Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File:                     ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier:          TMBnw3p85r0M+2nj8XzrQPzEiU+8cqEDttf8B5ZQXNA=
Subject key identifier:   57:57:DB:74:CC:95:18:16:04:E7:DA:7C:C9:54:B4:D6:42:AE:43:35
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer:       /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial:       019FAA1997F9F77D40D80E8B784DC9FD356D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number:          19D1
Signing time:             Tue 28 Jul 2026 19:00:31 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:31 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:31 +0000
Files and hashes:         1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: 3VDSvD4gM0OaPoN9CEzJ7AJ823e3wa6M0TQulCBsq28=)
                          2: OlMlgs31AIpaAYyvx-pkZgJRnD4.roa (hash: E/uAqkcgJ8DHc0dc0BC15Pxbqo2GjJOGoAJB4FHkYfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:97:f9:f7:7d:40:d8:0e:8b:78:4d:c9:fd:35:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
        Validity
            Not Before: Jul 28 19:00:31 2026 GMT
            Not After : Jul 29 19:00:31 2026 GMT
        Subject: CN=5757db74cc95181604e7da7cc954b4d642ae4335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:d9:20:f3:3f:fd:d6:ed:ff:5b:22:b5:33:
                    b7:41:34:83:07:e4:69:93:cf:70:b3:68:ec:cc:99:
                    34:e0:9a:1b:ce:cf:3e:4d:39:54:79:b1:98:4a:0c:
                    4a:8e:4f:7c:ca:a0:9f:e4:8a:8d:93:c8:1e:68:e6:
                    d9:60:1e:25:b2:9c:d4:5e:a8:89:5a:c6:4d:21:12:
                    34:9c:01:b2:71:83:3f:9a:e7:18:53:2d:5f:dc:2b:
                    38:ad:e3:9d:ae:54:32:9f:e3:f0:df:7a:e7:13:42:
                    68:b6:16:37:ff:3a:bb:3b:2d:01:28:40:d0:71:c4:
                    ba:5d:f0:91:2f:0a:36:80:db:ec:4e:d1:4b:ab:33:
                    94:a0:95:7b:c8:a9:cc:10:5e:74:b5:9e:cc:db:04:
                    03:8f:2f:6e:2f:e0:4a:16:03:7d:06:cf:93:ed:87:
                    43:b4:9f:82:73:d4:52:1d:84:a2:2b:f9:5a:15:53:
                    c8:7e:ce:bb:d9:85:2f:86:b0:be:ca:95:fa:6a:4d:
                    17:8c:e3:0d:f1:78:5f:aa:8d:d4:2d:c4:5c:fa:38:
                    2b:20:29:b3:37:c4:db:a2:93:0d:50:7a:7a:82:66:
                    1c:fb:c9:f1:29:45:78:c1:95:b8:6d:21:a1:0e:58:
                    8b:c4:36:fc:2a:fb:a9:a6:ff:cc:8c:35:be:c8:69:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:57:DB:74:CC:95:18:16:04:E7:DA:7C:C9:54:B4:D6:42:AE:43:35
            X509v3 Authority Key Identifier:
                keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7a:c6:6f:8e:4e:da:fc:f4:e5:08:3d:a8:1f:07:32:cd:34:
         e2:41:c9:12:13:91:3b:2a:63:ef:1e:63:e8:3e:c8:96:d6:dc:
         14:1d:2b:8f:0c:76:ea:43:1c:32:fc:b1:17:60:ff:00:51:95:
         55:48:ba:73:f2:df:a8:76:29:20:b8:44:1d:1a:61:83:a7:d8:
         b1:57:55:0e:52:74:76:49:ab:e0:a9:83:27:94:fa:02:79:95:
         31:ee:d4:b0:4d:39:2c:96:27:b8:5d:cf:30:d2:0f:c2:41:fa:
         e4:14:99:d9:ef:f3:ca:f7:49:b7:76:bc:53:a2:39:74:3e:05:
         86:69:7d:00:ca:0c:00:31:df:f5:c3:e7:bf:df:71:23:b6:4e:
         0c:59:f1:26:7b:51:0f:be:fc:2d:21:94:2c:39:a9:89:16:dd:
         37:fe:1c:9c:9f:b8:43:2d:23:a4:d2:2a:f9:c1:17:34:93:05:
         67:be:a3:f1:22:ca:7f:e7:7a:44:2e:e3:52:f1:33:da:d9:97:
         3c:de:bb:d4:65:80:09:af:42:02:3b:61:4d:95:74:34:17:68:
         16:06:83:2a:70:08:b7:b9:f0:7e:77:21:a4:ae:30:38:e7:d6:
         a9:2c:11:74:5a:29:4f:33:94:86:22:6f:b8:71:f7:00:68:64:
         9e:71:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:35 2026 by rpki-client