Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File:                     DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier:          U0vEz5GHo/zJqLPDaiJtJo/glxdtb1byE94YMZjqleI=
Subject key identifier:   EE:32:C1:9F:AB:3A:8A:80:5E:BB:3E:10:50:6A:69:4C:04:8A:5A:CA
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer:       /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial:       019FAB2C2C19F8A4B3634306040A0D45EACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number:          19E0
Signing time:             Wed 29 Jul 2026 00:00:26 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:26 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:26 +0000
Files and hashes:         1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
                          2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: hI026gCxjJvPHkbmoDMbAzDT6/dXxqXCebA8ZVfUDeQ=)
                          3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
                          4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:2c:19:f8:a4:b3:63:43:06:04:0a:0d:45:ea:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
        Validity
            Not Before: Jul 29 00:00:26 2026 GMT
            Not After : Jul 30 00:00:26 2026 GMT
        Subject: CN=ee32c19fab3a8a805ebb3e10506a694c048a5aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:aa:6d:cc:18:22:03:5d:25:d6:d8:fa:14:
                    13:2d:b3:67:17:77:09:6b:95:bd:57:05:e9:d6:eb:
                    da:d9:35:e4:11:df:aa:e0:da:5c:82:e6:26:62:97:
                    df:0c:19:63:f8:b5:30:87:83:93:39:31:e0:be:f1:
                    29:76:35:48:a2:49:76:97:a4:ab:36:f8:96:18:4e:
                    ef:8b:ca:f6:eb:88:2a:a5:37:f2:30:34:12:f4:2b:
                    93:c6:d9:a2:80:3b:95:b4:62:d6:b0:f3:4b:e5:a1:
                    1f:2e:fc:ff:cc:ae:7e:ec:20:42:9f:97:be:66:fc:
                    b4:c5:90:c8:31:5a:9f:c6:dd:ce:bc:d7:1a:a3:c2:
                    b6:21:34:e5:5a:4a:bb:64:4c:16:73:e5:f2:d6:ad:
                    cb:f0:56:a0:96:44:b4:15:83:2c:d3:fe:3a:6a:b4:
                    fd:74:ea:b1:58:83:e7:5e:f2:6a:3d:29:ad:79:67:
                    f8:6b:61:40:2b:01:db:cc:36:41:ca:85:7a:27:3f:
                    63:78:bf:14:7c:9d:1e:f5:43:a4:1f:84:d5:27:65:
                    99:18:e6:10:f0:f9:5f:76:a8:aa:ae:7b:29:f1:70:
                    53:cc:0f:2d:9f:1c:10:31:05:38:bc:d7:90:d5:9d:
                    73:cf:d3:c0:fe:64:ef:3d:f5:81:96:14:35:40:9f:
                    2d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:32:C1:9F:AB:3A:8A:80:5E:BB:3E:10:50:6A:69:4C:04:8A:5A:CA
            X509v3 Authority Key Identifier:
                keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c2:0c:6b:c5:57:a0:dc:14:79:eb:52:c7:0a:43:60:5c:b4:
         75:1b:9f:21:bf:8a:b6:25:16:8d:47:f7:a2:27:ae:29:9d:97:
         d7:e2:0b:c0:35:e0:6d:dd:20:76:d5:69:6b:67:3f:72:cb:c7:
         2f:08:85:6d:1e:1a:1f:5f:6a:8f:95:42:d1:33:44:75:ff:e4:
         88:64:c5:82:35:d7:49:40:d7:b0:67:e3:1d:57:e5:73:4a:be:
         27:61:44:8b:6a:53:1c:f3:37:48:07:43:c6:1f:e6:c3:eb:8e:
         38:10:8f:44:c1:6e:6f:d6:3b:18:e4:82:ad:4e:cf:17:3c:56:
         d5:16:7e:20:4e:20:b4:9c:f4:0f:a1:8a:f1:7a:fa:04:c7:a3:
         81:e9:09:34:e3:dc:1b:03:1e:64:e5:79:3c:e0:f4:c4:8e:25:
         f3:9d:14:8a:6f:ef:f1:81:9f:ff:da:22:aa:15:6a:f1:c0:58:
         df:29:69:e3:a3:c1:af:76:30:1b:84:6d:8c:21:a9:a0:a3:98:
         af:41:ad:49:25:9c:b7:24:91:15:65:5a:53:ae:96:95:bb:c6:
         60:f1:a0:d6:b8:34:85:92:5a:4a:1d:68:53:d8:ab:dd:c2:d4:
         98:f8:77:8e:33:89:3a:d9:6d:7c:51:3a:5b:a0:b2:67:2d:0d:
         3e:54:90:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:08:06 2026 by rpki-client