Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File:                     invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier:          /nOkeuqvxLr1p0pkeqalrmIF3G2ymZQ/fdHkHMD6PJ8=
Subject key identifier:   81:D1:90:D5:BB:5F:E9:B1:E6:64:BF:C3:95:F4:28:92:76:98:89:71
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer:       /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial:       019F91DA83A2700E70C779C4F3918DBCB99E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number:          0758
Signing time:             Fri 24 Jul 2026 02:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:44 +0000
Files and hashes:         1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=)
                          2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: hpjIXZw4dw0nfLYhOFvkhCj/ksQMcGsAvNbLecHv5N8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:83:a2:70:0e:70:c7:79:c4:f3:91:8d:bc:b9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
        Validity
            Not Before: Jul 24 02:00:44 2026 GMT
            Not After : Jul 25 02:00:44 2026 GMT
        Subject: CN=81d190d5bb5fe9b1e664bfc395f4289276988971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:59:b3:d2:a9:8c:11:cd:c1:3c:9c:ef:1e:
                    d3:0f:23:37:41:a4:9c:0a:9d:6c:5b:55:6b:bc:c9:
                    4d:77:b4:84:9e:f7:c6:95:60:34:4d:c0:63:21:c1:
                    65:2b:24:ee:a2:ae:81:73:e5:43:2e:72:5a:4f:9c:
                    a0:14:5d:9d:ea:f8:cc:df:f1:72:85:fc:a7:4e:c7:
                    17:68:a1:c1:75:aa:72:19:e4:f5:fc:a7:a1:90:f0:
                    9d:2c:61:c0:7b:02:bd:ee:95:a1:65:7d:38:3d:38:
                    59:b0:c1:de:62:17:0a:95:03:b2:fb:4f:7c:a2:b9:
                    f3:9c:98:9b:b4:9d:6d:5a:6f:62:31:c4:c9:df:86:
                    39:12:a0:5f:93:72:6a:69:4c:b8:e8:d2:a8:07:20:
                    93:0d:0e:2f:08:d3:4c:10:c4:ea:80:be:dc:94:8f:
                    a8:86:7e:f8:0a:c5:09:76:7b:d8:dd:ff:76:59:21:
                    8a:da:44:8c:ba:3e:e3:33:dd:f9:92:22:a4:0d:c2:
                    e3:66:ff:b6:d3:45:50:0b:de:bf:c4:59:18:c1:4b:
                    fb:54:8f:31:a2:b7:f6:1b:f1:63:28:7e:c1:e8:5f:
                    c2:07:49:70:c6:36:c5:27:92:f8:0d:89:ef:c0:b9:
                    d7:72:23:1f:be:95:34:54:20:8b:8a:d4:1b:ad:d5:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D1:90:D5:BB:5F:E9:B1:E6:64:BF:C3:95:F4:28:92:76:98:89:71
            X509v3 Authority Key Identifier:
                keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c5:7b:f4:b5:89:51:9a:6a:50:9d:6b:85:4d:c4:10:34:40:
         46:07:71:30:41:91:fc:d1:f1:13:4c:49:ba:25:ea:26:fc:6f:
         ec:b4:cb:40:d4:3b:0f:17:f4:a4:16:1a:28:84:1f:4c:cd:e5:
         8b:f9:63:7c:c3:6d:a5:7b:87:b0:b5:84:70:6f:e6:f6:84:8a:
         4b:9a:ce:a9:f7:81:b3:70:50:63:2b:de:4d:31:42:3e:5b:37:
         c6:27:7b:16:1f:4a:4e:0c:94:ac:19:bd:7c:f2:f6:bc:26:21:
         5a:ec:e3:53:be:29:de:1d:9f:ed:e6:45:f5:dc:ed:fa:db:89:
         32:a6:14:da:67:6d:47:a8:57:2a:84:dc:b5:00:0e:dc:96:00:
         90:da:d9:2b:ae:63:d2:1a:49:13:b1:8a:af:ec:0e:72:d3:d3:
         db:7a:94:a8:fa:76:44:c1:ec:bb:89:ce:10:c4:00:0e:18:3b:
         70:10:6b:2f:44:7d:0e:5a:8d:b2:42:76:65:67:a9:a9:31:50:
         24:fd:7b:d1:ff:e2:4e:bb:72:89:8b:b2:a3:6e:2f:de:63:53:
         df:ce:37:ac:3e:dc:01:30:50:da:34:ee:ce:3f:dc:ef:11:e4:
         73:16:13:18:17:47:cc:fa:e3:0f:94:18:70:3e:fa:50:5b:2f:
         3b:7c:ea:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:00 2026 by rpki-client