Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File:                     1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier:          CK3SxfXwrc5yRBThts6DO7xWKjQ3e0zq5EAjVH5jVZs=
Subject key identifier:   0B:8E:09:91:CB:24:F8:87:EA:9E:B3:BC:F7:2A:1F:F7:07:79:02:D5
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer:       /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial:       019F909143AD0233AB8CF91847AAB0D971E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number:          17AC
Signing time:             Thu 23 Jul 2026 20:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:06 +0000
Files and hashes:         1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: 30ooBCJWl/tXPsw5lYbQ62gIoZ9/jMTxrdVjLp0/jhM=)
                          2: q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (hash: 6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:43:ad:02:33:ab:8c:f9:18:47:aa:b0:d9:71:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
        Validity
            Not Before: Jul 23 20:01:06 2026 GMT
            Not After : Jul 24 20:01:06 2026 GMT
        Subject: CN=0b8e0991cb24f887ea9eb3bcf72a1ff7077902d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:d4:99:35:00:93:60:90:15:6b:3f:f5:05:
                    31:be:a1:95:d0:2f:ea:06:2e:8e:d7:c6:22:46:c3:
                    d8:a3:17:cb:a4:a3:c2:3c:82:5c:35:c3:65:bc:7a:
                    54:77:de:40:70:21:af:b8:47:59:c8:09:7a:b8:0a:
                    14:c7:8a:d7:66:a5:25:3a:25:54:25:78:2a:8a:ea:
                    7c:39:10:31:b0:9b:f3:70:89:98:08:ab:cf:4f:98:
                    f8:0e:d0:83:a8:05:09:c3:50:02:93:bb:ba:59:ba:
                    f9:23:18:2e:55:fa:44:3f:8f:e0:23:f1:bb:ba:9f:
                    d0:25:42:9b:bf:df:8f:e5:53:b8:e5:f0:a0:bc:82:
                    84:14:24:1a:56:57:96:b2:b3:6f:af:bc:7f:f3:99:
                    1c:45:0d:d5:0b:95:f1:5e:11:56:1a:59:73:84:19:
                    8d:c9:c9:c8:72:1c:8a:1e:33:f7:00:ee:ee:ca:97:
                    ea:d9:a8:cb:86:96:b0:cf:db:7e:33:53:0c:86:a6:
                    60:dc:0e:9f:50:2c:5d:6e:7e:52:76:05:b6:bc:42:
                    fb:8d:27:92:3b:52:bb:61:41:c8:50:b6:e6:71:15:
                    d5:2f:01:8b:42:88:9b:b4:97:e4:a5:1b:85:8b:ad:
                    1c:93:8e:ed:4f:9c:37:7a:1e:6d:cd:f1:28:f8:d8:
                    06:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:09:91:CB:24:F8:87:EA:9E:B3:BC:F7:2A:1F:F7:07:79:02:D5
            X509v3 Authority Key Identifier:
                keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b5:cf:1b:ed:f0:47:c1:8a:a9:f1:d2:16:75:50:88:aa:94:
         b1:82:5e:e5:da:01:f4:a1:c9:d4:dd:89:19:6a:49:b1:87:83:
         0b:98:00:c6:61:c6:26:ac:88:59:99:02:78:02:17:3e:33:72:
         13:57:68:02:d8:8b:02:a2:41:8e:1f:f4:36:6e:41:67:d9:41:
         6b:c5:b8:a6:c2:a1:81:94:10:86:6c:0c:8b:a9:87:dd:ea:db:
         5c:43:7b:81:ea:3e:fe:e5:1e:2e:82:a0:30:40:a8:91:39:d9:
         be:7d:d6:16:a6:fa:ee:c0:30:d8:da:97:06:ca:88:e0:37:17:
         fd:fc:ca:9e:39:ac:69:49:b4:19:c4:2b:a6:8e:78:a5:af:c2:
         0a:e0:42:1f:fb:ec:d4:4c:39:23:71:d3:93:8d:bb:0e:82:e4:
         a0:e5:bf:8c:99:76:89:40:34:ce:97:c2:e1:e3:70:a6:e2:f4:
         b9:de:77:2e:b2:dd:2b:16:d7:94:ac:13:6e:c7:08:af:ef:c4:
         3b:e9:93:dc:60:07:8b:17:18:cc:a3:ff:08:42:38:5e:02:b0:
         5f:35:65:ae:22:27:ab:5d:c5:95:bc:43:81:ea:8e:05:ef:41:
         42:39:95:16:77:eb:33:07:6a:92:f6:10:b0:fd:de:28:cb:93:
         e0:4c:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:12 2026 by rpki-client