Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File:                     M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier:          ixX8aPEIikaZrdQEDqv3s+tSkabVeuxaXjCG8zajp/w=
Subject key identifier:   4F:AB:55:7C:0D:4B:E5:63:01:71:79:3C:80:37:19:D8:8A:AE:D6:75
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer:       /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial:       019FA906F989104AEE2DF7B7B88D14ADCEFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 14:00:34 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:34 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:34 +0000
Files and hashes:         1: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: G8a+oILBJDenGNVO4C7FZ/MzAIFF5WveBuz1zF+jtKQ=)
                          2: S2Rr6_hn2BX5-GlRfv2PnCiP4xk.roa (hash: 7r472AWf04Pi1AuDVC711AyL3xDv3j2X7wUK1jCkLQk=)
                          3: fFXDtgvQwtuo26S2a1Fj55vsTB8.asa (hash: EyxWJ7SdSqpwJL1gtM1HT9SdtAnugRTp0AwNzm8Whcw=)
                          4: kPXOPfjYRrsOHKmt2uydskWrmx8.asa (hash: LJNoYRHWRV4CsqJStGIYTWQsD6lLtFIRWRFBMsiQTN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:f9:89:10:4a:ee:2d:f7:b7:b8:8d:14:ad:ce:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
        Validity
            Not Before: Jul 28 14:00:34 2026 GMT
            Not After : Jul 29 14:00:34 2026 GMT
        Subject: CN=4fab557c0d4be5630171793c803719d88aaed675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:6f:dc:f6:ca:53:85:60:0f:98:b4:95:0a:ae:
                    a6:23:b1:09:2d:5f:82:02:95:bc:78:d9:b6:da:be:
                    66:3c:2e:0b:d9:e5:9a:eb:27:14:d3:bb:75:b6:40:
                    59:7a:0d:50:89:06:41:79:cf:37:e3:1c:f5:76:22:
                    05:e0:9f:c8:32:0b:3e:3a:76:9a:c2:67:f5:64:7b:
                    a5:db:44:b6:8f:53:8f:5a:65:5c:68:46:ec:a4:7e:
                    a8:05:9f:6e:54:8e:a4:2b:44:88:fe:f3:cd:a7:a8:
                    2b:6e:01:b3:6a:79:65:55:8e:0d:61:fa:5d:98:56:
                    a0:ce:5e:ad:03:0e:ab:8f:66:9d:71:71:c0:50:85:
                    19:73:d1:3b:1b:c4:e7:a1:99:37:c9:87:df:e1:f1:
                    00:6b:dd:e9:45:83:a6:72:fd:94:57:cb:f1:c0:14:
                    87:be:9c:ea:78:9b:b5:61:09:5f:70:df:c9:25:18:
                    a1:3d:40:80:9f:db:83:37:d8:33:10:9c:92:80:dc:
                    4f:6a:b2:fa:1f:b3:7c:6b:24:92:9e:a9:c4:77:e5:
                    34:e6:82:80:b7:87:70:50:16:c6:3d:e8:ff:3a:13:
                    e6:ac:62:7f:92:1f:02:15:da:05:a8:9a:c7:66:58:
                    39:9b:75:fb:cb:31:47:41:dd:54:ea:93:11:fb:12:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:55:7C:0D:4B:E5:63:01:71:79:3C:80:37:19:D8:8A:AE:D6:75
            X509v3 Authority Key Identifier:
                keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f8:97:06:70:9b:6d:4c:e7:6d:3c:17:80:b1:20:d7:be:b6:
         e7:b3:1f:d5:f4:16:65:33:f5:66:9a:68:8a:ff:7f:72:c4:6d:
         13:5d:12:55:f4:f0:55:86:7a:f7:62:f1:10:10:eb:8d:71:28:
         9d:ee:5c:0d:e8:10:20:00:25:a5:e6:89:39:7f:3d:63:aa:75:
         07:0d:75:90:ea:a7:d0:e6:74:e6:27:80:23:b0:18:6d:0e:5a:
         3e:63:ed:87:ea:6d:00:12:29:20:5f:ae:4f:2c:c9:fb:26:68:
         39:23:7a:37:ff:ae:ce:87:70:18:f0:c8:dd:a1:53:ea:a5:9e:
         f2:8e:da:4d:c5:97:95:25:d5:cb:14:2d:22:bd:38:4c:5e:b2:
         c6:a0:50:2f:65:f2:25:4c:c8:83:a9:0e:ab:ba:ab:ac:13:00:
         1d:88:a2:1a:b8:05:13:79:51:13:4c:88:d2:9e:8e:b2:30:10:
         d9:ef:6e:5f:bd:67:e3:1b:97:3f:9f:80:22:26:90:67:8e:43:
         a0:1a:54:29:05:14:a0:a7:6f:0c:50:cd:15:18:95:d6:30:49:
         d9:ef:88:ff:9a:41:23:8d:49:aa:04:e9:ed:cd:bd:fc:38:19:
         e4:24:67:66:3d:50:ec:11:66:03:a7:ef:ae:bf:5b:5a:f4:cf:
         7b:f1:10:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:49 2026 by rpki-client