Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
File:                     wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft (raw, json)
Hash identifier:          dJA/8y0ARPtKrMyWmsHE2gsc8tjkJ/09cjClmeto9+Q=
Subject key identifier:   F4:3C:AC:D8:F7:14:50:17:09:8E:A0:27:53:BC:F8:AF:D1:21:A8:FB
Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
Certificate issuer:       /CN=c13f17541732f57abff1294c71b533eb56746fd6
Certificate serial:       019FA18482E3F8B73081F4CF8925A2B3A347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
Manifest number:          19D1
Signing time:             Mon 27 Jul 2026 03:00:43 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:43 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:43 +0000
Files and hashes:         1: vHJ3_tVkd2GdWkqS4nCb67yzeNU.roa (hash: F8siYYIOWBqcJc18xZZBvTPob2dHLHgiU0/yM3ixtco=)
                          2: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl (hash: cQLzyoeN7NqfaeST1Cs/Knu/QA+57Y27XY2kP/bN9sw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:82:e3:f8:b7:30:81:f4:cf:89:25:a2:b3:a3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6
        Validity
            Not Before: Jul 27 03:00:43 2026 GMT
            Not After : Jul 28 03:00:43 2026 GMT
        Subject: CN=f43cacd8f7145017098ea02753bcf8afd121a8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:ce:f1:8a:47:15:c3:c5:6a:74:f0:8b:fa:
                    64:38:8a:9d:ea:ec:b4:05:f2:41:e9:38:19:ef:f2:
                    5b:6e:54:30:ac:e2:7d:4a:e4:57:be:ea:da:12:75:
                    5b:93:ad:f0:8a:83:01:89:00:eb:b0:3e:14:eb:43:
                    30:27:56:cb:30:90:a5:ac:95:59:07:da:dc:42:02:
                    85:42:7d:70:51:6c:a1:c9:21:3d:09:fa:e8:e3:51:
                    00:f9:c8:3d:e8:6b:14:36:16:b7:97:94:4d:08:78:
                    51:a5:b4:42:cd:b7:b6:ea:1c:ff:c9:82:f2:47:a2:
                    07:a2:5b:be:a9:1c:66:55:cb:25:d0:80:86:90:47:
                    bf:63:79:be:90:31:73:db:fd:4e:95:3c:46:85:10:
                    16:99:86:b1:93:f0:10:83:d7:fc:35:87:6b:03:6a:
                    17:6a:14:42:36:e6:c0:13:b0:3a:1c:13:2c:57:fb:
                    5c:0e:73:da:bb:2d:41:89:29:93:ee:75:b2:7c:74:
                    60:4e:4f:3f:61:6a:6e:d0:72:cd:76:af:51:98:3d:
                    a2:2a:74:d9:a1:bd:c7:cc:04:d3:e1:6d:0f:e9:68:
                    0b:eb:b2:46:6b:d0:86:f8:22:82:43:64:97:75:a4:
                    80:e3:ea:47:68:c5:e8:50:fb:3f:92:3d:c1:4b:ab:
                    4f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3C:AC:D8:F7:14:50:17:09:8E:A0:27:53:BC:F8:AF:D1:21:A8:FB
            X509v3 Authority Key Identifier:
                keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b4:09:27:82:cf:ff:bf:ff:60:f6:2d:2e:d0:dc:de:74:f3:
         ea:9f:4d:cc:6a:83:cc:f2:5f:2c:3b:ba:eb:dc:99:12:d5:63:
         64:68:eb:f1:26:45:f7:3b:d7:06:3b:6d:f7:d2:41:9e:00:71:
         8a:1d:27:62:4a:ea:6f:13:73:21:5a:be:a1:ee:84:1f:94:e4:
         e8:12:ea:6a:65:72:0c:44:4c:2c:1f:93:ab:5b:b4:e5:67:7e:
         a5:9e:7c:c0:d5:a4:f0:e8:a0:a5:41:2f:3e:b2:16:66:b9:74:
         b7:75:06:f5:24:79:65:e5:2b:f7:39:26:cb:39:4d:74:0d:14:
         9a:d6:e2:7f:ce:9b:29:db:d2:34:ed:64:69:c6:ca:b2:a7:8b:
         8f:b2:77:44:3e:3e:eb:e7:aa:6a:16:78:ab:c6:2b:76:41:73:
         bc:93:0c:47:85:0f:ab:f8:0e:bf:eb:4e:6e:e0:62:c3:18:aa:
         48:77:c2:f8:7a:56:6d:7e:96:36:53:21:6e:2c:f0:d6:5c:bf:
         ca:8e:e5:56:db:28:46:84:f6:55:b5:b8:ce:f3:9c:a2:91:5e:
         f5:c7:e6:db:f5:26:52:45:13:b3:09:02:cc:32:d5:75:27:cc:
         ec:b2:3f:34:86:01:8f:cc:6e:c1:61:42:13:05:da:9b:de:dd:
         24:bf:15:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:01:15 2026 by rpki-client