Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.mft
File:                     URVz79L7_gei8nIJEp5btIU3isc.mft (raw, json)
Hash identifier:          On0m9H9XFgSvWCc3soNny0XTdIWTk1rGhXkjE+5mLuU=
Subject key identifier:   4A:BF:F7:3E:E0:A4:7D:F3:B2:7D:D6:97:50:33:A6:4E:4A:72:CF:64
Authority key identifier: 51:15:73:EF:D2:FB:FE:07:A2:F2:72:09:12:9E:5B:B4:85:37:8A:C7
Certificate issuer:       /CN=511573efd2fbfe07a2f27209129e5bb485378ac7
Certificate serial:       019FAC08931D681490D691DB91EE651FBC1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/URVz79L7_gei8nIJEp5btIU3isc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 04:01:10 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:10 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:10 +0000
Files and hashes:         1: URVz79L7_gei8nIJEp5btIU3isc.crl (hash: Q2xVm6zmLaUzhwr+rZ7i0Uqtk0J0YgV5Z4ycCKm7XCM=)
                          2: s07BOc0fvotVkrx6lP3Fx2gk7uQ.roa (hash: uMGPwh+klm08fKQgfz6yUIl840Km6ZAmFYl1DgMKzeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/URVz79L7_gei8nIJEp5btIU3isc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:93:1d:68:14:90:d6:91:db:91:ee:65:1f:bc:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511573efd2fbfe07a2f27209129e5bb485378ac7
        Validity
            Not Before: Jul 29 04:01:10 2026 GMT
            Not After : Jul 30 04:01:10 2026 GMT
        Subject: CN=4abff73ee0a47df3b27dd6975033a64e4a72cf64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e5:e3:65:fe:62:7b:25:b4:97:6b:9b:c9:28:
                    b7:9b:bf:a9:1a:71:92:2e:4d:94:08:04:1b:44:ca:
                    7a:50:6a:01:a9:ab:2c:fe:0a:fd:ba:a6:1e:b9:d8:
                    ab:bb:7a:16:6b:00:2c:25:ab:e7:ad:cc:47:9b:a1:
                    71:d1:08:29:a1:d2:97:51:e4:56:24:f9:3d:26:f6:
                    5e:30:a2:66:8d:f4:ba:45:8b:a4:b5:c8:9e:4e:24:
                    b2:27:cc:e8:e8:fa:08:e5:38:21:99:b0:5a:63:db:
                    78:44:aa:51:8e:3c:a2:e6:65:50:33:85:23:3c:5d:
                    3c:7e:e5:d4:75:3b:06:8e:bf:8d:fc:7c:78:c5:16:
                    d0:5e:a9:fa:e8:4e:0c:11:37:9d:27:5f:6c:65:aa:
                    bd:d2:4d:05:a3:3e:c3:d1:8a:ab:17:37:d7:37:2e:
                    7e:b8:1a:bc:6c:ae:8d:fc:d2:0d:02:dd:6e:2b:0a:
                    77:b3:16:e8:5e:a7:85:79:d8:4a:0f:05:8c:da:84:
                    70:7b:c5:d1:2d:8d:ce:a4:51:2d:7e:7b:54:a5:dc:
                    5b:64:0b:2f:79:da:1d:84:d4:9d:f4:21:b4:7f:03:
                    53:9c:16:e0:8f:0f:3f:d0:c3:09:97:db:92:cc:f0:
                    54:55:29:1a:36:13:ae:d0:df:ab:ba:b7:46:13:b3:
                    a8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BF:F7:3E:E0:A4:7D:F3:B2:7D:D6:97:50:33:A6:4E:4A:72:CF:64
            X509v3 Authority Key Identifier:
                keyid:51:15:73:EF:D2:FB:FE:07:A2:F2:72:09:12:9E:5B:B4:85:37:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URVz79L7_gei8nIJEp5btIU3isc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2c:9c:44:8d:44:37:b4:2a:36:d3:d3:82:b2:20:8d:04:7c:
         8e:c0:96:14:01:20:0c:6d:95:f8:51:0b:6f:6d:04:6a:f0:b1:
         a7:ee:80:fb:1a:fc:f8:f1:46:72:47:6a:37:41:75:84:aa:10:
         32:eb:85:cf:6e:c1:e4:d7:bc:1e:62:67:ee:ef:f4:10:26:c0:
         14:0f:35:c9:14:be:ae:4e:3b:fd:da:7e:0c:8c:e8:27:c3:ec:
         84:2b:dc:db:f0:0d:11:5d:35:a2:72:42:94:56:15:84:8f:3d:
         e8:87:9b:9b:4c:3a:64:94:14:14:b4:23:f6:06:13:79:52:1c:
         ba:7c:c4:95:71:a2:83:0a:a3:81:c1:f3:35:33:7a:09:f4:d0:
         a4:c6:9a:37:51:73:89:ec:ae:9c:f3:61:6c:ec:ce:22:ad:76:
         b3:59:17:df:22:ba:9f:2d:d2:19:8b:b6:ab:c0:64:d8:25:59:
         eb:43:d3:e6:cd:02:9f:73:07:7d:77:6c:2a:c6:86:db:d2:51:
         9e:52:f4:57:ad:cb:06:30:1e:bf:ab:99:67:6d:47:a6:20:2a:
         02:cf:5c:5c:56:df:c9:79:34:67:fc:37:86:ec:b0:0f:21:44:
         90:f5:13:d4:d5:56:6f:fc:a3:72:9b:26:44:c0:3e:77:3b:ff:
         24:16:bd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:24:11 2026 by rpki-client