Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File:                     1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier:          RaoJXHadImhCNyPgAmKvmCJ5jTBFD9o8DivbTc5zmac=
Subject key identifier:   D1:78:B1:68:B6:27:72:7C:83:32:D9:1C:41:73:59:4B:5E:5D:33:EB
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer:       /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial:       019F8F4738AF5571F2C46C933CE04101E055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number:          1255
Signing time:             Thu 23 Jul 2026 14:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:37 +0000
Files and hashes:         1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: lzWxP3qYJj4hJK5ILabwAuh65zz8vWwuc/cqRRj1iMY=)
                          2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
                          3: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
                          4: QiiSVCdXMnX6vtwSolUuExK-3cc.roa (hash: cChw7Ea4muVvJ3EI7S7cdxDZrmiLHAuerCOY8OxPcTk=)
                          5: k7K2nGDuPiO7Se_nhxH46pUsKyo.asa (hash: xc6+rKQG4W4vPyLrCUrae4qpuB00CQX79V15oGw6dqM=)
                          6: nH4QGJOU2j3EPIWo9AxW00IQFnk.roa (hash: IWD2BtbqLOYthCXactOhK7e4mOG0DXsr0Rz/2aTPlOE=)
                          7: wRhtCAAx7zEpmI40CBpFB6CppGU.asa (hash: A0EP5dqJF7oVrfX3OmMuR2spKNhblMpR/3OKbRM6pT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:38:af:55:71:f2:c4:6c:93:3c:e0:41:01:e0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
        Validity
            Not Before: Jul 23 14:00:37 2026 GMT
            Not After : Jul 24 14:00:37 2026 GMT
        Subject: CN=d178b168b627727c8332d91c4173594b5e5d33eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:36:97:63:d3:72:4f:ec:61:58:85:11:7a:
                    a4:e9:32:7c:36:68:bc:94:4d:b0:8b:7b:5a:9f:30:
                    c8:06:37:1d:ec:9c:57:1e:80:66:bb:8a:09:42:e2:
                    4d:4d:c2:2a:4e:38:2c:39:ed:82:17:83:64:9c:c4:
                    c9:6a:c8:17:e6:de:44:db:05:db:d1:a0:67:15:48:
                    61:a3:ed:44:b2:35:14:1f:b6:eb:59:ce:29:81:ae:
                    c9:b9:68:dc:35:2c:58:a4:f6:2c:37:47:ee:27:69:
                    09:95:7e:bd:df:3e:66:54:92:98:54:75:85:2d:46:
                    e9:99:bd:c4:b9:19:63:2b:50:5d:b9:43:46:1b:a8:
                    7f:15:01:cf:4c:e7:59:87:0c:ff:38:01:a6:96:46:
                    ed:ee:6a:69:02:b2:c1:e7:74:ea:5a:c6:ff:98:a2:
                    26:f5:b0:10:fc:ab:24:19:6e:3f:f2:bf:3d:87:b9:
                    7d:9d:b6:07:bb:fe:55:20:83:e5:5c:d3:45:84:ce:
                    98:b7:cf:ea:7d:a5:1c:f0:94:ef:d2:09:2f:01:ab:
                    f5:a2:fe:d9:75:6c:f7:08:6f:29:7e:d3:3f:33:35:
                    e0:5e:5e:27:9c:22:6b:ae:b6:36:3b:ea:e4:a5:6b:
                    fb:10:ce:1c:91:f1:37:b6:ed:99:8f:74:f0:3a:6c:
                    23:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:78:B1:68:B6:27:72:7C:83:32:D9:1C:41:73:59:4B:5E:5D:33:EB
            X509v3 Authority Key Identifier:
                keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:67:01:d5:1c:63:0e:5f:41:07:4d:73:f9:9e:77:b1:38:c5:
         9c:b9:3a:d1:26:b7:f6:6d:0a:48:66:46:9a:85:5f:17:02:96:
         1c:3a:a0:6a:6c:d3:7e:31:1e:03:d8:93:1e:51:7b:18:3a:b4:
         c7:e4:a3:ad:be:12:ef:f7:7f:39:7d:f5:b3:8a:cc:8e:a4:6a:
         9f:5e:5c:65:2b:8a:33:7a:68:d2:be:66:d8:6e:74:d6:1d:ab:
         2a:d5:b6:60:4f:c7:b7:62:10:22:81:c4:b5:74:b6:8a:e3:4b:
         3c:41:ec:1b:c6:20:7d:b7:9f:fe:a8:e0:d6:a8:4f:f4:7c:a4:
         f2:16:f9:b8:7e:3c:2d:0f:0f:45:96:c7:9f:90:7d:c9:6e:79:
         e5:a8:42:9d:3e:9c:1f:4c:3d:15:cd:33:28:e9:dc:74:bf:86:
         85:f8:52:ea:cf:87:07:10:bb:6d:ac:af:00:ae:1a:eb:5f:2b:
         f4:72:d5:bf:35:e3:5d:63:81:bc:b6:5f:56:62:bc:82:5f:e2:
         77:29:56:eb:b2:83:c9:c6:49:99:d0:57:e0:c8:57:34:ea:15:
         5a:fb:5d:ac:ec:fd:9a:bc:2e:ca:ee:56:a4:52:5b:39:5b:a1:
         7d:e8:2c:21:85:34:ea:70:0a:b0:3c:7d:fb:bc:a0:44:63:36:
         18:5a:39:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:05 2026 by rpki-client