Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
File:                     hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft (raw, json)
Hash identifier:          UUP2gCLCMHjODm8yr2olmcgIW3GQechSjhlCJrfDrOc=
Subject key identifier:   67:02:03:CB:7A:E2:32:26:F6:21:82:63:16:2E:C1:7E:AA:83:05:67
Authority key identifier: 86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
Certificate issuer:       /CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Certificate serial:       019F935B05F1642C8E6A046E2457E410F4DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:43 +0000
Files and hashes:         1: 1-KU3PGZxoqz7bmdb8n8zsPdaZ9M.roa (hash: nSK3MR0nKS3ZWnxeaioA0vYNesL1Z7ExVBEXWs1Aous=)
                          2: 1fFVsYcVAFE1N-aOz9LEMseJXuY.roa (hash: HOFFlz4KmOgHVJgVvTynlqcaj5gxbBYnLRmD8llTlRw=)
                          3: The51JB1jk7iu3SgU3iebbViaAo.roa (hash: IgvjzXkDcI1pUGZYnrs8Dyz1K9/Iv3JYSfz6oucCdSI=)
                          4: aoK4O5p5TThsIV3yaJN8jIRv9XE.roa (hash: nmrjfUmKSW8e+KfYJ4nX5j5UtlDSvUEZyvXS5XHSEm0=)
                          5: hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl (hash: 7rw+4+Vn/CnDU2z0tnDSUVedbNq9sSQLycLMdDHoszU=)
                          6: tu5qw7pN2svVw6an55fp6xEDFXU.roa (hash: gsnHeRbF1wOKHvFgVL5LAFlPqq/3yDJyXu+yPQETjmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:05:f1:64:2c:8e:6a:04:6e:24:57:e4:10:f4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
        Validity
            Not Before: Jul 24 09:00:43 2026 GMT
            Not After : Jul 25 09:00:43 2026 GMT
        Subject: CN=670203cb7ae23226f6218263162ec17eaa830567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:0d:7e:4d:87:8c:42:51:a3:32:7b:2a:a0:
                    60:f3:89:2f:35:6f:12:e8:35:19:cb:8f:f7:3f:41:
                    cd:94:01:e5:9c:cd:9f:d7:09:c0:ed:a2:b6:7e:19:
                    88:34:3d:06:68:d7:59:9e:01:57:b0:92:0d:ed:17:
                    92:bf:14:c2:5b:30:57:a5:96:28:a0:80:56:6b:07:
                    bf:1c:6d:ea:69:00:81:63:ed:47:b0:ff:60:61:a4:
                    75:01:8c:05:c9:c2:a5:a0:a0:57:11:48:54:63:cb:
                    83:5e:07:e8:05:a4:5d:fc:78:14:2e:a2:fb:3b:66:
                    20:a4:38:00:39:ec:4f:6d:97:d3:3e:42:f6:37:cb:
                    53:96:07:77:60:0f:9b:27:eb:72:65:92:4e:cd:aa:
                    41:85:fb:fa:fd:3a:86:9c:fd:d2:2d:6b:72:8c:30:
                    c3:1f:12:80:7e:7e:3c:01:f7:98:d9:86:15:8f:f5:
                    b1:36:df:bb:1b:8c:dc:c0:fc:16:05:99:4f:5f:2b:
                    77:3a:e9:09:1a:43:0a:49:6c:84:bf:3c:4d:e8:b4:
                    4e:43:2d:ee:b9:ce:35:6f:72:39:10:e7:4d:2f:f1:
                    c8:11:62:4e:39:b4:52:8d:a6:80:c4:ad:61:1d:df:
                    c1:c8:9b:8f:e9:54:05:04:fb:eb:31:d6:f2:76:43:
                    b9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:02:03:CB:7A:E2:32:26:F6:21:82:63:16:2E:C1:7E:AA:83:05:67
            X509v3 Authority Key Identifier:
                keyid:86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5d:6e:72:8e:58:b7:46:f5:d8:77:cd:af:75:42:32:1e:4a:
         69:06:c4:c6:16:af:b7:66:d2:47:8e:06:b6:bc:65:e0:88:6d:
         16:e8:a6:50:de:16:4d:7e:d6:88:03:0b:81:fa:f5:fa:3e:fb:
         f0:57:84:37:6d:24:5d:85:c8:91:b2:63:fa:88:73:43:1e:a1:
         9c:9c:3d:10:ce:d8:76:5e:07:95:3b:d9:13:58:7d:1a:31:ac:
         d4:fc:c1:d8:c3:1d:13:73:30:d4:37:b4:42:e3:60:f3:89:7f:
         31:76:56:e7:53:23:e9:8d:14:01:fa:33:9b:d1:1b:57:dc:9f:
         15:3f:da:33:ac:6b:77:06:90:1d:fa:46:96:8b:72:35:55:9c:
         ab:22:ef:0a:c5:c8:14:74:c1:aa:41:13:b3:ae:ec:b0:4b:25:
         68:8b:0e:51:1e:67:6b:c3:1a:1e:b4:52:2b:0d:63:1a:55:d4:
         2c:15:46:f7:ff:99:27:45:03:fa:d0:8a:e3:ed:e7:a2:4e:ed:
         48:9a:c4:b6:ea:71:07:c2:fc:ee:c9:1c:48:4b:a1:03:ef:9f:
         95:e6:f6:37:c2:d5:7e:8e:60:c7:b9:47:ba:1f:de:f2:47:7f:
         8d:c0:4d:e5:22:27:6b:34:58:da:71:e0:36:f1:a4:30:51:f2:
         b5:50:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:11:09 2026 by rpki-client