Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File:                     _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier:          ky0BbsAs2KEcWQ12etKCBbcRZz5zRX9kBPwK/eyS8Qg=
Subject key identifier:   26:E5:B4:F6:62:0A:AE:F4:7E:7D:9E:DF:4C:FD:F6:71:EA:E6:2D:45
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer:       /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial:       019F946D77EA8DCAB7BBACE7C49D2F183DAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number:          16DB
Signing time:             Fri 24 Jul 2026 14:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:29 +0000
Files and hashes:         1: KoZviyPQEL5Xi6gVwYr2Cd9mx2c.roa (hash: fqe8eG4WVuOA3Nqn5E8vEQ5c8f4TyPMKdiIPBRAGwdE=)
                          2: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: m6g79mYHyW0uJyKKZqQkRR3Ztmpkm8Gl+7yXeNbc1YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:77:ea:8d:ca:b7:bb:ac:e7:c4:9d:2f:18:3d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
        Validity
            Not Before: Jul 24 14:00:29 2026 GMT
            Not After : Jul 25 14:00:29 2026 GMT
        Subject: CN=26e5b4f6620aaef47e7d9edf4cfdf671eae62d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:ba:e7:4a:c7:8e:54:ad:c8:be:3a:6b:bb:
                    0a:b3:30:46:73:68:67:25:ef:16:a3:e0:c1:fa:46:
                    13:b5:0a:d7:50:ae:cf:35:7e:4e:9f:bc:21:2a:f7:
                    64:d4:67:d7:54:79:f7:8d:fd:9c:49:54:f4:92:49:
                    73:01:bd:c3:39:af:e1:85:5e:c5:d6:b1:dc:7a:a6:
                    dd:cc:4e:63:48:1c:f6:9f:ff:72:14:af:62:d6:cb:
                    9b:c1:40:e0:bc:31:43:02:fb:cd:bc:58:9f:2b:31:
                    78:e3:19:79:42:5f:c1:27:06:2f:cb:21:86:8c:20:
                    e8:cb:bf:7b:4b:73:42:d6:b8:33:3c:6e:e6:16:09:
                    9b:aa:84:a3:4a:88:41:ac:45:e7:1b:17:e3:f8:0c:
                    fc:41:b7:cf:97:6b:79:95:5d:d6:cf:a8:2c:ea:20:
                    90:49:6f:7e:5c:9a:df:e4:1f:1d:c4:56:21:22:07:
                    6e:6e:73:92:53:0c:e0:5c:4b:21:b2:ca:40:71:76:
                    04:0c:e7:0c:f5:ff:ae:e5:d7:5c:e8:76:76:d1:6e:
                    dc:4c:d2:b5:08:18:99:b8:57:8d:3a:9b:5f:f0:9d:
                    bc:fe:37:94:cc:f7:9d:b1:39:60:cc:d6:da:67:89:
                    7b:a3:bd:86:06:7c:69:47:de:96:d1:97:0a:d8:d0:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E5:B4:F6:62:0A:AE:F4:7E:7D:9E:DF:4C:FD:F6:71:EA:E6:2D:45
            X509v3 Authority Key Identifier:
                keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4d:f1:6a:20:d8:43:02:74:e5:5d:55:d8:41:c3:30:fb:3b:
         62:55:ab:a4:dd:1b:b4:84:05:4d:79:2b:8e:fe:aa:6f:51:93:
         27:e7:6d:5b:57:c4:13:0a:66:3e:d3:b7:2a:17:a1:d4:69:ce:
         b0:15:c9:6a:91:d3:63:d7:d6:da:c3:51:4f:0b:6c:da:52:5a:
         42:33:b7:fb:73:53:4e:13:8b:82:0b:02:0f:4a:c1:03:8d:de:
         a0:fa:99:32:0d:b5:8d:31:c3:3d:ac:e9:8b:2d:52:14:64:6c:
         56:a6:a8:a6:17:b9:e1:d7:2c:d0:3f:51:43:dd:65:42:81:0d:
         09:49:0b:74:c3:15:71:7f:92:78:40:ff:77:bc:a2:d6:b6:8a:
         94:d8:cf:84:b5:9d:61:4a:4e:de:6d:0f:4e:b5:3c:3e:14:2d:
         63:03:ec:d3:03:7f:ec:0c:27:a5:3a:f1:74:c4:29:03:e2:4c:
         af:fb:49:a3:a2:39:42:14:b5:ee:42:f7:50:ba:a2:14:69:6c:
         2b:6f:c6:6c:09:10:8e:d1:25:83:c1:f8:10:ae:9e:1a:5b:d6:
         90:d8:f1:58:44:c7:5a:e1:02:1f:4b:3c:f3:af:dc:e5:ae:74:
         4a:5f:26:ca:bc:3b:4a:e7:9d:6e:2b:a6:66:04:35:54:58:ac:
         3c:d2:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:56 2026 by rpki-client