Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File:                     du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier:          V6khuiiGAo3w7LXnij+XkTORXFsdjH/JaN/2nYulZws=
Subject key identifier:   62:C5:CD:5A:2E:23:C9:4C:9A:0B:5B:E2:AA:BF:69:A6:AC:51:3B:85
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer:       /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial:       019F90FF5393A4D2129BE40756BFF1BB15B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number:          093C
Signing time:             Thu 23 Jul 2026 22:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:19 +0000
Files and hashes:         1: 8X-KoCS_CU8kURq_ZAZXVIOmK14.roa (hash: SJRCGCTLI7qRzpMlBdPbpnoh4a93nmWJa23zttRgkJI=)
                          2: ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa (hash: 4mAnuGZm3yJjfvM0MnpTHsToaK6IwB9ToRFiX7Ssoj8=)
                          3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: d53yCahFF+2j391u/5U4cG6u+v1izApYNLr/Ech8FZw=)
                          4: f9BVLAip7ndiLMIkBamn3zQu3IA.roa (hash: 67NYj05lmXLMB7WB8zJUBcnZzB3Nm/KReJjNyPG8c+o=)
                          5: vbJFubKoe57vVKHqUA-HZghNpIw.roa (hash: YCX9UsXniCoP5xRmTzYMDDvpToHqW+Wl+uPQWMRLB04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:53:93:a4:d2:12:9b:e4:07:56:bf:f1:bb:15:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
        Validity
            Not Before: Jul 23 22:01:19 2026 GMT
            Not After : Jul 24 22:01:19 2026 GMT
        Subject: CN=62c5cd5a2e23c94c9a0b5be2aabf69a6ac513b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:9f:53:fd:bb:b9:27:b5:d5:49:dd:98:ae:
                    b3:bf:80:57:d3:df:42:c5:3b:65:8c:0d:e6:1f:00:
                    e4:87:47:2b:01:68:f6:39:b0:4e:20:a8:fb:76:b9:
                    27:5c:77:0e:1b:12:ca:42:1c:e3:47:78:40:49:42:
                    f7:f2:7e:98:af:38:22:ae:5d:dc:c9:72:36:6c:f3:
                    5c:e4:09:9d:47:19:46:5b:87:b8:e6:c7:10:88:e0:
                    88:84:09:e2:21:fe:42:dc:ea:49:bf:ef:63:c9:89:
                    50:cf:60:36:d8:97:ce:c6:fc:dc:41:ce:57:89:07:
                    19:96:f1:b3:1b:21:95:73:21:26:0e:fd:82:5f:6d:
                    0c:f6:b0:e3:d7:d6:1e:27:0f:79:81:d5:24:aa:6a:
                    f4:02:9d:a5:00:50:a6:07:05:8f:d2:4b:da:ef:f0:
                    85:d8:07:38:c7:fe:cf:fe:10:b7:4a:ec:20:95:d9:
                    13:82:ff:a0:65:10:a3:34:7d:b5:44:00:87:9f:b2:
                    d2:67:62:cf:ef:6b:2a:78:aa:28:31:14:f2:41:94:
                    12:54:95:36:9a:a4:a7:1b:4e:dd:e5:3e:39:d8:83:
                    13:7f:dd:d6:6d:b0:ed:00:66:fc:25:f4:52:20:9c:
                    47:cd:61:87:8d:d0:b7:c3:5e:01:9e:0d:44:ff:f2:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C5:CD:5A:2E:23:C9:4C:9A:0B:5B:E2:AA:BF:69:A6:AC:51:3B:85
            X509v3 Authority Key Identifier:
                keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:49:19:24:c0:68:55:e0:a9:17:23:2f:73:de:e2:77:4b:ec:
         e0:d4:92:2b:77:69:a0:36:95:d0:85:00:fb:a2:d2:3c:12:c6:
         59:29:79:8e:03:40:62:bf:9f:3e:0d:b8:5d:c6:7e:39:69:b9:
         1d:83:bd:b7:00:ec:35:20:f7:e6:fa:9e:16:2a:59:1c:27:73:
         2f:73:06:6e:9b:56:eb:fe:9c:d6:b2:84:f1:fe:88:f3:5a:b8:
         26:86:18:40:42:5f:da:da:07:1d:9a:bb:ec:28:b9:73:7c:4e:
         4b:f6:fb:6f:a2:fe:db:5e:ea:95:25:a4:e2:36:91:5d:3e:b2:
         d7:ff:55:3a:0a:7a:a1:c9:84:1b:34:1c:1a:51:9c:aa:ea:88:
         60:10:f4:3a:06:bd:5f:f0:5a:7a:23:ce:55:53:2d:75:e7:ac:
         90:9b:15:be:e1:28:b4:63:6a:e2:8e:06:09:9e:3e:73:e6:10:
         c0:d2:9a:4b:95:0a:70:48:a7:0b:c2:1d:34:23:13:e5:05:1d:
         03:14:0b:fa:f8:d9:9b:72:7d:a9:20:cb:9a:e2:5d:b6:05:39:
         97:ac:8f:dd:8f:10:9a:ec:c9:9c:5f:76:35:5b:7a:ee:b8:5a:
         90:67:94:32:0a:12:4f:8d:8a:8c:cc:6a:f6:80:15:18:9a:ab:
         7f:2c:44:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:01 2026 by rpki-client