Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File:                     DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier:          S21tAvOwVXXPfvK8By/vaHLAmwx/6MWNJYLS2lnutdE=
Subject key identifier:   51:E1:1C:BA:F0:0E:57:D1:73:AE:B1:9B:6A:35:5C:1D:C9:27:E1:19
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer:       /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial:       019FA3054905EBDDCBE52AB92F20CBBB2623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number:          19D3
Signing time:             Mon 27 Jul 2026 10:01:00 +0000
Manifest this update:     Mon 27 Jul 2026 10:01:00 +0000
Manifest next update:     Tue 28 Jul 2026 10:01:00 +0000
Files and hashes:         1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: C+IZmoP3SB59OBePFCb8VvXhrWMyFp6sRQ0HXxFiaHU=)
                          2: FNGdELpGS2bwEGg4hvaYUE_r1O4.roa (hash: Ei6sBNoGSjj3ahbV1+2LrTjtk8IEn6iFKEC198BdvPQ=)
                          3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
                          4: zdTKCzMNYrD_vxLGScehqegrrJk.roa (hash: Al6OIKoNSWVa63JvchjYlE1VIlKOSAurCVguG0aSQOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:05:49:05:eb:dd:cb:e5:2a:b9:2f:20:cb:bb:26:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
        Validity
            Not Before: Jul 27 10:01:00 2026 GMT
            Not After : Jul 28 10:01:00 2026 GMT
        Subject: CN=51e11cbaf00e57d173aeb19b6a355c1dc927e119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:37:96:23:16:5a:1b:cc:2c:4f:50:bb:86:
                    bc:34:79:31:6b:d3:15:b8:77:c5:f0:ba:73:94:42:
                    15:1f:d3:86:24:dd:4d:69:40:11:f5:56:40:ee:8e:
                    22:e4:43:be:f3:ce:57:2f:e6:0c:a2:c7:c1:42:d2:
                    66:d0:d2:ad:13:60:b2:04:a8:be:a5:5c:e2:69:4e:
                    85:cf:57:a4:85:13:aa:b6:87:d0:13:12:22:60:1d:
                    ef:7a:8d:2c:c1:fa:d8:2c:84:6e:70:c6:57:43:03:
                    ff:be:b4:a4:89:4b:8c:b5:14:11:de:4a:0a:f4:5d:
                    5a:cb:c4:f1:29:e6:92:7e:24:35:3f:0c:63:dc:68:
                    b0:d5:47:da:d0:fb:39:df:2b:fc:4c:3e:30:22:f0:
                    93:2c:87:15:36:15:d0:4e:a5:f7:8c:a4:2a:eb:69:
                    08:cf:47:36:29:70:de:8a:01:0a:8e:f3:f5:fa:3a:
                    01:01:14:57:aa:ad:19:80:f1:6e:5b:e6:dd:6a:3c:
                    64:dd:1c:34:68:96:0d:c5:a1:0b:60:ec:e6:05:a9:
                    1c:ac:12:03:d6:fb:aa:17:9c:63:35:82:c5:7b:60:
                    b1:e2:9d:4d:64:fb:0b:74:77:47:07:86:95:a2:65:
                    90:8a:e2:d2:6f:0d:d8:24:70:3a:ed:4c:84:5e:13:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E1:1C:BA:F0:0E:57:D1:73:AE:B1:9B:6A:35:5C:1D:C9:27:E1:19
            X509v3 Authority Key Identifier:
                keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ae:ea:3e:84:0e:2d:6e:78:a7:60:73:aa:5a:df:af:ba:f0:
         60:7e:6c:c3:38:8b:2d:b8:06:fe:cc:f7:f0:54:27:b9:71:28:
         9e:38:70:64:2b:df:16:ca:0f:07:c9:8e:b0:06:c1:a4:3d:87:
         c0:a4:f7:41:62:d7:92:92:d3:bb:fe:2c:1b:eb:12:41:ed:25:
         04:f2:47:6c:a2:9b:fa:c1:8a:67:0a:ae:9c:af:0e:af:b8:61:
         0d:12:fd:6d:f6:5f:72:d1:d5:ec:2f:cd:0f:dd:af:ba:ca:63:
         fb:a4:59:fd:e0:07:ed:9f:81:85:91:3e:18:a9:54:16:11:4d:
         c7:b1:74:3c:04:fe:3d:66:74:39:07:47:ba:c1:3e:94:e4:ba:
         fd:78:70:24:4d:70:2a:03:28:8a:14:b4:9a:fd:f5:8d:0d:0f:
         77:78:24:2a:fb:7b:9c:e7:9b:97:b8:8b:3e:71:62:99:6b:4c:
         9d:fe:a8:0a:85:28:fb:a9:5c:71:7d:13:1c:fd:c9:5f:0f:83:
         dd:a7:29:b7:2e:9c:f3:3a:24:0e:29:2b:df:c9:a9:d3:84:26:
         d0:1b:be:8b:36:bc:b1:fc:dc:f9:18:f5:04:f1:d4:0e:4d:a0:
         d7:33:8c:4f:25:8b:73:33:90:f3:c0:83:a2:f4:82:96:4f:5b:
         90:b3:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:24:48 2026 by rpki-client