Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
File:                     FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft (raw, json)
Hash identifier:          p2i1JISy1c4XVTUeDMNwEJkNrZKcoYpspxDzMSLWDKk=
Subject key identifier:   47:52:30:16:DC:36:92:8B:72:84:87:14:CB:10:40:EF:89:9C:1D:5A
Authority key identifier: 16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0
Certificate issuer:       /CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
Certificate serial:       019FAA88170E57CBDDC96B49FE2EA3613C2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 21:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:13 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:13 +0000
Files and hashes:         1: FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl (hash: jdRZXk/EFYSXfGEL+aJVuo5FH3eF/JBY/WTrnP5y1zo=)
                          2: OE-vaTYmCvvkebOY3MrRx4ljmi8.roa (hash: 0FkLAj5wepnlrTHbT8freYwSEALt3SIuuxDXD7TpUMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:17:0e:57:cb:dd:c9:6b:49:fe:2e:a3:61:3c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
        Validity
            Not Before: Jul 28 21:01:13 2026 GMT
            Not After : Jul 29 21:01:13 2026 GMT
        Subject: CN=47523016dc36928b72848714cb1040ef899c1d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bc:71:f0:6d:0f:00:98:d0:ad:81:11:48:6e:
                    77:eb:91:93:c4:aa:b2:f8:9d:36:61:b0:80:64:c9:
                    03:ac:e8:6a:2a:c9:af:ac:7c:67:97:47:1b:ba:e8:
                    1b:77:6a:4e:b4:03:aa:5c:88:d5:cb:12:9c:08:4e:
                    ef:43:9e:5b:c8:b6:fb:71:65:33:46:99:64:fc:60:
                    6e:c6:ab:d7:e6:a1:d3:15:fd:a7:e8:c2:17:2a:35:
                    d1:e5:81:52:b2:5f:27:70:dc:bd:4f:76:9d:58:62:
                    46:be:35:aa:99:60:95:ad:7f:78:46:a3:54:6f:dc:
                    7a:f1:21:ed:e9:3c:27:6f:96:01:1c:b4:74:d6:c4:
                    20:f6:1a:0f:ca:e6:43:c4:c8:e1:51:19:71:cc:7a:
                    d3:20:e0:f6:e4:4d:64:cd:ff:67:18:c5:fa:2e:04:
                    5b:f7:f8:4c:08:2e:31:1d:a5:ef:37:56:f5:ca:0d:
                    5d:eb:03:65:6c:01:c5:a9:ed:d1:ad:08:08:91:cb:
                    e3:ff:cf:60:81:4f:cd:67:30:a9:29:13:9f:45:9a:
                    f8:3e:b7:1f:07:56:5b:ef:94:df:4c:f7:20:3c:4a:
                    1b:43:e1:40:92:61:83:67:af:eb:33:51:1c:d5:42:
                    0e:2b:7d:61:36:56:df:fe:53:e4:29:36:fd:ed:8b:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:52:30:16:DC:36:92:8B:72:84:87:14:CB:10:40:EF:89:9C:1D:5A
            X509v3 Authority Key Identifier:
                keyid:16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d4:94:b2:50:65:9a:a3:68:e2:cc:fe:bd:9a:62:d0:22:f0:
         64:b8:d3:3b:83:7a:e5:b9:84:cb:2f:15:5d:b1:ad:8f:b9:7f:
         84:23:18:14:b6:25:8f:a2:81:ed:ed:0a:0f:ef:b1:f1:84:7f:
         ec:d2:35:e8:80:7f:18:3f:57:8f:e7:cc:0e:81:07:2e:71:4c:
         22:76:39:ec:6f:2d:cb:3e:32:90:90:c8:e7:d1:81:a2:b3:22:
         c2:f5:4d:19:02:89:33:3d:c3:3e:ad:e8:e9:6e:d7:19:ed:38:
         37:f0:06:78:ba:65:f0:27:b3:19:74:fd:1d:fc:8d:f3:17:7e:
         d9:29:f5:f7:e2:b6:e3:52:19:34:b2:73:f8:60:6e:34:20:ef:
         c7:2c:35:f2:1a:7c:b8:a8:2e:76:73:f8:5f:c5:b7:74:48:e4:
         86:99:36:4d:bc:3f:75:24:9d:3f:c1:50:3e:a4:89:f8:6f:05:
         95:05:f8:9b:c1:7f:bf:49:a5:7f:46:62:d7:27:f9:73:8c:fb:
         2e:f8:4c:e7:43:a0:fa:82:4b:1e:c4:aa:21:01:c2:e5:b9:48:
         70:37:69:e9:51:60:06:52:ad:f4:03:69:e8:ee:bd:75:37:ed:
         f3:0d:43:c2:06:c2:0c:34:db:f3:85:ad:d0:a7:e6:b7:25:c2:
         83:1e:b7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:26 2026 by rpki-client