Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File:                     sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier:          XMQLb3maE3jzxieAiZcBHDN032TqoI+KWGp/SgsDuJs=
Subject key identifier:   91:CE:A2:36:01:7B:7B:E6:04:13:65:D8:40:90:7E:0E:FF:0B:D2:D4
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer:       /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial:       019FAA51138F46FFB5AEACF84008D9028125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number:          1966
Signing time:             Tue 28 Jul 2026 20:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 20:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 20:01:07 +0000
Files and hashes:         1: 3CIM-rszzFckhjZbgzPmZtOKZv4.roa (hash: VqajRiaghj0MLKmKn/iBz4Zyi+LNEnSguYlblCLEBTI=)
                          2: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: I+Whi8BL94YikJk6z7RlY72I9Ki2BnGNtXQpVnHwAL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:51:13:8f:46:ff:b5:ae:ac:f8:40:08:d9:02:81:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
        Validity
            Not Before: Jul 28 20:01:07 2026 GMT
            Not After : Jul 29 20:01:07 2026 GMT
        Subject: CN=91cea236017b7be6041365d840907e0eff0bd2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:20:84:74:8e:76:48:10:b7:5c:8b:00:c7:
                    d6:89:ff:ac:66:22:c8:ef:f3:11:09:ba:5e:6f:43:
                    5d:25:bb:0d:26:0d:c6:b7:d0:2d:ec:76:22:31:bc:
                    38:a7:16:33:71:d7:3a:8d:19:97:39:78:df:32:bf:
                    55:fa:10:a8:34:ca:54:59:d7:67:88:41:ac:e0:69:
                    b3:d1:f4:ee:b4:54:c6:9d:22:5a:7f:17:34:f2:8a:
                    0f:d7:69:2b:16:b9:ea:79:0e:bc:f5:76:3b:e5:16:
                    87:de:ff:96:8f:11:c5:ec:33:a9:49:58:40:31:9e:
                    b6:04:e6:ad:1a:c8:9e:24:98:09:1f:65:7f:0a:0d:
                    0a:42:53:56:70:0f:a5:8f:71:b9:9e:f0:7e:9f:d1:
                    f1:4c:9c:00:52:f0:28:c7:92:0e:0e:48:07:bf:68:
                    9a:43:34:6f:58:37:a7:61:be:b5:69:81:59:f0:88:
                    59:09:5e:5a:1d:40:a5:7a:bd:1d:39:92:2c:de:5e:
                    80:65:8a:02:a4:d4:58:e3:4b:aa:a7:93:84:d1:10:
                    7a:ea:53:33:10:94:ad:2e:a7:81:29:1d:84:88:6c:
                    72:93:2a:e2:e2:3b:54:38:0d:56:6d:8d:91:aa:67:
                    ae:83:60:12:cb:1a:dd:19:ea:07:a1:cb:de:b6:93:
                    81:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CE:A2:36:01:7B:7B:E6:04:13:65:D8:40:90:7E:0E:FF:0B:D2:D4
            X509v3 Authority Key Identifier:
                keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:92:6d:f2:9f:eb:f3:21:9d:6a:36:1c:0a:30:09:f6:58:51:
         3c:42:5d:0d:61:79:25:73:dd:db:4e:5c:f0:f0:6c:8d:4f:24:
         b3:ad:fd:8e:14:cd:de:62:a3:40:5f:94:5c:99:86:f5:90:8d:
         a3:04:30:1d:12:82:a5:91:d6:21:92:62:e7:48:ed:2d:a5:99:
         5a:12:4c:d3:20:20:02:41:14:e7:55:6a:98:4b:91:8c:00:66:
         fc:e8:17:d5:d4:5d:65:0c:63:38:5b:2a:fb:e1:dd:6c:70:02:
         ce:78:c5:27:e3:ba:ff:96:7a:3b:60:f4:21:e0:2a:30:41:4b:
         2e:d6:fa:66:04:a3:bb:ec:83:a8:33:b0:9b:c2:fb:22:3d:a7:
         c1:ce:ef:a6:20:e0:d5:09:d0:6e:3d:bf:ab:51:61:6d:18:7e:
         98:c1:f8:c5:82:55:96:b5:a6:11:c7:5b:de:33:ab:cd:3d:97:
         29:c9:84:24:ff:c6:00:e2:4f:95:c2:19:15:88:7f:40:b3:1e:
         92:8d:b5:e8:39:2c:8f:e7:83:e1:bb:63:a4:e6:a1:bb:07:15:
         f2:7f:03:01:ca:f3:12:41:eb:34:b8:f9:e0:d8:a8:86:5e:c0:
         41:01:c0:2f:75:50:73:35:bc:39:c9:1c:ee:e8:ed:49:a6:ef:
         19:63:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:05:56 2026 by rpki-client