Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
File:                     mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json)
Hash identifier:          7MSE7P1UsswTp6ztmtGeW96zGWLQY1ZBFM1P4FU23Yw=
Subject key identifier:   95:02:8D:39:E2:72:84:FE:C2:CB:FD:8C:74:77:D5:DE:CA:B6:1F:10
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Certificate issuer:       /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial:       019FAC3F23E7915AABF78A7D942A54067054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
Manifest number:          19D4
Signing time:             Wed 29 Jul 2026 05:00:46 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:46 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:46 +0000
Files and hashes:         1: celudLIkwqQs5BVcabVek4AUA_8.roa (hash: Z6ja4JJYaOm0UOAS7DT4QbK0buCK6md62bjvBxBcr0o=)
                          2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: frI/T3uiM0sKqQ6iMBmq5HFnAf6/efPUm1RIJgVR9SU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:23:e7:91:5a:ab:f7:8a:7d:94:2a:54:06:70:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
        Validity
            Not Before: Jul 29 05:00:46 2026 GMT
            Not After : Jul 30 05:00:46 2026 GMT
        Subject: CN=95028d39e27284fec2cbfd8c7477d5decab61f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:d4:65:d6:37:a5:92:5c:a4:ed:29:aa:a4:
                    84:1b:98:7c:7a:a9:5a:a4:35:f2:47:9f:27:25:1e:
                    47:78:c0:d1:23:44:b2:4a:fa:33:fb:db:67:e5:a2:
                    76:09:3e:4b:6c:d2:6b:53:b4:b9:e5:6a:13:07:97:
                    8b:32:24:06:d4:52:ea:7b:e7:6a:28:db:dd:b8:96:
                    38:e4:1a:2c:cf:c8:d2:21:ce:05:00:6e:0f:0d:89:
                    a1:8d:dc:eb:f6:6f:75:cd:3a:83:e6:4c:d5:c1:d1:
                    40:9e:5e:6a:0d:f1:32:a1:ca:34:5b:27:5a:ec:28:
                    8c:7b:12:4b:2d:a0:0e:21:f2:35:4b:61:90:20:3f:
                    95:b0:0e:85:9c:73:15:54:be:73:b2:f9:19:4d:d3:
                    b0:44:5b:88:68:3c:c5:0a:9b:14:7b:db:b6:bf:f3:
                    fa:46:b6:6e:05:52:36:12:c5:a0:5a:0c:61:0f:88:
                    fb:50:6c:25:86:69:a1:e0:de:99:84:64:38:61:73:
                    d1:71:fd:ad:92:53:9e:69:d9:ee:f6:4b:33:25:e8:
                    4e:90:ec:54:d5:5c:a0:45:74:f1:39:58:72:75:13:
                    5f:e0:62:e8:fb:da:0c:b2:0a:53:3b:5f:f5:91:d7:
                    91:6d:07:0c:e7:98:43:ad:27:4b:64:58:86:dd:2f:
                    b4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:02:8D:39:E2:72:84:FE:C2:CB:FD:8C:74:77:D5:DE:CA:B6:1F:10
            X509v3 Authority Key Identifier:
                keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2c:ba:33:3d:8d:c4:8d:b9:35:31:4a:48:04:c7:4c:17:b7:
         dd:25:ad:3e:67:e6:46:3f:f6:e0:9c:40:12:ef:3e:01:be:be:
         6a:f7:6f:44:d9:e1:02:4f:81:fd:63:d9:01:3b:d5:97:d9:3f:
         44:41:2e:42:b8:ad:19:87:8d:d6:d5:76:3a:c6:4b:41:4b:07:
         eb:27:58:76:e2:2c:f4:72:01:33:77:19:63:b6:59:10:29:90:
         59:34:78:f8:08:1c:b0:a9:91:a8:cc:b5:f0:a8:1e:9a:61:26:
         42:37:6d:b6:a8:3e:cd:2d:3d:e3:b6:6f:79:91:a2:0f:8c:5c:
         78:f7:68:17:2f:30:d3:e8:77:b5:fa:d4:e4:94:ef:e8:82:ce:
         3e:83:b8:99:ae:43:f4:f0:1d:a5:db:07:06:b9:e7:6c:00:bc:
         ce:9d:2e:4a:f5:14:16:04:bb:4a:86:df:b7:15:0e:7d:6f:0e:
         d7:56:0c:c1:b6:af:71:c4:70:c9:68:fa:03:0c:13:82:af:65:
         bb:5b:0f:40:00:e8:74:c2:4d:fa:ef:25:af:2c:ad:30:49:8f:
         00:cf:87:70:bb:fa:d3:d3:26:94:72:c3:cb:2c:fe:73:9f:4f:
         52:d8:b2:db:db:74:4e:c8:0f:af:de:5a:2d:b2:64:52:eb:b2:
         a7:ae:2e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:53:08 2026 by rpki-client