Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File:                     rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier:          7Lso/93KakfEZKVHoVJ8ynFN6iBjBnkvqqPZkmESjCc=
Subject key identifier:   98:EA:1C:07:9C:48:54:97:54:B1:EE:B7:39:D0:64:1D:58:A9:83:48
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer:       /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial:       019FA9AC2B0F5480AE43B7AC9DE49AEE19F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 17:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:00 +0000
Files and hashes:         1: 1cRlTVeHuriEMSuZag34rfiSKZQ.roa (hash: OlYfnvQCajHgPtwJVq37KeK/wVE1TX6e1PHAiHTVPas=)
                          2: 2pok9xJkRmV7G5KjO3Ssd6tFcqw.roa (hash: KoLqQThDszC4VMDHG0N47iFOrNC8BwC1qVShpNw7N6s=)
                          3: JyOMnJgKMoFcNN43M_f5LI8XErA.roa (hash: SNoMZNzmCYdIoiwDjZbbibJBXJA6CdM7GlaPizZt3KQ=)
                          4: aa2Z_aSbNPyZ2UsmfSQtTJhHn_4.roa (hash: FtDK49Ysh1r9A0NZdb70mTg5pImu9NrACPcmS/OHayk=)
                          5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: skgjBJfKQfmHIAL1V5lwvbjfxjp+eTYXRY6I6PGRrJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:2b:0f:54:80:ae:43:b7:ac:9d:e4:9a:ee:19:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
        Validity
            Not Before: Jul 28 17:01:00 2026 GMT
            Not After : Jul 29 17:01:00 2026 GMT
        Subject: CN=98ea1c079c48549754b1eeb739d0641d58a98348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0f:f3:6b:d1:5e:c6:8b:a6:c5:c6:78:58:78:
                    da:ea:38:87:c6:9e:f2:bb:de:13:49:4a:22:19:6d:
                    c5:7b:fe:61:3a:d8:a5:29:58:14:ae:87:3c:3c:af:
                    1a:c1:1f:c6:04:8d:08:05:3b:2d:ce:8a:b4:17:b6:
                    a7:87:da:c2:4f:62:31:4d:2e:1d:82:44:79:33:e4:
                    19:b7:c9:53:5e:18:f1:e5:6f:5b:e6:0f:54:fd:bf:
                    8d:d6:72:bc:cb:9a:3a:7f:0e:9f:51:4a:aa:a2:71:
                    87:5b:a6:bb:4c:50:d8:b7:3c:5d:92:fb:9b:6a:9b:
                    c2:5a:d8:56:97:97:42:a3:de:55:59:d3:03:c0:09:
                    30:53:18:14:06:27:99:d9:0d:1a:a5:7e:a7:65:37:
                    1b:ca:45:ce:aa:63:70:b2:9e:cd:2f:3d:22:f7:e2:
                    b5:cb:70:c1:ed:48:bd:b0:8c:4c:f0:fe:30:91:3f:
                    3a:9d:1a:a8:03:dc:dd:0d:35:15:6b:7b:c8:f6:13:
                    6e:41:c6:ce:49:da:57:d1:52:e6:03:86:86:7c:bd:
                    5a:48:1b:4a:f4:4e:01:08:1f:7a:0a:48:fa:48:60:
                    2a:0f:3b:d5:8b:57:f7:30:db:a9:e6:79:ee:17:2b:
                    42:71:af:93:33:a8:fb:9b:a4:6d:0c:d6:a5:d6:31:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EA:1C:07:9C:48:54:97:54:B1:EE:B7:39:D0:64:1D:58:A9:83:48
            X509v3 Authority Key Identifier:
                keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d7:9c:47:6c:e2:fa:de:a1:f8:96:58:fd:3d:25:85:ec:32:
         99:0a:5c:f3:52:bb:dd:94:0b:19:24:41:b9:22:68:ce:55:89:
         ea:44:1e:6e:1b:1e:51:4f:2d:e7:e5:41:77:36:31:7f:65:90:
         d6:be:9e:8b:58:2d:e1:af:ae:2c:99:39:16:59:47:35:26:02:
         19:27:4d:cf:84:6f:bf:f4:43:cb:f4:57:76:de:a6:d1:b8:08:
         2c:ff:2a:05:36:c7:4f:4a:25:a1:57:21:56:13:b1:71:26:fb:
         00:d4:f5:21:cd:5b:49:5e:d4:54:ba:6e:de:92:ba:81:f7:11:
         c0:f9:15:51:10:ac:18:3c:12:8e:53:62:fb:b6:26:48:97:8c:
         cd:93:90:22:ce:08:cc:63:5d:a0:32:e3:d8:1d:79:71:f1:e5:
         4b:7a:d2:3f:bc:99:0b:61:5f:cf:62:66:bb:96:fa:de:fb:09:
         2a:c4:9c:26:75:de:a7:7d:89:18:03:c0:00:49:c3:d3:6e:db:
         ad:a0:fa:51:a9:ae:8d:53:d3:22:0c:33:8d:bd:6d:02:10:47:
         05:5e:c9:20:c8:5b:e5:c9:70:9d:86:f5:0e:cf:4e:bd:01:68:
         d7:25:52:d9:9d:17:02:a0:66:61:89:0f:1b:20:ad:e0:8c:6c:
         c5:13:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:00:54 2026 by rpki-client