Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File:                     tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier:          8fV149hRKf+ulWDacjktI8Yer0NrsjVADHCR8Kzhca8=
Subject key identifier:   87:72:05:5F:3D:D9:82:30:23:DF:EC:CC:40:4F:02:6C:C0:F2:5F:17
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer:       /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial:       019FAA50A10982107018E0CF58A77AEFC446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number:          19D7
Signing time:             Tue 28 Jul 2026 20:00:38 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:38 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:38 +0000
Files and hashes:         1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
                          2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
                          3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: TofOx1IxUNzLSCHMEcRMdfnGfDpS7X5qi7arZn0ba0Y=)
                          4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:a1:09:82:10:70:18:e0:cf:58:a7:7a:ef:c4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
        Validity
            Not Before: Jul 28 20:00:38 2026 GMT
            Not After : Jul 29 20:00:38 2026 GMT
        Subject: CN=8772055f3dd9823023dfeccc404f026cc0f25f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:65:d5:84:fa:30:01:5d:97:68:9f:16:75:
                    17:45:1d:62:bc:fa:a9:1f:7a:94:ad:43:f6:70:78:
                    e9:56:16:af:04:a9:00:a1:60:f7:f6:66:37:61:48:
                    9b:d1:d5:cc:60:f6:62:9e:93:ca:79:49:4e:55:c0:
                    a5:23:b3:16:0a:d7:42:46:64:bc:5f:96:cc:19:5d:
                    3a:36:44:b3:67:7b:42:4b:48:a0:37:85:8f:60:d8:
                    96:19:ba:51:65:ae:38:c3:d6:d9:9c:8e:38:fb:48:
                    2b:75:96:09:dd:fc:8f:83:c8:c1:28:48:26:95:33:
                    05:3c:1c:5d:8d:c4:4d:dd:85:bf:70:9a:11:98:0b:
                    91:04:e5:c2:3d:f1:fc:d3:d7:e1:59:6b:23:e4:fa:
                    43:d7:49:ae:ec:6a:cd:78:cb:f0:c6:2b:e2:4a:70:
                    db:80:c5:2d:06:d4:17:17:4d:c1:9b:57:25:31:ef:
                    8a:3f:82:a9:24:ad:0c:c8:f9:bb:75:e6:01:7c:d3:
                    dc:99:d4:4a:b6:fa:e0:3f:5a:7d:0c:6a:58:73:8f:
                    6a:d8:fd:ac:67:e5:d6:fd:2d:2e:58:73:dc:70:87:
                    b9:ae:1d:fd:24:02:cc:ca:ad:54:80:63:15:11:fc:
                    19:10:34:c2:67:4a:fc:81:78:d0:7d:92:d8:dd:5a:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:72:05:5F:3D:D9:82:30:23:DF:EC:CC:40:4F:02:6C:C0:F2:5F:17
            X509v3 Authority Key Identifier:
                keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:50:62:67:b9:2b:45:09:d6:a0:51:09:f9:c6:f5:42:58:
         93:7e:c4:74:96:84:3b:ec:39:57:ee:d0:ed:45:49:c2:1c:ce:
         d9:bd:3d:d8:32:4e:ae:16:41:88:70:b4:c4:36:ea:16:21:64:
         5c:3a:5b:9a:a9:98:ee:75:cc:49:b0:81:fb:bc:3c:67:a4:80:
         9a:02:51:bc:dc:88:7f:22:8c:ae:2c:45:80:34:2f:83:e6:1b:
         39:22:50:e9:db:18:c3:55:3a:da:37:b7:f4:e8:65:81:7b:6b:
         71:2f:27:71:9b:33:5d:9b:a4:19:e1:26:c3:d5:a8:89:05:a1:
         c6:63:fb:03:80:2d:44:88:c5:e9:79:33:09:ba:b0:1f:2d:fa:
         95:0d:7c:03:50:0f:19:f1:80:1d:cf:ee:d7:b3:07:4c:b2:95:
         f8:48:a8:b7:1f:8e:91:67:84:0e:d5:a2:70:34:aa:3a:a7:4f:
         8c:e3:65:94:26:97:b9:7c:8a:4c:4b:38:25:02:f3:b4:6a:ae:
         86:77:7a:ce:e5:fd:62:57:7b:71:d2:ac:87:28:02:75:da:d4:
         00:7c:f2:f9:f9:2c:2d:02:61:a9:f9:e9:74:97:d8:f1:20:2b:
         5f:17:db:66:24:8f:57:78:85:23:19:30:76:fb:5e:57:46:9a:
         2e:bc:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:28:43 2026 by rpki-client