Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          bQFPvrrgA0wFYybfJJtDuzaZt/qXzFe6uWhfawfXAtE=
Subject key identifier:   C9:74:42:30:A2:BA:AD:6D:E0:A5:C5:53:2E:F2:97:40:8B:08:C1:A5
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       019FA93DB39ADFCF0C362D8331DE5A7965F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          189D
Signing time:             Tue 28 Jul 2026 15:00:20 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:20 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:20 +0000
Files and hashes:         1: 5A_9S0_k2z9CIFI_8Yk78IZDaEI.roa (hash: nmz/iYmV6mKVOLZrYAox5VaizjrAFHQfQwQAyHHQgTM=)
                          2: Axc_E2xRyuIueu7MxwSrAbNKRdM.roa (hash: BDjOOm0VSjHKXhROcrzw3kdn2+1ifBZy1hpq2pHuv2A=)
                          3: PaurkzffyErdpNi4ejYNr7FnWdc.roa (hash: jPNQ7UykvWYwuvPZ1rpjnsZHusFbctpC3HqhplZrHe4=)
                          4: Uryh4fThyDLMPt3qMbkDETFPkjs.roa (hash: /xcRZ3cub7ymv3GtgsooN/HcmqZzVT8RJVzKbGyx/dQ=)
                          5: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: ajowjXx5a2Ij2JBx2B4B/pGdicon1EsWPHAUCNrS/w0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:b3:9a:df:cf:0c:36:2d:83:31:de:5a:79:65:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Jul 28 15:00:20 2026 GMT
            Not After : Jul 29 15:00:20 2026 GMT
        Subject: CN=c9744230a2baad6de0a5c5532ef297408b08c1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:92:c5:70:95:32:95:ae:76:21:0c:64:2f:
                    4e:cd:ab:a0:5a:a8:48:44:f6:4f:7b:72:5d:06:88:
                    1d:33:b9:50:c3:40:c1:07:21:ff:c8:d1:46:8d:dd:
                    e7:57:cc:0b:33:db:88:3f:27:52:c5:4c:15:ae:d4:
                    48:5f:55:56:72:5d:f5:13:d7:e9:08:e6:fe:39:64:
                    2d:57:1c:f8:f9:5e:7a:53:6c:73:c5:af:cd:be:3b:
                    4f:1b:c3:e4:6e:e9:11:34:f3:ae:77:7e:ef:b8:d6:
                    99:56:33:46:ee:b2:c0:b1:89:be:1b:97:06:4e:a2:
                    64:3d:e1:b1:22:25:51:da:5d:09:d7:68:44:b5:07:
                    18:5b:48:43:72:cf:8c:13:c9:62:65:b2:63:17:f6:
                    b4:2f:a5:cf:15:e3:37:b3:57:d4:c1:13:16:fb:bf:
                    5c:92:b7:c7:cd:2a:8d:20:0d:d7:98:d1:63:45:d3:
                    b3:40:8f:9b:b2:c6:c4:a4:4b:c1:44:46:2c:4d:b6:
                    62:2d:aa:19:e2:5a:da:fd:5e:9c:35:cf:47:c4:de:
                    86:96:0c:71:a4:6d:4b:9f:05:aa:b9:86:75:fd:f8:
                    c9:21:40:84:7d:24:e2:d8:d1:aa:93:1e:7b:32:b2:
                    bd:f2:0a:29:32:16:fa:72:b2:74:fc:9a:da:e3:14:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:74:42:30:A2:BA:AD:6D:E0:A5:C5:53:2E:F2:97:40:8B:08:C1:A5
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b8:86:da:e1:03:09:9a:ec:8a:19:47:c5:50:8c:2f:fa:47:
         83:24:e8:80:36:0d:99:e2:34:72:5a:54:81:5e:0c:8b:79:74:
         61:25:3b:c3:8d:ce:57:2f:67:20:ea:4f:fa:30:85:13:bc:52:
         63:44:b3:43:aa:5a:4e:5a:4e:12:ab:5e:69:e6:70:6b:f7:54:
         8f:f5:a1:25:ac:09:12:5d:e0:ef:31:f5:ee:78:8a:91:66:61:
         3a:48:18:69:9b:c3:ed:18:b6:4f:f9:01:87:a7:26:fb:1a:62:
         dd:32:37:0e:77:41:35:97:1f:db:d1:e9:9c:b0:78:93:eb:60:
         f6:d4:19:ff:10:77:d9:12:82:69:d8:1c:37:86:98:9b:6a:f9:
         4d:21:01:63:81:aa:66:be:c8:eb:d0:57:38:6a:59:1d:76:08:
         84:3c:a8:17:42:9b:c9:30:75:bf:b7:ae:9f:40:08:70:b5:4b:
         5f:63:27:e3:ec:c2:e1:98:8c:99:0c:a2:cd:73:24:a0:d1:17:
         cf:1f:6a:b2:22:81:e1:fe:61:03:e9:d0:e8:42:3c:ab:fb:18:
         e2:4d:1c:d8:f1:a2:89:7a:48:5e:ef:d4:6d:ca:a6:96:6b:fa:
         c5:f5:fb:f9:3f:50:3f:4d:e3:28:af:a6:a3:df:02:38:47:3f:
         93:43:b9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:58:13 2026 by rpki-client