Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File:                     C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier:          +9gELHCMfkFdYO2fdK1YwxNV6fpxhwVZTAobgTZvHtM=
Subject key identifier:   FB:BF:A3:5E:55:11:0D:79:76:46:22:14:8D:29:8E:FD:BA:15:30:C5
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer:       /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial:       019FA9E321D468FC7BF458160BF0028351F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number:          19D2
Signing time:             Tue 28 Jul 2026 18:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 18:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 18:01:02 +0000
Files and hashes:         1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: 7U/1hDTOKXovFb2Rcf6OsdwI9Tq4FrDfNuIPp4i6SHI=)
                          2: NVXaED00Tks0cffjpQE1Y8p8He4.roa (hash: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e3:21:d4:68:fc:7b:f4:58:16:0b:f0:02:83:51:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
        Validity
            Not Before: Jul 28 18:01:02 2026 GMT
            Not After : Jul 29 18:01:02 2026 GMT
        Subject: CN=fbbfa35e55110d79764622148d298efdba1530c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ed:3d:4d:29:d2:ff:6d:ba:b6:b3:5c:f3:00:
                    fa:61:93:4c:3a:12:49:6b:83:4e:30:f3:87:47:31:
                    37:47:42:df:60:6e:ad:d9:60:21:5f:44:e8:60:90:
                    ee:a7:4b:f4:82:b3:03:ec:42:86:1a:bf:b2:2b:94:
                    74:af:cc:64:82:8b:3d:e2:42:4f:a1:cc:f7:39:d8:
                    be:6a:5d:4c:a4:0c:12:8c:33:c6:98:5e:0b:e1:b6:
                    42:ef:fe:34:90:77:d8:63:db:6f:b4:e0:8e:cf:88:
                    c7:99:a2:e1:b0:3b:9e:2a:6d:c5:ea:f3:ec:1d:30:
                    89:09:63:fa:6e:6d:a1:62:ff:f0:b8:be:66:22:2b:
                    42:c5:81:98:e0:79:56:54:3c:75:c5:ad:ee:f4:63:
                    e4:3f:6b:4e:ea:6a:cd:c9:b4:62:be:bc:aa:6c:f0:
                    40:29:71:f1:80:bb:96:26:b5:08:f4:cb:e1:73:04:
                    72:8f:5c:8a:f7:18:e0:d2:a9:c8:90:93:a8:8a:e9:
                    61:26:09:7c:3b:06:1e:fd:8a:15:7a:34:5c:c0:9f:
                    8c:d1:32:dc:c8:af:69:35:bb:20:1e:c8:1b:8a:9e:
                    10:9c:26:9c:f4:b7:8b:ee:70:16:33:f6:c7:91:4b:
                    c9:e8:37:2c:c1:2f:20:85:19:cf:30:26:d8:c7:49:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BF:A3:5E:55:11:0D:79:76:46:22:14:8D:29:8E:FD:BA:15:30:C5
            X509v3 Authority Key Identifier:
                keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ac:d1:c7:90:e8:a8:c7:c2:b6:b6:e5:55:da:f7:3a:5f:ab:
         1b:97:77:da:59:92:2c:1f:78:97:21:26:d4:a7:38:55:c4:aa:
         c8:02:5d:19:37:3d:73:b5:68:ab:3e:a9:0e:7f:a2:f7:6c:a9:
         79:7a:14:20:cd:12:5f:dd:05:d5:b1:fa:ee:86:d2:c7:7c:db:
         76:46:26:fa:c7:e1:d5:78:3a:db:17:0a:4c:3c:1f:43:77:81:
         60:db:20:87:ee:80:8d:78:0e:cb:e9:b5:21:33:79:97:14:6f:
         69:d3:89:1e:0a:d0:b1:eb:16:2c:e8:a8:3c:45:57:ed:ac:55:
         dd:69:80:c4:0e:37:96:b9:b8:a2:4e:59:51:df:5a:9a:39:46:
         cb:2c:c4:60:de:a9:0b:df:5b:cb:89:06:d5:11:63:90:fa:73:
         68:90:ec:b5:db:25:e8:ab:27:4d:17:c6:7c:d4:03:db:16:15:
         4c:58:07:56:5d:c8:d5:24:59:94:ac:c4:2f:e9:ed:b6:44:ff:
         72:90:e7:36:97:1e:20:4e:02:a8:90:0e:4a:d6:53:5f:19:f5:
         d7:c4:e6:f6:90:de:af:28:64:45:05:1d:4c:52:da:2a:68:99:
         bf:51:b2:8c:92:3d:e3:db:e5:c8:95:94:07:ca:61:1a:c4:3d:
         c6:62:08:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:00 2026 by rpki-client