Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File:                     cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier:          zHvYn/cKEMQKUOyOu8r3IKwZwfNEb0PvBJG5YtNlQfk=
Subject key identifier:   7E:4C:7D:B1:8D:0F:EE:48:B1:10:6F:48:3F:42:D7:6E:0F:66:01:C9
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer:       /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial:       019FAAF53EF43F9AB19EDADDF99F22B5D621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number:          1405
Signing time:             Tue 28 Jul 2026 23:00:26 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:26 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:26 +0000
Files and hashes:         1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: FslQLNLJwyaO+YK8UY7m2pibqUbrHnDcxIgQ7rMTVIE=)
                          2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
                          3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
                          4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:3e:f4:3f:9a:b1:9e:da:dd:f9:9f:22:b5:d6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
        Validity
            Not Before: Jul 28 23:00:26 2026 GMT
            Not After : Jul 29 23:00:26 2026 GMT
        Subject: CN=7e4c7db18d0fee48b1106f483f42d76e0f6601c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:82:d2:41:2e:f0:57:c5:26:6c:eb:e8:41:39:
                    38:0e:ca:dd:b4:3d:08:31:a2:b8:67:a9:cd:64:c4:
                    a0:75:85:82:f4:8f:55:d3:9f:6f:02:65:1e:5b:c6:
                    0a:fb:09:ce:f4:fe:4d:1d:ee:ab:92:ae:b2:ff:64:
                    dc:4d:0c:ea:f8:e5:cd:11:9e:4a:b1:ab:a8:3b:fe:
                    da:1c:73:6f:e7:94:17:b5:e9:eb:a7:20:59:a4:a7:
                    3b:1d:66:41:a4:89:83:a1:0d:d2:a6:83:6f:6c:bd:
                    4b:74:c7:1c:18:01:09:99:cb:18:d6:70:d9:3d:a4:
                    46:b8:fc:e6:9e:78:b6:cd:f7:8a:9a:ed:d4:3a:47:
                    a2:55:66:ee:fb:5f:de:4e:88:31:6d:29:03:11:08:
                    12:d6:3a:5c:07:f2:0e:2f:a0:50:30:13:37:ee:80:
                    89:d6:a5:0c:ae:12:e6:c3:04:f0:cd:bc:90:8b:92:
                    57:84:3e:02:7a:d5:36:41:bb:58:4d:fc:6a:aa:48:
                    ab:de:45:85:16:f8:e0:e4:1a:50:09:ed:83:fa:da:
                    02:14:a9:d2:01:e8:d7:53:b7:c9:51:03:d5:be:68:
                    1b:9a:b4:be:5c:2b:33:e9:e8:dc:57:b8:60:41:6f:
                    8e:ff:e7:0b:ac:98:f4:09:03:80:0f:26:5d:f6:d4:
                    82:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4C:7D:B1:8D:0F:EE:48:B1:10:6F:48:3F:42:D7:6E:0F:66:01:C9
            X509v3 Authority Key Identifier:
                keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:68:3c:ac:de:1d:4c:dc:02:31:a3:3b:df:51:ea:ac:b2:d1:
         b0:6f:c4:3e:a9:80:a0:df:77:3c:2e:d4:9e:76:9e:46:e1:49:
         66:0c:99:35:c8:bb:cd:7b:e7:7c:d5:a5:7f:df:7d:b2:8b:ec:
         3d:8e:ea:28:17:5f:7e:4e:54:92:c3:78:c0:e8:d8:a6:0a:3d:
         34:7f:df:26:de:39:92:0a:bd:ee:9f:18:72:fd:f4:85:32:f3:
         7d:92:f2:ab:b6:c6:d5:08:d6:d3:26:17:48:11:61:99:50:2e:
         55:33:f7:a1:b8:3d:47:0e:bc:8b:a7:e0:b6:76:72:9d:c2:e0:
         60:6b:47:e5:e6:f5:49:3b:e0:2c:75:35:38:44:1b:49:57:7f:
         cb:f1:fd:00:2b:72:39:1b:d1:29:05:2a:9a:27:fa:76:57:4c:
         cd:6c:37:0c:d0:8e:a4:4a:4a:fc:c8:d9:b7:1a:b7:ae:1a:1c:
         b8:8c:6d:5a:f2:6c:cd:07:20:10:da:83:4d:2d:b1:00:66:86:
         5a:a5:d6:ce:2d:2f:fc:f8:16:cf:17:6a:94:75:e2:96:04:d6:
         89:2e:ed:74:e1:10:38:24:8b:dc:f9:91:a8:6b:7f:ff:1e:06:
         a5:f9:e9:9e:12:82:80:59:a3:a8:2e:ab:3d:65:b9:08:a7:d1:
         94:ce:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:00 2026 by rpki-client