Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File:                     08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier:          HQpH3GChnkcq094Z6MbPO/+HBnV2klER6jaLDB//tQA=
Subject key identifier:   B3:43:63:CB:83:9B:78:F8:34:94:B9:E1:57:CF:D3:49:6C:D3:8E:6B
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer:       /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial:       019FA9AC72A60264671399E5D84EA0424101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 17:01:18 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:18 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:18 +0000
Files and hashes:         1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: yO1G6ag0aZ2mL9DZ/bK8Hfdq2WQ7LmgMHZiy8ONkWxQ=)
                          2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:72:a6:02:64:67:13:99:e5:d8:4e:a0:42:41:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
        Validity
            Not Before: Jul 28 17:01:18 2026 GMT
            Not After : Jul 29 17:01:18 2026 GMT
        Subject: CN=b34363cb839b78f83494b9e157cfd3496cd38e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:2d:af:04:84:27:74:96:62:15:74:6a:d2:
                    d9:3e:55:ad:72:8a:24:e7:02:5e:57:7f:9d:07:a5:
                    dc:20:d4:bb:e0:71:56:bf:21:56:14:06:bb:7d:32:
                    72:c9:94:2c:11:5e:91:5c:8d:09:37:08:ba:63:d0:
                    c2:16:a0:e0:c1:3d:8a:0d:e1:23:07:43:7c:6c:a1:
                    97:0b:22:9b:fd:1f:f1:92:a3:d1:3b:a9:29:aa:f8:
                    16:6c:3e:b5:ac:3e:64:bc:4f:56:53:f9:68:78:d4:
                    d5:32:a0:c4:e4:de:2e:cd:3a:08:b0:d1:77:f2:8c:
                    2e:06:7a:a8:89:ff:60:aa:ba:05:a1:f3:43:e3:ad:
                    1b:2b:de:cb:37:b1:8e:d3:a5:49:9e:77:ee:da:7d:
                    73:42:ea:eb:75:e8:2d:70:0d:6f:63:c2:01:b2:dd:
                    a9:f5:34:fa:b3:88:d3:d8:17:72:2b:f9:69:7b:a6:
                    fa:99:41:21:42:95:63:ca:f3:4b:dd:a6:0b:7a:ec:
                    fa:3c:f7:c3:d4:56:14:03:40:b0:0c:2d:5c:01:7a:
                    b1:85:05:1d:c9:d9:dc:7f:7c:3c:14:1b:de:44:f2:
                    cb:ae:f2:b2:aa:c2:b1:65:cd:80:49:2b:22:fc:16:
                    ed:05:20:c2:c3:b5:a6:d9:99:7d:55:d4:ec:f3:49:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:43:63:CB:83:9B:78:F8:34:94:B9:E1:57:CF:D3:49:6C:D3:8E:6B
            X509v3 Authority Key Identifier:
                keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7f:87:c2:b0:6d:c2:b6:9b:22:72:f0:ad:14:a0:7d:39:63:
         cd:f1:c8:49:58:38:f4:ce:7a:46:8a:a3:3f:fa:e3:de:18:8b:
         1a:e7:55:9c:83:b7:55:13:4f:fe:ae:e9:cb:e3:af:b6:37:6d:
         cc:75:c5:fd:51:0b:2e:04:68:c8:ec:cb:be:78:dc:4c:a0:7e:
         01:e9:ca:12:7d:ec:c7:c2:2c:8e:00:e1:e5:6b:b2:b3:2d:d4:
         3e:c3:b5:e1:4c:69:e7:c2:17:2a:4e:68:53:24:bf:8b:73:04:
         9d:fe:76:6d:da:55:70:eb:51:d0:83:bc:1f:4f:72:c0:9c:07:
         74:f3:69:4f:7f:cd:0e:34:1b:29:18:4c:84:6f:2b:f2:7a:00:
         f9:94:6b:7e:69:69:46:52:76:e6:6c:cb:dc:d8:6c:1e:66:f0:
         02:83:a8:ae:b4:bd:77:50:4b:b9:05:b3:78:be:20:00:2b:2a:
         f4:ec:ac:f7:c9:a5:79:13:fe:1d:df:2a:14:b1:0b:98:3f:1d:
         4f:91:11:a3:ab:45:e3:e4:cf:1b:01:da:81:ce:70:ee:d0:7d:
         a2:99:40:93:35:58:5d:61:6f:75:20:1b:8e:5e:63:ae:27:e7:
         cf:03:3b:7c:7f:0d:86:2f:bc:8c:1d:8d:86:23:c4:44:e2:0c:
         46:13:fb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:32 2026 by rpki-client