Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File:                     4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier:          GEmqhLiodo9nVsQ+BHnq73rHgl3aLaSkAPbnSb/1Pbs=
Subject key identifier:   9F:33:74:9F:74:55:F4:60:3F:10:CA:3F:A0:3E:DE:A8:E2:B2:55:CC
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer:       /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial:       019FA89A522DE2B9434E0AFCD89C4E814092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number:          19D7
Signing time:             Tue 28 Jul 2026 12:01:53 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:53 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:53 +0000
Files and hashes:         1: 2fN3eFa0bjosUQqjhzxnSC-ZbG4.roa (hash: adZ7mZtP0EOWzdaHjuDb/aCtRN0v7AY6Df2Y3DcoCAs=)
                          2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: K7YFPO3TEoV7jrljdWSpNCruqDgg127mL4Mj4A/lfNg=)
                          3: 9v_0JWu-xS3HupRXSgVGs4u-y9E.asa (hash: sTee8C1I1rz26eDODyCBNjrldfLm0tSqfnc3UkcLmsI=)
                          4: VFTnlB7fVRBsXRxIBDV1iFufXkE.asa (hash: iqnFhWzzO6j+t2K9kgwBf/ErkVyc0h9GJuE4NZx67oA=)
                          5: Vq_xfXcXdKcO1UzpZxW6yviyyFE.asa (hash: m8FshAEN/KHrFIoeny5MQ2gIm897mevyMxMfoqG/biI=)
                          6: YivW_0JV1PXQKNZNuU-YZa-0178.asa (hash: UK5xEl6Yl9PtluY9Smceeot0bF0az/oSTMQ4CgDOsRs=)
                          7: fQpqOd1l93-P-yMVY0liF15r3FA.roa (hash: fe669y4X3Xx1cDS4i66TQBvbP8wPt7PZfJZDiZ3TAoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:52:2d:e2:b9:43:4e:0a:fc:d8:9c:4e:81:40:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
        Validity
            Not Before: Jul 28 12:01:53 2026 GMT
            Not After : Jul 29 12:01:53 2026 GMT
        Subject: CN=9f33749f7455f4603f10ca3fa03edea8e2b255cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:e9:0f:82:0a:1a:44:7d:97:54:d3:c9:5a:
                    5d:97:ef:9f:d1:20:a3:94:fb:8e:3e:01:40:1b:ed:
                    a2:b2:3c:56:cb:dd:52:3f:4b:6b:12:94:72:be:cf:
                    36:a3:6e:27:17:46:63:7f:40:c7:9a:01:ff:da:63:
                    b1:4a:d6:7e:87:43:d4:a2:72:40:d1:78:55:79:fd:
                    d9:cb:48:dc:27:9a:16:6e:a1:23:a9:af:e8:af:4e:
                    7c:fa:b7:7f:39:0b:c5:e3:8c:9d:a0:27:db:ec:33:
                    19:67:1a:a5:d6:e3:30:b4:ba:3d:17:2f:00:8f:94:
                    24:21:38:66:93:dd:64:43:31:6c:a3:e7:99:3e:c8:
                    3a:88:56:05:e6:4e:9d:d2:95:96:6b:b2:dd:26:27:
                    df:d1:39:c5:a1:dd:6d:6f:68:bd:b4:47:18:14:c1:
                    e1:5b:6c:e0:ce:1d:7c:29:f8:6a:2c:94:9b:5b:18:
                    35:07:f6:d8:9f:59:6a:05:e8:da:c5:b6:0d:f7:e9:
                    64:3e:8d:27:26:fb:46:bf:62:e1:02:76:bb:9d:18:
                    7a:4d:36:84:7b:08:ca:08:6f:62:ed:cf:fd:3c:7c:
                    0b:00:c7:c4:14:ba:1b:cb:0c:3e:9f:08:d5:c0:bd:
                    99:ff:0a:ec:31:28:be:8d:e8:ca:c3:bf:a2:8e:7f:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:33:74:9F:74:55:F4:60:3F:10:CA:3F:A0:3E:DE:A8:E2:B2:55:CC
            X509v3 Authority Key Identifier:
                keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c7:8e:9b:4a:04:d7:3a:ae:bb:d4:76:93:1e:78:bd:f6:11:
         b3:e0:1d:f8:62:fa:f7:28:bc:1c:5e:d2:90:ea:d4:52:9f:82:
         58:22:b6:26:3e:a4:81:70:b6:3a:f5:98:61:3c:cb:0d:53:64:
         d4:5e:16:19:b6:0a:67:ad:62:7a:ee:6d:cb:7b:05:21:13:0e:
         18:10:68:da:12:f0:14:84:a3:c7:de:b2:b2:ce:b6:d6:bf:ed:
         36:e8:62:cf:21:3c:b1:60:83:5d:c8:f5:4b:15:dd:62:d9:56:
         c2:ff:41:69:75:52:3e:47:c0:a6:6a:15:72:9b:a4:3c:7b:b4:
         e2:3b:05:c1:52:72:2d:7b:ee:ad:11:f6:7a:e4:eb:71:c2:ff:
         13:8b:bb:76:e4:64:71:03:96:1f:26:19:0c:7d:02:e7:9e:db:
         29:87:95:92:1f:56:48:4b:37:69:ad:2e:83:2e:77:49:bb:62:
         cb:92:e6:69:85:37:48:27:60:bd:c6:d4:bd:ce:8b:22:00:31:
         f8:00:a4:6d:5c:5b:e4:16:10:9b:21:65:68:d2:8d:7a:31:c4:
         be:8c:65:e9:30:30:79:bb:c4:d1:ba:66:2a:16:d7:b6:db:36:
         96:d8:e4:49:52:db:ac:f8:30:ca:c9:90:c2:e5:3b:ea:73:08:
         55:ea:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:50:11 2026 by rpki-client