Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
File:                     cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json)
Hash identifier:          FVtRyhG11lEkyKP+ILxPc2YxV5gHkUz6zfCOO1Pti0E=
Subject key identifier:   4D:75:18:7B:2B:C9:6F:F0:0C:BD:58:F8:55:95:D2:51:0F:8D:BE:84
Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
Certificate issuer:       /CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Certificate serial:       019FAC3F0FE8A1388B0F9FF75D8D7CD1938C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
Manifest number:          02F1
Signing time:             Wed 29 Jul 2026 05:00:41 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:41 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:41 +0000
Files and hashes:         1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: //hOFIxl4x/vDQiiPXyF8E5HRDegjl+stIltP0soqqw=)
                          2: xEYU-K7wenXyYwuEUiZnmFrMZac.roa (hash: gWNLlP9RhlookRQsci7JBvafArIbz1TL4llsI2fvdA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:0f:e8:a1:38:8b:0f:9f:f7:5d:8d:7c:d1:93:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4
        Validity
            Not Before: Jul 29 05:00:41 2026 GMT
            Not After : Jul 30 05:00:41 2026 GMT
        Subject: CN=4d75187b2bc96ff00cbd58f85595d2510f8dbe84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:c4:86:7a:b4:ed:1d:38:dd:bf:6b:0d:74:
                    e1:68:1e:5d:e4:b0:fc:a2:ff:1e:22:c1:70:7f:2a:
                    69:3a:93:05:e3:cd:fe:83:16:cc:fd:1f:c1:77:91:
                    d5:08:1b:07:82:8c:f6:ef:95:58:e3:49:04:ee:9b:
                    60:d1:12:b1:ec:d3:97:d8:28:be:d0:20:07:c8:d1:
                    9e:4b:63:1f:7e:44:78:09:e2:6e:94:00:b1:63:fb:
                    7a:f1:4f:40:e4:8b:35:86:e9:07:38:fb:78:ea:3e:
                    75:e7:48:78:6f:bd:52:e5:75:a4:a3:74:ca:3f:d7:
                    4e:a2:a0:b8:86:1b:89:a3:f6:4e:d6:44:a6:80:d8:
                    b0:65:32:19:4d:fe:2b:52:5f:a6:2d:f8:38:7a:c6:
                    10:09:f0:e5:01:ce:d4:6b:71:51:4a:a0:5b:08:8a:
                    09:38:fc:ff:df:35:44:9b:93:01:cb:f6:7a:42:f0:
                    7a:5e:a8:5e:b6:c1:38:0f:73:f2:f6:d7:1a:75:68:
                    2a:20:15:e7:40:43:c3:ea:2f:6e:18:67:24:fd:a4:
                    a1:69:4d:3c:45:a5:06:0b:f0:93:39:57:5d:39:e4:
                    16:03:1c:b0:67:ff:e7:a3:40:26:03:72:be:46:90:
                    64:93:06:31:02:77:cf:c4:81:bd:78:25:31:b0:7d:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:75:18:7B:2B:C9:6F:F0:0C:BD:58:F8:55:95:D2:51:0F:8D:BE:84
            X509v3 Authority Key Identifier:
                keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5b:69:de:ee:88:c0:91:7e:7b:68:8a:42:77:81:30:09:11:
         e6:a5:46:4f:ee:47:ef:56:bc:85:89:4e:79:cf:da:2e:ad:01:
         1a:a9:83:93:24:94:fc:e2:d7:d0:89:96:21:e1:d0:aa:14:53:
         06:c5:0c:de:52:b2:b9:0e:ef:78:2a:eb:ac:59:85:81:24:a6:
         76:6e:86:1c:64:47:e3:6e:5b:f2:9d:33:69:b0:fa:96:e2:35:
         72:79:b1:1a:24:83:d9:77:03:d5:9c:a5:2d:96:53:73:6f:6c:
         ef:86:1b:ec:11:f0:12:52:9d:0a:10:58:b6:33:36:de:00:f6:
         30:06:5d:37:37:61:7a:31:b8:fd:d5:80:65:87:62:9d:cf:25:
         40:fd:2d:de:9f:0c:1d:33:12:21:00:41:36:b8:1f:28:8d:07:
         50:b6:8e:cf:e1:ea:35:9a:1a:78:2e:81:4b:3f:bd:4a:60:08:
         b7:75:08:dc:ec:22:26:58:e0:44:a3:24:d2:4f:e5:45:09:d4:
         0c:33:d5:57:8d:57:82:ba:c4:e1:de:72:3e:29:82:89:29:34:
         c1:aa:46:73:30:ea:bf:26:ce:e2:0b:42:bb:8b:2e:3e:5e:b1:
         97:8c:0f:12:d7:1d:0d:ad:e8:e9:b9:99:5a:0e:c7:81:db:f3:
         3b:31:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:01 2026 by rpki-client