Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
File:                     dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json)
Hash identifier:          CiSCUMUDMm7M81ta5j0kCY9qbB5D0nHYk0DD6cW7rME=
Subject key identifier:   D3:27:67:DA:AC:33:C0:9F:56:98:DF:90:9F:4C:E4:16:5F:04:CD:CE
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Certificate issuer:       /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial:       019FAAF5F3886981FBC18CE06E62D7589B88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 23:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:13 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:13 +0000
Files and hashes:         1: 13ja1cIxS4cK0b0RY3CC1WL6GYs.roa (hash: c+J6Q65ZscwsVoYSvT1zs/WDV1dPfYCmK+qupBgYe50=)
                          2: 9OSGu-CL3eoRiBIUAPN11BJFt2o.roa (hash: jKTEcw4I25lyqC0/LKz20znUmkmfgUVEV6D5UsdJUAo=)
                          3: RtgqAojptg3yfsTJ-oga_8isRto.roa (hash: eyQYoF7t82yY3YtM/1jPPLvEjYoo8YlLinObPAQcXHA=)
                          4: X6IQ-q68Lu6Sm7ozgn09iKo2xDc.roa (hash: 1oM0JFaG4XNcO5zFMn1eRQw1lAJ0Or0fahaPut34poU=)
                          5: _1hB8H52OK9tZ7oTDVioeT82qgM.roa (hash: 7T2hoZDj4U/8s/AFME6VJZzf9NWdP3HcXbeV7H9Xusw=)
                          6: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: 3oPwlPRue2XpTMWu80uKLgge8CAHIj5dyjpQO42I72o=)
                          7: taZtaRwec6TUmh7xkAuy4J_X1F4.roa (hash: CpXD+0k4LSqd3QdCbAr+w3LdfUJFfvPxHaufA8KBMW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:f3:88:69:81:fb:c1:8c:e0:6e:62:d7:58:9b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
        Validity
            Not Before: Jul 28 23:01:13 2026 GMT
            Not After : Jul 29 23:01:13 2026 GMT
        Subject: CN=d32767daac33c09f5698df909f4ce4165f04cdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:e9:2b:92:69:40:93:67:77:85:98:0c:0a:
                    87:b5:c9:7e:97:37:fd:df:de:b9:c0:93:07:cd:34:
                    09:67:4b:42:be:32:a8:35:8b:40:66:f9:24:49:a2:
                    dd:9c:86:a3:e8:eb:94:bc:eb:f3:3f:c3:08:3e:66:
                    0c:70:dc:94:ed:64:7d:3b:f4:07:eb:5d:0d:40:67:
                    c9:90:79:d3:72:23:7b:c4:e0:f9:8a:77:8e:53:c2:
                    ac:55:7d:18:62:88:62:02:bb:15:20:0f:04:df:97:
                    71:e4:2a:e3:a0:32:67:5d:c3:ed:3d:62:e2:d1:e7:
                    cd:43:fc:5f:29:9a:83:9b:14:2d:65:38:c5:e9:70:
                    32:78:0b:7a:f5:9b:c5:7e:30:21:4a:51:ac:4d:2d:
                    63:15:b1:9b:90:60:f3:91:14:15:85:b2:8e:9d:63:
                    ab:ba:97:08:e5:04:91:76:3a:d5:b6:95:81:14:bf:
                    34:0b:37:78:3f:86:5c:12:0b:67:b4:5d:2d:03:8a:
                    e5:50:9d:4b:8c:2d:15:b1:76:28:33:6d:c6:b0:b1:
                    ed:ef:2c:82:61:68:ea:19:55:75:73:c7:b8:fc:42:
                    6d:d7:b2:01:c6:0f:7e:df:21:09:13:67:32:d7:d2:
                    01:11:5d:58:30:c2:da:40:7f:14:59:f4:58:00:b4:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:27:67:DA:AC:33:C0:9F:56:98:DF:90:9F:4C:E4:16:5F:04:CD:CE
            X509v3 Authority Key Identifier:
                keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:41:d2:c3:92:f9:86:4c:1c:3d:fa:c1:2f:76:8d:03:fa:
         a3:ca:5b:a5:08:e8:6e:fe:2a:66:d8:80:c8:37:99:1b:a1:f6:
         42:6e:df:5b:83:f2:75:3f:61:0f:dd:90:8a:9b:c9:9e:55:64:
         87:6e:be:2a:d2:58:fa:44:e3:b7:71:24:70:e8:a4:b6:17:38:
         a4:c1:cb:20:5e:8e:d8:15:6d:0b:df:5e:e8:eb:0a:fd:4d:21:
         ca:65:2f:43:45:14:a3:e1:e2:0b:57:f5:e5:ea:17:c9:33:a0:
         10:27:32:79:31:50:c1:dc:e5:be:71:9a:16:51:e3:3e:b6:ca:
         8e:e8:24:5b:7d:6f:c5:e3:76:44:fd:f0:a7:5e:eb:61:b3:1b:
         64:74:a0:0e:45:8f:f7:d6:18:60:89:88:02:a3:93:f1:ae:ef:
         39:75:dc:f6:f8:51:e8:12:fb:ca:4e:ec:86:5c:9f:24:34:3d:
         13:b1:0b:70:e1:25:bf:88:12:9c:31:61:0d:8c:ee:70:00:e1:
         79:b2:ae:90:19:93:13:3e:b3:59:0a:2d:3d:63:97:2d:4f:5b:
         0b:0f:e0:7d:e5:b6:9c:f1:e0:fe:cc:58:53:0b:7b:cf:6c:58:
         d2:29:cf:6e:17:65:a1:e5:b6:7c:b3:31:ea:6c:55:d0:8f:62:
         d4:7c:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:27 2026 by rpki-client