Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File:                     cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier:          YbIKFivYPWKP35kpZHSLpVRymcp+6/gaAP2votUesdg=
Subject key identifier:   8D:6D:1E:CD:1C:5E:F8:DB:4C:B3:44:08:D7:F2:91:64:3F:BF:5E:E2
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer:       /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial:       019FAB2C243CE4AE6AE75C53DCD487CCE6FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 00:00:24 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:24 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:24 +0000
Files and hashes:         1: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: WAoxz8S5PkSb8x18YTtBEefVuooDXMw9DAu0PeXHNRM=)
                          2: hA6_YTErxhku_uiY6bcvhY1hUhs.roa (hash: Q6FjJQt1zpguz0aAPZUF4vlr1RqYwbpYRo9ftd9mu0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:24:3c:e4:ae:6a:e7:5c:53:dc:d4:87:cc:e6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
        Validity
            Not Before: Jul 29 00:00:24 2026 GMT
            Not After : Jul 30 00:00:24 2026 GMT
        Subject: CN=8d6d1ecd1c5ef8db4cb34408d7f291643fbf5ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:21:18:3b:f7:2b:be:bc:09:f7:0c:8f:ea:
                    09:fb:47:51:79:02:d9:44:00:14:0e:05:2d:2a:ef:
                    ba:ad:a6:74:fc:bd:23:a5:e4:bf:43:08:d1:9a:22:
                    48:c4:4f:02:fb:50:57:f8:0c:da:9b:9b:28:bc:e1:
                    36:ee:29:c7:96:7e:3b:5b:d9:18:22:3a:d6:0a:21:
                    ec:b1:15:43:ee:3a:d2:51:1f:13:3e:2f:c7:72:57:
                    45:81:16:e3:eb:8b:2c:0a:7f:4f:1c:fd:a4:cd:e1:
                    94:a3:be:72:12:15:b6:a8:05:1d:bb:a4:81:4a:a2:
                    d2:61:3d:21:be:99:7b:3f:d8:5f:e0:83:45:9a:c2:
                    c8:7c:82:c6:2f:3a:d7:8d:41:df:8f:21:7a:df:22:
                    b1:1e:93:fc:7e:c0:7f:7c:36:3b:e8:26:d2:5e:5d:
                    87:b8:bf:31:2c:72:cb:f2:64:b1:f7:1d:ac:3f:00:
                    40:ae:95:04:60:63:74:7b:1f:05:5a:af:bd:78:c4:
                    22:81:20:49:f7:4f:b8:29:e6:0d:c4:47:5d:c4:f1:
                    f2:f2:bf:21:22:a7:7c:86:8c:4e:26:69:28:98:71:
                    b4:0d:5a:2c:72:55:fa:27:a7:60:d1:c1:36:c3:f1:
                    fb:f2:cf:14:66:7d:3b:4c:5b:9a:f3:f1:ec:c6:38:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6D:1E:CD:1C:5E:F8:DB:4C:B3:44:08:D7:F2:91:64:3F:BF:5E:E2
            X509v3 Authority Key Identifier:
                keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:c0:67:16:7d:41:f3:b0:d3:7e:69:15:64:2e:de:d0:f2:cb:
         6e:1d:58:c7:51:b9:23:ea:49:76:64:cc:e5:02:a4:8a:f1:ba:
         bb:74:ec:a7:0f:93:c9:43:a4:56:78:3d:01:88:26:27:cb:47:
         a1:14:db:33:57:7b:dc:a1:76:10:d9:d0:5f:43:8c:97:48:2d:
         46:53:48:b6:02:01:a9:c0:ac:38:b3:da:93:fb:b7:24:c4:77:
         91:8e:72:c6:02:9c:a6:10:4e:fb:76:02:7e:8f:d7:d5:ad:27:
         b3:bb:37:c7:50:0d:bf:51:d0:19:b5:7b:25:f8:9e:d4:fa:93:
         50:da:b0:79:11:3a:3e:12:f5:cf:f7:07:0c:91:dd:86:a0:e7:
         77:9a:02:66:bd:16:2c:fe:9d:eb:c7:11:2b:96:a9:47:be:44:
         e9:2f:5d:4a:8b:ab:64:34:8a:be:80:b8:bf:11:01:10:59:0c:
         a8:9d:14:7c:c0:e2:12:cc:fc:98:64:29:8b:d8:b6:b1:54:a8:
         85:49:43:c1:cf:8f:23:f2:a1:75:f6:15:a4:4a:80:65:35:95:
         ac:02:46:25:24:58:98:61:21:9a:c0:f0:80:e3:39:8c:99:e5:
         eb:83:c3:61:d6:24:60:80:bf:aa:ed:c8:a2:72:b8:d6:10:a3:
         d5:2c:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:02 2026 by rpki-client