Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
File:                     19sTK0fI7dg_7QLVYedQYEwgsfg.mft (raw, json)
Hash identifier:          dCp8KxH05Xmi/6meEz9YodWn3gA0W9mdAqL70sNLVBc=
Subject key identifier:   0E:E2:74:23:AE:B8:2D:E7:FF:8A:E7:C4:6E:A7:92:1F:7F:80:6E:D2
Authority key identifier: D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
Certificate issuer:       /CN=d7db132b47c8edd83fed02d561e750604c20b1f8
Certificate serial:       019FA975AD091649AF0D10E38DFCF9E46E61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
Manifest number:          0CF0
Signing time:             Tue 28 Jul 2026 16:01:29 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:29 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:29 +0000
Files and hashes:         1: 19sTK0fI7dg_7QLVYedQYEwgsfg.crl (hash: VmSS2ecx4ZUmdKRMO07kzD5DnzxX6MhT06Faswpwukk=)
                          2: mVHhVBL3b2rgETZb9_1hmIJtYoQ.roa (hash: UVnquJ+GGNXvnJEV311l0LcTpr92LD6i72Q9lhofEe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:ad:09:16:49:af:0d:10:e3:8d:fc:f9:e4:6e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7db132b47c8edd83fed02d561e750604c20b1f8
        Validity
            Not Before: Jul 28 16:01:29 2026 GMT
            Not After : Jul 29 16:01:29 2026 GMT
        Subject: CN=0ee27423aeb82de7ff8ae7c46ea7921f7f806ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:b4:a4:71:62:6a:a2:03:2e:a4:92:e1:1d:
                    66:2f:6a:cf:3f:8f:1b:8a:81:3d:b1:06:01:f3:5d:
                    27:67:05:46:a7:ea:41:86:ba:14:98:06:70:8b:34:
                    bb:08:b5:bf:1e:10:86:45:e0:f9:da:5b:b5:55:b8:
                    ba:d4:54:90:5d:44:c0:49:94:4c:5b:2b:1b:5c:1b:
                    e1:c0:55:32:d5:b9:99:81:fd:a5:0e:fb:dd:a6:81:
                    8a:5c:6f:b2:66:04:10:eb:a5:06:86:77:ad:0b:22:
                    fc:ef:f0:9f:24:a1:c3:e8:cf:6a:14:9f:27:01:9d:
                    03:aa:f9:24:11:bb:c8:e9:39:36:cc:9c:2f:9f:ee:
                    d4:d1:3a:84:4c:8e:64:a5:19:16:89:49:f4:90:3c:
                    aa:4a:eb:34:2f:e4:02:0c:44:73:d6:81:4a:18:9e:
                    65:a8:8c:ee:53:d6:3e:34:09:89:d5:c0:ff:76:7a:
                    11:97:31:a5:dc:4c:99:e4:97:5c:e6:70:d7:89:14:
                    9b:a5:c0:22:09:6f:38:b4:4a:c6:92:2d:54:27:cd:
                    7d:b1:b9:ef:33:60:f0:c6:62:16:d4:0c:f5:ad:7f:
                    ad:41:00:0d:60:29:01:94:bd:ee:79:fa:39:6d:7e:
                    ac:0c:f2:5a:0e:4a:5c:b1:36:d6:6a:fd:f1:2c:2f:
                    40:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E2:74:23:AE:B8:2D:E7:FF:8A:E7:C4:6E:A7:92:1F:7F:80:6E:D2
            X509v3 Authority Key Identifier:
                keyid:D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:61:ea:ee:e9:23:f5:21:09:d8:e4:cb:e2:5a:0f:72:d7:7c:
         36:d1:61:76:fb:14:b2:e7:47:a5:46:f4:ac:e2:ed:9a:70:99:
         bf:d6:dc:f1:85:c1:99:1a:1f:12:69:fc:4e:0c:98:0d:2f:a2:
         56:e8:f3:34:8a:f0:22:2e:64:93:56:ef:47:2c:cd:1c:b5:3b:
         b5:32:2d:fc:f9:7b:7c:7e:23:b8:f9:96:4a:c4:20:90:3e:44:
         0f:ad:6c:7a:82:4f:85:8f:13:40:74:ed:18:94:57:6f:3f:12:
         23:c0:87:5b:c7:71:45:80:61:ae:ba:3f:b4:9d:78:cf:9b:5e:
         dd:f7:d9:d2:7c:37:44:4d:90:fe:98:54:5b:a7:43:56:d8:4c:
         2e:80:e7:62:6c:55:c6:33:42:38:06:a3:a2:9d:22:9a:3c:27:
         43:18:42:82:2e:f4:29:ba:76:e1:a0:7f:54:9a:6d:b2:5d:0f:
         41:38:e7:8f:6b:ac:cc:7c:ea:76:7b:23:fb:a0:c1:92:42:10:
         0a:e6:28:6e:63:e0:2f:42:4c:a6:bc:47:30:42:bd:74:89:c2:
         e6:75:d6:8a:7c:08:e3:86:5e:8d:93:9d:ee:8e:b8:1e:73:e7:
         ef:71:d8:a5:0d:f8:64:82:11:2c:a4:df:da:6f:71:58:ae:47:
         1c:8a:c0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:46 2026 by rpki-client