Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
File:                     y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json)
Hash identifier:          L2qgDQ/Vx2AfN1XX5gJN6HvseaqbyPsnDv864B0jPoI=
Subject key identifier:   F2:42:32:B7:17:6D:97:2D:BD:81:EA:EE:36:AE:9F:C2:DD:9E:E3:DA
Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
Certificate issuer:       /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Certificate serial:       019F916CB73A87852A55DA49E6A1C9336D80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
Manifest number:          03B5
Signing time:             Fri 24 Jul 2026 00:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:48 +0000
Files and hashes:         1: 8MxTJlqau9S1ZV5fA_n_hiU2OjQ.roa (hash: ZFi66z5+x2HZHjEf8Mnf2qe4zKNsSEknPsHvSK6VhIc=)
                          2: DNbiYi8RnmHbs53ufR4Wo4EOQD4.roa (hash: 1O4zlMEhLqsXNNh16SOVPGWJLESJzqVd3J7KSAE8smE=)
                          3: EBV1N0nyc3uDjy8VuxK9uZr58ys.roa (hash: Ua/lKqQMivBauR1brwmNmnYyYEQG+PCmKakmmH7OZoQ=)
                          4: wgW5ViWtyw-hcjNoVsfmKE4EIG8.roa (hash: HhTkFaNAcVHstP72WGd6nJS+mIOkBQF6lfIRGmZJYHI=)
                          5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: rrkrRpzTtor12SpGfzMynxuU3jHtZDEdCz+rXowbsjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:b7:3a:87:85:2a:55:da:49:e6:a1:c9:33:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
        Validity
            Not Before: Jul 24 00:00:48 2026 GMT
            Not After : Jul 25 00:00:48 2026 GMT
        Subject: CN=f24232b7176d972dbd81eaee36ae9fc2dd9ee3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7b:84:2c:e3:52:1f:bf:45:44:26:12:c7:6d:
                    4e:c8:da:14:7a:7d:65:92:0d:54:e8:b6:a4:cc:50:
                    6e:e5:a0:97:20:00:8d:39:73:b7:2a:bb:15:4a:f8:
                    e8:2c:58:88:21:d7:d5:8b:26:f9:51:b0:ba:15:e0:
                    ae:5e:c4:e2:c1:32:2f:80:b8:50:c2:ea:ba:c3:9e:
                    f4:5f:eb:db:a0:2d:0f:eb:c8:3d:8f:4e:bf:be:fb:
                    3f:59:f3:ec:35:4e:56:5e:ec:c9:61:90:f4:e1:65:
                    69:61:a3:83:d3:55:3e:fe:40:44:88:f3:37:f6:14:
                    58:9a:60:a9:13:b2:1b:be:87:10:96:c2:d9:2f:a3:
                    a2:87:4b:f8:27:f6:0b:ca:3b:32:4c:d3:86:57:3c:
                    74:8d:b8:87:d5:27:54:16:9a:20:7d:0f:5f:87:e2:
                    cc:3b:a5:92:81:af:d4:ca:e6:03:13:dd:59:a7:c0:
                    42:bf:b2:93:66:d1:3a:3f:9e:f4:bd:ab:7c:a2:9e:
                    5e:fe:aa:1a:b6:f7:7e:47:3c:eb:1a:24:34:33:da:
                    73:1e:0e:1c:c2:75:f6:91:f3:4e:fc:11:c2:d3:e3:
                    3f:26:30:51:3e:3c:de:3c:06:d7:ce:88:ec:c9:7a:
                    44:69:20:86:f5:19:0a:8f:75:09:16:d1:e9:44:2a:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:42:32:B7:17:6D:97:2D:BD:81:EA:EE:36:AE:9F:C2:DD:9E:E3:DA
            X509v3 Authority Key Identifier:
                keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:62:7c:90:40:0b:ee:e7:69:7a:9a:93:4c:41:4f:f5:c5:50:
         d3:b8:7d:28:e2:d2:0e:11:0d:c2:e1:81:64:1b:6d:69:79:ab:
         20:f4:5c:23:a4:e7:b7:db:e3:30:41:75:b1:df:22:70:8d:ef:
         00:e2:0d:92:7d:40:38:4f:e1:72:2c:6f:03:66:e0:7e:ca:86:
         fa:03:6e:e7:a4:bd:0a:49:30:03:94:dc:01:6d:38:fb:de:ee:
         d9:3c:40:ff:cb:7c:c3:fb:65:80:c9:7b:18:8e:82:95:10:fd:
         b0:72:b7:70:71:71:fa:da:35:76:60:a3:64:1f:52:ea:ed:53:
         c5:a4:ae:c4:46:72:6a:6d:4b:87:a7:dd:59:44:d7:66:f7:09:
         e5:7e:3f:10:9e:18:b0:fb:38:cd:04:ad:24:02:22:63:16:b0:
         d4:8f:44:94:c7:6a:ab:57:76:c2:f6:ef:63:96:a1:f8:23:af:
         8f:59:9a:12:b3:d8:31:2e:c7:a0:a1:f5:8e:30:10:49:ea:1d:
         2d:e6:a6:fd:65:e2:3a:e2:d4:4a:aa:9c:96:ee:dd:ea:9f:3f:
         87:94:e0:8a:b2:f8:f3:73:6e:53:d6:ad:a4:dd:1e:15:cd:02:
         9a:45:cc:e4:23:7e:1d:5a:a4:07:a3:77:60:27:e5:40:ee:74:
         de:da:9b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:15 2026 by rpki-client