Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
File:                     W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json)
Hash identifier:          pfHpa9zbScjAsREjE0xWABKGoAbiNik5jj4RFLieeAQ=
Subject key identifier:   6D:CA:11:10:A4:61:96:74:78:9F:94:E3:89:5A:FB:41:AB:4F:27:75
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Certificate issuer:       /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial:       019FA44F41DAE9116D6FD7EB3541C6B39E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
Manifest number:          19D1
Signing time:             Mon 27 Jul 2026 16:01:25 +0000
Manifest this update:     Mon 27 Jul 2026 16:01:25 +0000
Manifest next update:     Tue 28 Jul 2026 16:01:25 +0000
Files and hashes:         1: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: 5fuz76iPvR4t6lxi4AB46qeJpc7rz85a64uuvCZ7V+I=)
                          2: y5dSGThy3CbU6qNsZJXz6GjosIQ.roa (hash: 1sAH2jAfu08ukseLTG+XyL0AYKo9iWcn/0uV+h9Djr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:4f:41:da:e9:11:6d:6f:d7:eb:35:41:c6:b3:9e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
        Validity
            Not Before: Jul 27 16:01:25 2026 GMT
            Not After : Jul 28 16:01:25 2026 GMT
        Subject: CN=6dca1110a4619674789f94e3895afb41ab4f2775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:83:62:cb:68:18:da:a3:0e:15:db:c8:44:d3:
                    f4:7d:6d:b9:12:f6:c1:f1:19:d7:4d:f9:77:d4:a6:
                    d6:4a:92:51:85:11:ac:80:a7:47:4f:14:7f:51:cd:
                    12:7d:e4:c0:27:0a:68:25:4a:41:ee:09:78:ab:26:
                    73:64:54:90:ea:38:5d:f8:c2:ac:ed:65:6b:ff:28:
                    ee:1e:f7:0a:2f:6b:00:bd:31:a4:a6:e1:83:b9:9b:
                    de:49:00:f9:63:f8:00:ed:e1:f6:fa:fb:b3:a3:3e:
                    ae:4a:ee:bd:53:91:41:32:98:df:4f:f1:5f:f7:ef:
                    49:79:cd:c1:45:85:ee:f3:72:9a:92:f8:11:46:ce:
                    f0:6d:b1:1d:04:da:cc:dc:3d:5b:d8:63:f3:43:ad:
                    ee:50:42:1f:ac:b4:57:4a:f1:98:32:17:d7:42:44:
                    e4:60:ab:e2:24:03:08:f3:af:5b:e9:ea:57:0c:c5:
                    80:17:73:28:8f:1b:63:6c:f6:12:43:6a:89:a9:84:
                    45:6a:2d:79:14:ba:82:dd:e2:d6:01:2e:c5:93:00:
                    54:62:56:28:59:13:af:8d:37:f2:78:be:d2:df:45:
                    59:39:16:d8:fe:7c:03:e4:8f:97:b1:14:8f:fe:45:
                    5d:02:2b:49:5d:63:d5:1c:ad:66:4d:8f:fb:13:44:
                    20:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CA:11:10:A4:61:96:74:78:9F:94:E3:89:5A:FB:41:AB:4F:27:75
            X509v3 Authority Key Identifier:
                keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:85:92:d3:58:8b:67:6d:a7:ad:de:28:85:d3:aa:dd:63:79:
         7f:6a:9e:6d:d2:26:4d:59:6d:bd:de:95:e3:0f:a1:61:4b:f4:
         ce:cc:60:2c:ad:f1:02:24:29:bc:84:83:e5:ae:af:b4:ec:e3:
         87:a2:91:62:fd:ea:1d:4b:7e:33:2f:54:31:c3:d8:31:ef:4c:
         02:34:f7:6b:eb:3b:70:55:af:78:0e:2b:9e:bc:e9:10:19:82:
         1c:65:10:b8:eb:49:8d:ab:45:ff:a6:6d:ef:5b:20:47:b6:9f:
         60:98:f7:42:a5:6b:4c:89:9c:1b:71:7e:97:ff:39:d6:7d:05:
         2a:4f:9d:02:dd:c3:04:4f:1f:32:d4:aa:14:9f:7d:69:4a:7e:
         c9:68:19:8c:b2:b0:e1:3c:ec:e7:9c:75:8e:e2:b9:cb:77:ad:
         4a:01:ad:01:03:aa:bb:fc:09:c8:b9:b2:e3:3f:0d:8d:f9:61:
         c7:0e:65:c0:af:dd:fd:58:f2:46:e2:46:6c:1f:32:37:2b:48:
         02:0c:79:07:16:51:70:4f:60:2e:28:5a:f8:24:12:3f:d3:f6:
         65:c0:be:09:62:fa:a9:97:0c:51:49:c9:d7:ed:7e:2e:8a:05:
         12:16:4c:51:66:41:d5:77:dc:2b:f2:1c:30:c0:bb:c1:6c:eb:
         f8:80:54:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:24:55 2026 by rpki-client