Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
File:                     0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft (raw, json)
Hash identifier:          td47C1yAAh2L15mrdbXRwFZYxjHsfTm5qTmrQxWvgcg=
Subject key identifier:   1E:C5:91:86:B3:F9:19:47:03:27:B7:27:7D:33:37:BD:58:AA:00:B7
Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
Certificate issuer:       /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Certificate serial:       019FAA1A109302F31E417FD8D61DCB2F47DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
Manifest number:          16F9
Signing time:             Tue 28 Jul 2026 19:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:02 +0000
Files and hashes:         1: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl (hash: oE6PbBydcdhLLIdwxwLxCTjx5AbOSoyn/mNjOtCUVTM=)
                          2: g6AUdtBKbxSolGFU2rOSyRaiZMc.roa (hash: coGf1wAtr5fsslkJ4IB/mKoERpi+xwxfE7T7e7sR0vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:10:93:02:f3:1e:41:7f:d8:d6:1d:cb:2f:47:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
        Validity
            Not Before: Jul 28 19:01:02 2026 GMT
            Not After : Jul 29 19:01:02 2026 GMT
        Subject: CN=1ec59186b3f919470327b7277d3337bd58aa00b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:57:9c:14:34:96:0e:7a:05:07:b0:1c:51:
                    97:a9:3f:0e:d8:cd:77:ae:ba:c3:92:ef:25:9c:27:
                    66:a8:fc:2c:17:98:ae:74:fa:43:89:18:92:e6:4b:
                    7e:e9:d1:04:2b:e0:1d:c8:06:9e:fb:02:f5:9a:c4:
                    ba:0b:eb:6a:ac:37:5a:f8:a8:f0:83:3d:1e:50:38:
                    41:ce:11:70:e5:56:ac:6e:1b:84:3a:72:dd:4c:1f:
                    8f:3a:cc:2c:66:79:a6:51:ba:f2:18:c8:54:35:b3:
                    ae:55:67:f1:49:2d:ac:71:db:4b:11:49:53:f9:31:
                    71:5b:ef:02:0b:89:98:1f:ed:5b:03:82:ae:fc:13:
                    28:15:83:5a:c9:af:fd:f2:b6:26:0d:e2:85:58:21:
                    ad:3b:2f:50:cd:95:35:4a:64:e8:82:09:e8:4d:b2:
                    b5:ba:26:2d:a2:1f:97:da:95:5a:d7:5a:bb:7d:97:
                    84:57:7b:93:54:1b:fa:77:01:b3:da:ec:ce:5d:f9:
                    08:9a:7b:14:80:bf:04:36:41:4c:8f:30:7d:48:85:
                    c5:fb:8d:b4:4e:6c:2a:10:db:e3:25:9e:1c:ac:97:
                    a9:20:a5:d4:b9:67:03:b2:85:94:e2:a0:4f:44:4a:
                    24:f8:fd:64:c4:4a:bd:8a:50:63:c2:77:f5:b5:4d:
                    0c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C5:91:86:B3:F9:19:47:03:27:B7:27:7D:33:37:BD:58:AA:00:B7
            X509v3 Authority Key Identifier:
                keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7c:db:89:e3:52:ec:e4:b6:b1:4a:33:9f:b0:a7:4e:77:d2:
         0f:4f:d5:71:ab:42:34:e3:4e:bb:99:03:78:f1:55:20:76:11:
         17:a1:61:81:5a:59:47:9e:64:51:a7:2a:b6:c8:72:90:bd:1e:
         bd:bf:84:b6:63:69:24:92:da:74:09:19:e6:9e:9b:9d:33:90:
         d3:d1:f0:cb:c7:45:b0:52:ed:c7:41:d9:a1:5f:99:dd:86:54:
         3a:56:d0:ca:94:8a:12:42:f5:f1:23:09:5a:8e:e9:9e:76:2d:
         66:5d:28:78:0b:93:4b:f1:3c:02:dd:d2:33:a6:ea:d6:5b:eb:
         b8:6b:76:2c:ea:3e:cd:68:f4:75:d6:33:42:24:ee:6d:93:69:
         52:24:b2:16:5a:e1:b5:c6:b5:b9:f4:f2:f5:34:1f:47:16:07:
         25:a2:7a:70:a2:2f:67:40:62:65:2b:bc:dd:91:3e:40:2a:58:
         a3:33:f7:08:fd:08:db:b5:e1:91:67:2e:8f:01:17:2e:f3:4c:
         a3:be:f1:b5:14:73:e2:4c:a7:7b:30:01:8e:38:4d:ec:e5:72:
         f3:76:f3:1d:f2:7c:54:86:95:9d:88:18:be:a0:98:cc:83:cb:
         d4:52:12:10:bb:75:3a:aa:28:10:f4:6f:1d:f2:b3:a8:ac:ae:
         f2:e4:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:59 2026 by rpki-client