Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
File:                     SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft (raw, json)
Hash identifier:          ur5O6FHUxZmu5GLyHCLCmVzOSBqT45QsWWoUM/K0wu4=
Subject key identifier:   F2:FD:40:07:51:CC:04:4F:9C:B5:E6:83:38:10:26:39:27:B7:68:AE
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Certificate issuer:       /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial:       019FA417483DA2C071D35F9984AE53CE3C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
Manifest number:          19D2
Signing time:             Mon 27 Jul 2026 15:00:16 +0000
Manifest this update:     Mon 27 Jul 2026 15:00:16 +0000
Manifest next update:     Tue 28 Jul 2026 15:00:16 +0000
Files and hashes:         1: EQcXmsGZVVYkzBROBdXqoKe1Ndo.roa (hash: nByWMCw0nioYifxgn/+QEUzppUElVTO5RKZgZTpSfek=)
                          2: GOKl_HgtHfM22hM8HA5SESUac7k.roa (hash: 9WYCow1eFtG0OZYI4lYrZV4DtE2HmFDni29YhIkALTY=)
                          3: SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl (hash: /sVpykHZQy0S7m6nbzpwppUzp1Dk7oa9AG0CErN7qqI=)
                          4: yjmhn9zBn-5iLGupIJe7hZRJHEI.roa (hash: mUPbuC6CRqfm+IKqCyjDmA5vrXV/CLfdXuRnH6W/B2M=)
                          5: zseUJgVeCwjihWSVg8qrP6U6zOY.roa (hash: 3GL/igz6eaoQ/qNe14Emh1CvM3j7cI74/xHiIs5bkLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:17:48:3d:a2:c0:71:d3:5f:99:84:ae:53:ce:3c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
        Validity
            Not Before: Jul 27 15:00:16 2026 GMT
            Not After : Jul 28 15:00:16 2026 GMT
        Subject: CN=f2fd400751cc044f9cb5e6833810263927b768ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1e:e4:39:81:47:5d:60:e1:3d:d0:79:6d:49:
                    4d:b2:3d:9c:fa:20:4c:d8:ef:04:c1:31:30:b2:6f:
                    c3:35:25:5c:21:41:76:59:02:3c:14:a7:d9:65:43:
                    bc:02:1e:eb:18:8a:71:ff:ec:a3:18:bd:0f:65:f4:
                    77:2e:bc:09:ff:f2:8a:3d:11:a5:74:1c:b9:4f:d4:
                    91:b4:63:96:70:b7:8b:ff:52:fa:26:c8:8c:3a:41:
                    b5:5b:d5:f9:9d:f7:7a:d3:fa:a3:1d:47:d5:9e:0a:
                    a0:3e:85:0e:16:66:40:bb:76:9a:e6:9e:cf:64:cc:
                    cc:ce:ce:6c:bd:d1:14:14:b6:8a:35:9e:92:31:cc:
                    f2:be:4f:01:1a:1d:e5:14:d8:23:fd:1a:de:77:94:
                    be:5f:10:0f:58:99:76:b1:2b:58:27:81:ec:56:dd:
                    d0:23:e1:14:2a:be:55:44:80:76:cf:5c:76:19:f9:
                    0b:6a:2c:c8:77:98:b7:35:3d:af:56:42:bd:c4:91:
                    96:af:5a:9b:3b:21:d4:61:be:1c:f3:14:75:d6:b3:
                    99:6d:3b:a3:7c:3a:73:62:cb:1b:e1:43:96:06:c8:
                    e8:eb:2d:2b:e9:86:ab:09:12:0e:c8:ef:0c:b1:b3:
                    b6:a8:4c:86:3e:b8:fe:63:73:7a:fe:cc:cb:ea:87:
                    70:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FD:40:07:51:CC:04:4F:9C:B5:E6:83:38:10:26:39:27:B7:68:AE
            X509v3 Authority Key Identifier:
                keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:cc:3e:95:0d:c8:b8:f4:86:43:02:68:63:2a:61:a8:f7:
         0b:de:91:36:ec:ae:78:da:6a:b4:0b:12:47:b3:de:42:5f:6b:
         32:4a:71:87:3c:5a:b4:68:9e:4c:e1:02:ea:25:ce:51:74:02:
         d5:9d:0a:87:ed:85:05:35:6f:37:b4:b6:79:05:0d:ce:b3:6e:
         7b:dc:b0:f3:ab:39:49:10:02:8a:90:a8:be:67:31:01:cd:db:
         90:c3:3b:f2:59:2a:fa:9f:9b:c1:d0:75:e1:8d:cd:7c:cf:87:
         80:ac:b1:3d:ee:88:10:ca:08:ea:1f:e9:e6:63:1e:c7:73:4d:
         51:76:f1:6e:e9:fc:15:53:a1:7a:f7:cc:23:b2:62:46:b3:fa:
         47:65:5e:2a:d1:ef:76:88:4b:f2:2e:70:e0:6b:34:8f:ad:0a:
         f6:2c:b5:24:7a:2a:20:85:96:54:cd:ad:ac:0b:00:54:de:fe:
         d8:3e:2f:8b:56:e7:8c:a6:9e:c9:ff:8b:f1:41:1b:3d:9f:9b:
         c7:49:d0:96:c3:23:28:7d:9c:b3:f0:97:17:42:43:3f:19:b1:
         ad:f9:10:17:9a:9d:a7:48:40:ba:56:41:8f:46:ec:80:0a:b8:
         dd:09:f3:8b:42:d7:66:c6:d7:69:94:67:ea:e0:22:5b:45:32:
         ce:52:5d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 21:40:25 2026 by rpki-client