Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
File:                     1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json)
Hash identifier:          SP/njK8TG2DrOMgeJaeHY9DcCqNEoipJrpyXNJGRszY=
Subject key identifier:   4A:A3:96:43:5F:C7:5A:8C:F3:A1:7B:14:A2:66:71:7A:FE:21:F3:71
Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Certificate issuer:       /CN=d70af942465ff265b896f0d1b762490f27dc322c
Certificate serial:       019F90FF7AE4B66F7B07DB3EC206CD570470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
Manifest number:          1671
Signing time:             Thu 23 Jul 2026 22:01:29 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:29 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:29 +0000
Files and hashes:         1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: 2Wec9OnWFJu9XwIkCFk96zgsqkaQDLDS1j7yCwCi5Jk=)
                          2: pTKY06gWgEXaIu_OYznOKa1SCYQ.roa (hash: DO+JIn1Z+CZdkSG19VC8thtAj3bTLW7VrZO6RWhGcRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:7a:e4:b6:6f:7b:07:db:3e:c2:06:cd:57:04:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c
        Validity
            Not Before: Jul 23 22:01:29 2026 GMT
            Not After : Jul 24 22:01:29 2026 GMT
        Subject: CN=4aa396435fc75a8cf3a17b14a266717afe21f371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:ca:fb:37:09:5e:2c:ea:45:76:49:33:47:
                    20:fd:93:45:7b:38:31:9d:2e:b9:26:d4:47:e9:57:
                    60:a4:62:fc:7f:d0:9c:d7:da:5a:51:a1:67:7c:ef:
                    0b:d7:69:a3:fa:1e:c5:36:95:c2:ad:03:34:b0:53:
                    43:8b:c9:e6:80:85:07:09:2c:b7:ff:2d:a9:0a:ce:
                    ee:c0:fc:48:59:c1:ef:97:35:bc:d1:db:82:5a:77:
                    bc:b4:46:8d:05:30:a1:4a:77:47:ef:a5:7e:c3:9c:
                    c6:8d:cb:bb:37:a8:4f:68:1a:5f:55:f3:80:ad:a8:
                    bf:6e:4f:5b:73:c4:ca:d3:61:99:26:d1:92:70:98:
                    00:64:9e:98:e8:05:05:89:23:9e:cc:3b:6b:b6:b0:
                    ed:e4:f9:1f:93:14:c9:b4:f0:f4:e3:4f:88:dd:eb:
                    52:d7:58:c5:ce:1c:66:d2:26:80:1e:ed:ac:01:a1:
                    99:72:5c:75:ed:75:fe:48:46:09:1c:6f:af:df:bc:
                    44:64:cb:96:f2:82:dc:b4:5c:e5:d5:84:cb:0d:c6:
                    09:d8:38:1a:6d:a5:ad:22:d4:d6:bc:b7:67:8c:b7:
                    3b:8b:7d:7e:17:f3:bf:4b:5e:0b:c2:aa:06:95:b7:
                    4e:d4:16:27:d5:a6:87:7c:c1:25:1d:9e:50:3b:e6:
                    e9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A3:96:43:5F:C7:5A:8C:F3:A1:7B:14:A2:66:71:7A:FE:21:F3:71
            X509v3 Authority Key Identifier:
                keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:08:0f:5d:e8:e5:a0:4c:e5:20:9f:0b:4d:89:6d:71:ee:0c:
         0c:c0:6e:94:e9:24:e6:68:5e:3b:e7:a3:88:8a:b8:5e:16:5d:
         64:f3:90:c3:36:55:ac:f0:f3:54:3f:ca:40:df:2f:43:f8:c0:
         1e:78:cb:e9:87:58:21:ad:f4:fb:8b:d8:c3:ad:fb:1d:87:5a:
         57:35:05:11:81:7b:a3:15:81:e1:b9:25:62:b7:2b:33:a0:7e:
         84:41:11:2c:65:87:f4:14:0f:af:f2:76:f1:c8:e7:2b:e8:12:
         e0:bc:0e:4b:e1:bb:33:6c:9e:e4:91:62:53:9d:f2:2a:d1:42:
         cd:da:e7:be:0d:a1:2b:99:cc:a6:72:b5:fc:a5:27:da:6a:99:
         f9:d4:14:db:65:84:34:8a:0c:57:fc:a7:87:cc:76:2e:21:b8:
         5a:07:d4:65:4b:d6:8e:83:c9:ed:b9:86:7f:62:e6:05:c6:63:
         b9:58:7b:c8:6c:53:08:42:76:33:15:83:a1:f4:f2:dc:9b:d7:
         8d:fb:de:cf:97:8f:f9:31:c3:7a:9f:43:a7:c3:06:aa:76:f0:
         90:d1:6c:3c:ce:6b:2a:0f:fd:b6:a4:82:0e:98:d3:13:f4:ab:
         70:75:36:0e:38:da:3f:72:d7:d0:e3:15:6c:7f:5e:06:ad:41:
         05:0a:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:32:27 2026 by rpki-client