Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File:                     DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier:          QX9CRVgEl+M/J9XMqHeNagW+F5CdgFLDxoaCoCf/E6s=
Subject key identifier:   72:51:AC:41:68:66:D2:51:9F:10:AD:E6:3A:C6:65:38:A5:B6:EC:94
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer:       /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial:       019FA93E284A280F25A4213C9091E58D3710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 15:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:50 +0000
Files and hashes:         1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: D65Ui4ufeYMksilPf6sj86f+U5SpwwZRJvlxpMF5CsI=)
                          2: uTNM_Qx3Kksos1PgtvUNZevyWHs.roa (hash: 5x2Iwvw5H8NZducy/95N1nopK5CCb4aO6OaFpQG4yP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:28:4a:28:0f:25:a4:21:3c:90:91:e5:8d:37:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
        Validity
            Not Before: Jul 28 15:00:50 2026 GMT
            Not After : Jul 29 15:00:50 2026 GMT
        Subject: CN=7251ac416866d2519f10ade63ac66538a5b6ec94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:23:d6:89:af:cb:8c:ed:1b:ff:90:90:c8:
                    bc:26:b0:73:29:30:dc:e2:b6:d2:02:bf:a1:79:41:
                    ad:c8:7a:cb:f0:40:aa:1a:bd:7a:a1:1b:3f:99:9b:
                    91:af:d4:04:8a:22:71:3a:9b:ff:23:d0:80:75:e1:
                    a7:36:69:fa:ee:9b:6b:49:05:0d:d7:8b:31:6b:09:
                    22:e7:ac:2c:c8:58:65:e1:81:1b:9c:28:44:f9:bd:
                    f1:87:83:87:bc:fd:18:f5:83:76:97:ea:14:51:b5:
                    f6:52:ee:42:69:57:4d:7e:5c:52:51:56:de:e3:68:
                    fe:18:15:25:d8:36:c6:6d:da:c4:8f:b7:e4:68:ef:
                    0c:7a:b5:40:23:ef:40:e3:37:0a:46:17:9c:0a:f5:
                    52:eb:4c:6f:f4:b2:67:7b:5e:ef:cc:46:8a:01:81:
                    03:6c:a0:2f:45:66:3a:38:5e:29:b4:d8:ec:ef:08:
                    49:24:4a:90:e6:35:37:78:60:c5:d4:6e:ab:e5:63:
                    00:fb:da:16:3d:8e:09:ea:cb:29:8f:00:e5:b5:73:
                    49:a0:0d:34:07:93:c9:0f:41:41:a8:0d:03:cf:31:
                    d0:bf:a8:17:9f:c5:9f:da:83:e6:cf:cc:af:fa:87:
                    75:7d:25:09:e2:80:e9:bf:49:2e:2e:91:0b:c9:81:
                    d5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:AC:41:68:66:D2:51:9F:10:AD:E6:3A:C6:65:38:A5:B6:EC:94
            X509v3 Authority Key Identifier:
                keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:3e:6e:ce:da:10:4c:6a:55:6a:e5:0d:21:68:0a:83:99:
         c4:51:de:e5:43:42:d4:8d:3f:25:ea:a9:4d:81:5b:e2:b4:d4:
         ab:b9:f3:d4:79:0a:ff:c2:08:fd:a1:54:ff:4b:91:6b:6f:47:
         fc:c8:22:37:90:95:92:6e:c1:33:46:c6:73:4b:b5:b1:43:82:
         6a:b0:57:0c:e5:78:e6:40:93:b3:32:ed:f3:40:05:03:55:e9:
         f3:e8:58:fd:97:1d:86:14:98:42:19:3a:1a:a3:26:00:b6:ac:
         41:1d:12:f5:8c:22:58:c2:3a:bd:0b:df:a6:47:ed:30:7f:31:
         0b:64:62:9a:19:6b:67:02:08:64:b4:e6:b7:70:ea:f7:b3:a0:
         f8:c2:e3:13:96:e7:a9:b9:dc:b9:7e:1e:17:69:a5:86:81:34:
         90:f0:1a:10:a9:3a:a0:bd:6e:5f:1d:6d:d0:63:a8:a6:28:83:
         38:f3:cd:c5:4f:cb:7a:05:af:38:b5:cf:5d:b7:f9:5f:93:2b:
         8d:c7:28:ff:72:87:bf:49:78:95:85:51:17:dc:ce:2d:b6:c7:
         de:e9:f5:03:28:ba:0f:1d:f1:24:84:f0:8e:2c:f2:fd:af:50:
         00:58:3b:69:e6:2a:f7:6f:80:a0:53:3c:85:5c:db:ca:51:54:
         90:a8:c5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:38 2026 by rpki-client