Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File:                     rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier:          OtrfIRPyVRqULxlW6Iz0QowSXyAr5iuQKyJtY0ax+9M=
Subject key identifier:   99:68:F8:AB:8C:34:33:4E:ED:30:0A:02:59:B7:A8:7C:A8:A3:9E:8B
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer:       /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial:       019F92B6B44DBA7364B0B968870F2084D7A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number:          0E04
Signing time:             Fri 24 Jul 2026 06:01:14 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:14 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:14 +0000
Files and hashes:         1: 1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa (hash: makKU1K/a9OvfPTgKGZKj9kwQNZtoAlnHOJ1Bnu95GE=)
                          2: jmBPCb9DTm9fzSzAZ1_mQpVIr-k.roa (hash: FekyEXt0eMF+S2nBvz+51hHLK6v+L5cr1WGH2ZOcpgs=)
                          3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: PY+m0qRi588t2WDRNdlkHeVhjDdKcDRPdRhE2LxjuvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:b4:4d:ba:73:64:b0:b9:68:87:0f:20:84:d7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
        Validity
            Not Before: Jul 24 06:01:14 2026 GMT
            Not After : Jul 25 06:01:14 2026 GMT
        Subject: CN=9968f8ab8c34334eed300a0259b7a87ca8a39e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f5:70:92:f7:76:2c:99:ff:f9:aa:e7:4f:26:
                    f1:fb:00:28:d4:c0:08:08:a5:98:5d:76:62:af:98:
                    e6:7c:78:4f:28:b9:78:b3:b8:a4:1c:24:67:59:5f:
                    4d:ec:6d:f7:79:b6:da:29:61:81:c9:7f:8b:d6:07:
                    9d:0b:27:8f:86:e8:89:3e:61:cd:de:54:f0:0f:24:
                    fc:f4:b8:85:b3:f1:b0:d9:20:a1:91:dc:65:4d:6a:
                    78:19:d9:d5:a7:30:d2:35:4e:2a:2e:83:fb:dd:d0:
                    41:4d:e8:48:ef:47:d4:fd:3c:c2:ba:df:1b:f6:56:
                    01:80:0a:b0:0d:81:b6:22:84:0d:83:01:5f:81:a0:
                    37:af:59:16:e8:47:78:ed:fc:5e:fa:10:11:cf:5f:
                    71:b3:0e:51:42:92:12:eb:c4:a2:73:d1:6d:94:b7:
                    72:2b:d5:20:9b:a9:e7:63:b9:8c:54:65:02:87:b4:
                    a2:aa:cf:c1:65:47:fb:8e:d3:7a:db:9b:38:18:89:
                    e1:ad:75:38:63:30:77:35:ff:1c:97:fd:25:e7:64:
                    9f:3b:45:db:e7:c3:0b:05:8d:86:eb:d2:af:56:c8:
                    fe:41:d6:30:ba:31:3c:8c:62:03:bc:cf:d6:d5:cc:
                    d4:08:2c:97:cf:bf:df:f2:20:8b:be:4f:69:9b:b9:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:68:F8:AB:8C:34:33:4E:ED:30:0A:02:59:B7:A8:7C:A8:A3:9E:8B
            X509v3 Authority Key Identifier:
                keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7c:12:c3:03:f5:82:a6:be:84:33:fc:fa:bb:59:1d:21:cb:
         a6:7a:f1:4b:27:ed:a3:5b:cc:e0:8f:79:a1:43:c8:6e:8d:7b:
         b7:ab:a0:bb:3a:3b:6e:2a:dc:62:31:34:9d:8d:90:46:da:f7:
         81:ec:51:b7:6e:2d:e2:3e:74:8e:c6:27:0e:c9:c7:61:26:d2:
         e5:8b:cf:fc:03:43:b3:80:40:a2:f5:cd:28:15:e5:e4:05:84:
         83:bb:af:c0:4f:63:35:36:36:49:20:e6:6f:1a:e7:80:9d:e3:
         3e:94:35:63:9f:22:31:0e:f7:4d:46:b3:1b:b0:93:f8:07:b1:
         92:eb:67:22:d2:82:82:13:73:54:01:c4:0f:08:9a:54:87:3b:
         03:7f:26:20:a2:70:81:cd:2c:cd:c9:a1:1d:42:7f:32:42:4c:
         8c:22:24:52:08:bd:62:de:41:b5:73:e2:1f:2e:03:07:bf:5d:
         a7:03:15:e2:47:88:de:d4:c2:d7:cb:79:ba:5e:b6:cd:56:7d:
         90:b6:82:9c:aa:bb:27:20:f3:a6:f7:53:76:95:a1:31:8a:38:
         fc:a6:f9:a4:15:fb:5d:89:e6:46:99:9b:03:e3:58:62:d0:5c:
         a7:a4:08:f9:cb:82:2f:ac:ca:4a:f3:2f:e4:e1:5a:13:05:b3:
         76:d7:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:03 2026 by rpki-client