Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File:                     38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier:          +jDdYrf7wCSTSKVomoZlTRK9bJYZ3+ffwXeo6+9SFBc=
Subject key identifier:   2D:40:92:AB:5C:7D:F4:0D:F2:F1:FB:58:D1:0E:06:57:15:85:C2:B1
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer:       /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial:       019F8F7F738AF0A68DB055263C6CE18E827C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number:          12D0
Signing time:             Thu 23 Jul 2026 15:02:02 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:02 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:02 +0000
Files and hashes:         1: 1-RlwPgkm_UvcXOCMS-B-tCjFDd4.roa (hash: JIVt8LRE4P4teDbJAFqyE2U6gD9MsbOuAB3Fl+sGOjU=)
                          2: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: Q1QiPtp5oSoVsVZN+5GUEQOFt4pH/ZnEclaOJe1WPFc=)
                          3: DCqCb_mFehnRF04MWwWhiZGFy2s.roa (hash: hBwRUVH63MvIYesZ1GBehKeF1wWcH7teYvi7RaedN7w=)
                          4: fPQVF7ZndJOXR689OYjsA4HroQE.asa (hash: hPNOyWW6q8UcI5eWp2HdGBUdR6sF1OiKH8X6IdTh8PQ=)
                          5: wCxCDwUCOQsdlSNMlK0k4YI2tx4.roa (hash: rTTIUnsFLtdqF3QLDJSJAUZc2UdnIsqTTuD5CypPI48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:73:8a:f0:a6:8d:b0:55:26:3c:6c:e1:8e:82:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
        Validity
            Not Before: Jul 23 15:02:02 2026 GMT
            Not After : Jul 24 15:02:02 2026 GMT
        Subject: CN=2d4092ab5c7df40df2f1fb58d10e06571585c2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:de:d0:b3:e1:75:68:29:22:b2:73:cf:95:
                    71:12:87:44:ee:9c:a9:a2:f4:61:ed:0b:90:2b:dd:
                    18:bf:7d:09:83:85:aa:ad:fa:4e:7a:68:06:f3:57:
                    fe:51:04:32:9e:67:14:aa:aa:e1:ac:e5:5a:b9:d8:
                    77:6a:c5:c1:83:61:c3:b6:48:c0:af:38:0d:ed:1d:
                    9d:72:06:27:8a:5b:60:2f:b7:66:7c:96:6c:da:eb:
                    9a:7d:9b:8a:52:99:e8:af:51:59:b6:46:d8:7c:28:
                    50:ec:0c:57:cd:3b:b3:a8:5e:19:1f:af:dd:ae:8d:
                    f7:36:bf:41:7a:61:39:dd:4c:bc:d9:32:8b:1b:04:
                    3f:c9:d8:09:2c:af:bf:b9:d6:9f:28:3f:c2:39:c3:
                    e1:f1:9f:a8:91:2f:be:01:3e:5d:39:8c:25:32:07:
                    bb:52:4b:3e:29:7d:c2:ce:e2:9d:e5:40:ee:0a:e0:
                    23:3b:c5:f5:92:a8:c8:74:f8:a9:a7:b8:e4:8e:29:
                    a8:18:6d:28:c3:ee:98:78:72:03:1b:0d:52:9d:5b:
                    ae:78:e1:82:37:5c:6b:80:97:82:38:40:49:b7:1d:
                    13:15:96:fd:47:4e:98:a3:7a:14:d8:a0:93:24:02:
                    56:b4:7c:82:91:8a:e9:88:29:e2:c9:06:98:6c:b9:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:40:92:AB:5C:7D:F4:0D:F2:F1:FB:58:D1:0E:06:57:15:85:C2:B1
            X509v3 Authority Key Identifier:
                keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:63:3c:c1:36:3c:80:35:44:65:ae:e4:36:c0:2b:20:4b:c0:
         3e:8d:c3:b0:76:06:5c:91:df:33:37:cf:ab:4d:ca:d6:20:4e:
         45:09:d7:2e:7a:97:ef:28:d0:26:42:a8:ca:89:75:23:e2:61:
         61:bf:a5:91:57:fa:fe:d4:50:3e:82:1b:ac:40:73:0b:3a:bc:
         21:bf:ca:fe:a5:0e:f1:4f:ae:7b:12:78:57:de:6a:c4:91:1a:
         57:61:78:fb:19:5c:a2:0c:68:7b:b3:ab:a5:9a:de:5c:ac:9a:
         67:60:e5:3a:6f:34:2d:2f:8a:4d:45:07:c3:e4:b9:3d:62:32:
         32:fa:81:7c:fc:70:7a:69:4e:8f:aa:e9:c3:34:f0:1d:40:1c:
         73:19:0c:17:54:8b:ca:a3:25:82:11:7a:83:f9:46:ea:7d:40:
         4b:53:cf:7f:e1:03:7c:4f:c1:83:ee:99:0c:d9:87:97:da:7a:
         2a:1d:ef:cf:48:d7:25:a0:e0:84:84:99:08:ab:87:61:db:a3:
         66:c8:a5:4c:76:c7:2e:04:83:d1:57:c3:b2:c8:20:69:e7:2e:
         a6:c7:02:3d:b0:8f:57:d8:c7:42:64:7c:c0:2a:19:70:6b:28:
         38:cf:f6:a6:5b:c8:8c:04:e2:3e:f2:72:dd:37:e1:d4:68:7e:
         cd:09:a2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:15 2026 by rpki-client