:90:4B:E7:33:84:61:A2:A9:6C:0E:62:DD:3C:18:69:12:6B
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Certificate issuer:       /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial:       019FA305842C2BAED3817A8FB4B4109DF8EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
Manifest number:          19DB
Signing time:             Mon 27 Jul 2026 10:01:15 +0000
Manifest this update:     Mon 27 Jul 2026 10:01:15 +0000
Manifest next update:     Tue 28 Jul 2026 10:01:15 +0000
Files and hashes:         1: Dsjm5lEJ-mNO_tD0Cpd2DuOIRbQ.roa (hash: Bmyti0ynns0DSd3t3OVqpc7WopgOOQGAXnl/+74Jywk=)
                          2: FoYyMk5nn_mx43Eqm4w9S-GFiOo.asa (hash: tIjIVbBkyqnMiqD5rmUgC1pkH2WtDxCN/8HGaRwdDA0=)
                          3: c0Jzt3bIEhRRa4PKEVY4MtsUsds.asa (hash: gGqMQoDe6c9sXdZ7ZcSzgdriRo31EV4kvGW39wn8ulc=)
                          4: o1AmIopz9q4zRTmrcoM47cDuCHY.roa (hash: LYe2LtBXErpEaI3qCk1VoxCUPxgfpnC7P/suMsnuTlY=)
                          5: wZ91slk8orGwpf0MVAFd4wbEfuY.crl (hash: +gWMxY1L9Mtdb6kvMC31+aaB/Em/rMc1ao9h9A3YtOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:05:84:2c:2b:ae:d3:81:7a:8f:b4:b4:10:9d:f8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
        Validity
            Not Before: Jul 27 10:01:15 2026 GMT
            Not After : Jul 28 10:01:15 2026 GMT
        Subject: CN=12e2ff904be7338461a2a96c0e62dd3c1869126b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:f7:32:2f:91:14:4a:e7:da:4e:98:e4:00:
                    b0:b6:11:c1:7b:cc:cf:4d:9d:72:8b:40:21:82:3f:
                    13:04:69:4d:7a:5b:cb:d9:3a:87:98:29:92:e3:ac:
                    83:b6:76:7e:44:09:e0:72:7b:4a:da:76:d4:7c:17:
                    55:2b:55:d9:e2:22:8d:df:12:81:a8:72:07:74:d7:
                    49:a3:07:33:7e:32:57:24:c1:91:a4:34:b8:81:67:
                    25:8c:db:bf:f2:46:f6:13:c7:77:d3:0d:44:0d:c0:
                    63:3c:a3:67:95:e8:50:78:e6:82:2b:20:81:86:1a:
                    ac:1b:87:cd:a3:03:24:0c:c5:4b:ea:06:b6:23:6f:
                    be:b6:7f:bb:76:b4:91:a0:7b:7f:e3:65:ac:ab:85:
                    7d:f1:74:f5:8a:cb:52:1b:f4:b8:fd:36:a2:4d:67:
                    96:d2:fb:95:60:ac:07:2e:1d:ad:08:65:d0:17:b6:
                    90:4a:ba:1b:d8:f9:c1:28:30:78:7c:8b:c6:de:9f:
                    c3:ed:e3:42:ec:33:4a:53:75:b5:2c:c5:aa:5f:c2:
                    bc:8d:e9:da:cc:89:2d:c4:35:e9:ee:17:0d:c2:51:
                    2f:9a:24:f1:b6:2d:4d:7f:8c:b1:e6:47:eb:75:8c:
                    be:b9:08:11:1b:6b:e7:c7:ff:8a:56:a9:f3:a6:ec:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E2:FF:90:4B:E7:33:84:61:A2:A9:6C:0E:62:DD:3C:18:69:12:6B
            X509v3 Authority Key Identifier:
                keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9d:25:cb:c8:c4:6e:2e:57:65:02:95:cc:9a:2e:56:12:a2:
         96:1d:77:f3:e8:93:6a:4a:16:5d:99:02:2e:44:7e:05:65:7f:
         a2:0a:1c:c1:3a:2f:83:89:ff:73:75:d9:d5:ea:ea:11:24:e4:
         c9:b3:a4:a3:45:a2:31:9a:c7:da:ea:d1:42:41:b7:ce:d2:1f:
         ee:b7:11:2e:7a:26:94:01:38:5e:5c:60:14:88:80:7d:06:f4:
         c5:e0:ce:1b:66:ab:c8:45:98:bf:ce:49:9c:b9:16:9c:24:a3:
         3f:a5:ed:6f:37:05:1a:99:08:75:98:41:69:22:a8:3e:6f:ac:
         06:4a:f1:e3:10:48:15:61:49:f2:69:e9:c9:a3:cc:68:e6:cf:
         d3:db:6b:67:e4:56:dd:8a:b3:31:c6:2f:ac:d7:b9:de:c6:e0:
         c0:c5:15:64:fd:61:55:66:35:a1:04:15:0c:e1:16:84:ac:5c:
         be:36:11:0f:56:b9:a4:9e:39:ad:e1:2d:39:9f:e0:c2:ff:3d:
         9c:83:53:18:75:bc:0c:34:da:41:5b:51:49:16:71:55:4f:28:
         79:f4:b1:49:61:d0:d2:fd:ce:71:f2:1f:e0:93:fe:78:e5:f2:
         6a:c9:88:ab:76:a4:f0:5e:89:d0:93:2c:54:bf:82:24:7b:8a:
         9e:86:af:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:57:41 2026 by rpki-client