Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File:                     1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier:          kMT4I3ZF8dK5rqG+0+fARGI2pSnymGoJ/6lCXdkOi/U=
Subject key identifier:   8A:03:F5:7A:6C:64:F6:78:BD:D0:80:4B:EC:F5:36:B4:F0:9D:84:4A
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer:       /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial:       019F8F4744524D74C969F2202E5F09C557A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number:          19F3
Signing time:             Thu 23 Jul 2026 14:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:40 +0000
Files and hashes:         1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: L4YjlAXvZI50eBNP/e5FSONtS4KGpQlKvpOPEd3sFu8=)
                          2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
                          3: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (hash: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM=)
                          4: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
                          5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
                          6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
                          7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:44:52:4d:74:c9:69:f2:20:2e:5f:09:c5:57:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
        Validity
            Not Before: Jul 23 14:00:40 2026 GMT
            Not After : Jul 24 14:00:40 2026 GMT
        Subject: CN=8a03f57a6c64f678bdd0804becf536b4f09d844a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:85:0c:79:1a:2d:ef:80:ef:66:63:b4:bc:
                    33:f3:c2:4e:ab:a9:b0:10:e3:29:19:55:c4:b2:02:
                    5a:ce:16:80:d7:bc:74:aa:78:43:5e:1c:77:33:1d:
                    c7:39:38:11:7d:a4:b0:52:fa:fa:55:77:6c:bc:93:
                    71:f6:a1:3c:db:54:1c:5f:f3:bb:30:20:68:27:ef:
                    57:5f:36:c3:70:b0:dc:86:19:db:7d:b9:e3:25:46:
                    d1:d9:12:dd:84:1c:af:82:da:31:83:d0:09:d9:45:
                    62:2f:bd:29:76:c7:26:0e:8d:62:4a:0a:45:84:bd:
                    43:9d:a3:01:bf:2a:ce:8b:64:f5:97:d5:39:ac:06:
                    fa:a5:8a:f3:a0:d1:8a:80:ff:2e:84:9e:e0:af:4b:
                    9c:38:f0:fc:1f:4f:95:31:c8:c9:26:65:a1:d1:62:
                    fd:2a:83:81:91:9b:4e:24:19:eb:d0:31:5c:16:b6:
                    27:6f:e2:6a:71:9e:c1:3d:f1:43:e0:9b:e2:e6:33:
                    4b:bb:00:fe:e5:00:7c:ef:b9:f6:04:bd:c6:22:a5:
                    c2:ea:cd:96:e4:c5:27:c5:03:56:23:2f:1a:1e:ef:
                    c7:e0:01:c1:6f:3a:bd:1a:3f:3f:0a:ae:f6:58:61:
                    e9:a5:fa:a2:ba:16:9a:b7:95:99:f3:9e:a6:91:4d:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:03:F5:7A:6C:64:F6:78:BD:D0:80:4B:EC:F5:36:B4:F0:9D:84:4A
            X509v3 Authority Key Identifier:
                keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:dc:6d:67:59:8c:ed:3a:b9:31:4b:b1:34:ad:c9:01:80:
         99:04:bc:12:bc:15:2f:7c:63:b6:2a:0f:fd:de:91:9f:5b:f9:
         01:fc:09:84:1d:a4:c2:70:f6:0a:7e:3d:fa:7c:a6:cb:5f:b2:
         40:bf:3f:9f:8f:5b:5a:b6:4f:c5:43:e4:54:cb:07:3b:4e:e8:
         b4:58:e4:f7:c9:69:34:95:9d:d0:83:d4:15:89:ff:72:b6:87:
         13:2e:21:c5:5a:74:b0:0f:9c:21:6b:40:41:3e:37:23:1a:26:
         cb:2c:74:9d:4d:94:b3:c4:72:ee:d4:bf:5d:c6:af:81:a3:63:
         d8:c3:c4:a1:02:ed:1c:d3:f9:4b:47:bd:e7:1f:3c:f6:5e:e9:
         c5:dc:0d:04:bd:be:9a:49:3f:82:7d:4e:bd:75:43:a1:a1:05:
         c8:ed:4e:a8:54:08:59:ed:34:2a:33:79:0f:02:7c:12:ea:c5:
         9e:6b:3e:3f:1a:42:d5:5c:26:79:5a:60:5b:9c:1e:da:e9:ae:
         36:a9:0e:27:23:11:a7:5b:90:11:48:4f:a5:1f:c6:45:4b:a5:
         29:20:97:9c:01:32:52:8c:25:29:fc:b7:ee:6e:d7:f0:1b:f5:
         19:d2:63:d9:23:43:2d:4c:76:55:5a:df:be:9c:6e:d0:d5:34:
         7f:28:13:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:31 2026 by rpki-client