Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File:                     cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier:          N339NbpD27Vf/OoTZ+Dngh2hedDLKhzCaxZ/Qa2L/uI=
Subject key identifier:   B4:8C:9C:84:30:C2:F9:50:54:4D:83:0E:D9:AE:4E:4C:BE:B9:48:22
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer:       /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial:       019F8531D2AEB4DE20BD6714CDB77864696E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number:          096F
Signing time:             Tue 21 Jul 2026 15:01:02 +0000
Manifest this update:     Tue 21 Jul 2026 15:01:02 +0000
Manifest next update:     Wed 22 Jul 2026 15:01:02 +0000
Files and hashes:         1: _T4q5Hpk4ipyTG7AMNyDdoKOT50.roa (hash: Lr+JB8T/f7L7H1ix+TlIyXnba9tt1bZ6qL8/Kz5nqFg=)
                          2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: lwHELMLhgltp08eaNgRM1tpaNB6FVpGMMMfm8IJlFI0=)
                          3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
                          4: ji5uq7lgpZme2h5LP4PpoR1KlXg.roa (hash: KpOwi/Y6b4qR3//I1ROSdvQABJ8PA4YdcglI0GCbEGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:31:d2:ae:b4:de:20:bd:67:14:cd:b7:78:64:69:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
        Validity
            Not Before: Jul 21 15:01:02 2026 GMT
            Not After : Jul 22 15:01:02 2026 GMT
        Subject: CN=b48c9c8430c2f950544d830ed9ae4e4cbeb94822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:11:93:4f:3d:10:3b:55:8e:98:24:88:aa:02:
                    4d:e1:46:53:ce:26:80:ed:8f:6b:64:92:40:f2:f0:
                    99:82:7a:fa:82:d1:df:fb:56:61:a6:ef:ca:10:3d:
                    a9:89:28:45:ad:92:12:d3:7c:15:96:c8:8b:bb:9c:
                    7d:41:0d:75:82:b7:ff:68:72:3f:58:7b:1b:53:91:
                    06:d7:68:2a:02:41:0c:36:93:60:aa:db:b4:48:72:
                    c6:09:5a:e5:32:68:1f:99:ff:52:38:95:37:6a:98:
                    d2:d4:13:fc:c0:4e:bc:36:bf:dc:c7:ee:c2:e5:fa:
                    89:1b:e1:a3:b2:49:b1:43:d6:4c:9c:14:f9:04:75:
                    d4:52:10:86:78:4b:09:a7:46:6f:c8:b2:aa:d4:ee:
                    8b:ac:6a:3f:cd:d4:54:61:27:13:58:47:9c:68:c5:
                    01:22:b5:a9:5d:30:13:34:30:5d:b3:20:b4:d3:b1:
                    94:97:78:98:6a:38:a3:c1:4d:2b:5c:1a:29:7e:ee:
                    2f:57:89:97:b9:dc:61:b9:04:d9:76:0f:cc:76:09:
                    d5:32:e9:a7:42:4f:8c:73:56:18:15:fa:86:ae:80:
                    a7:8f:6c:44:97:f4:e9:ef:3f:11:7f:dc:62:ce:f0:
                    c2:70:f3:93:eb:e0:94:70:a2:76:f9:a5:d2:67:17:
                    c1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8C:9C:84:30:C2:F9:50:54:4D:83:0E:D9:AE:4E:4C:BE:B9:48:22
            X509v3 Authority Key Identifier:
                keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:3a:35:75:51:68:25:98:77:fa:c2:48:2f:80:fa:52:04:c0:
         dc:ff:c7:4c:ca:8a:67:af:ff:45:35:92:c6:0d:8a:db:f9:e1:
         4c:f9:7e:ca:d7:be:a9:a9:df:18:82:33:3c:a6:40:b6:56:40:
         39:2b:03:e1:4b:06:a6:30:e7:91:0c:99:b5:90:ac:e3:7e:55:
         38:ba:d3:6f:e8:7a:cd:0a:11:d8:38:db:f9:45:85:ed:b0:74:
         69:d0:07:be:3d:3f:6b:01:05:80:4a:f4:7a:a2:39:4b:ed:e0:
         b2:9c:62:18:94:ef:e7:11:74:70:c8:c7:ee:2d:92:81:b6:f0:
         16:b8:15:15:ce:dc:51:5f:73:88:0c:bf:20:c4:ce:77:c6:de:
         1b:1e:08:bf:d9:78:cc:83:df:47:af:f4:a0:96:1a:ef:8f:a8:
         1c:b6:72:83:8c:ef:82:bd:78:22:5f:4f:83:83:4a:bf:d9:59:
         fa:2e:85:f1:2d:8a:f3:00:db:24:6d:65:03:0a:49:81:07:4f:
         73:e7:4f:cc:58:8f:77:6f:74:4f:76:68:19:c9:e5:f5:77:d8:
         4e:39:61:94:3b:a1:71:30:36:2c:29:77:c0:fc:93:e8:25:01:
         42:18:2b:69:00:4c:ce:fe:4d:b4:82:01:1e:39:e7:bb:99:31:
         55:43:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:28:16 2026 by rpki-client