Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
File:                     imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json)
Hash identifier:          9DjCE8rjYWSJXlhVrZatCdIhkNvPy00n82dIPDllA+A=
Subject key identifier:   39:FB:73:33:73:B2:4A:96:3F:D2:52:4B:79:6C:B3:29:F2:9D:7B:98
Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
Certificate issuer:       /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Certificate serial:       019F927FBF2EF0611C51B2CC050BAA10905B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
Manifest number:          05F6
Signing time:             Fri 24 Jul 2026 05:01:13 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:13 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:13 +0000
Files and hashes:         1: NzRA3D4Kn5TIzMbdeBRZj8-3TPI.roa (hash: CfqYoJORgk50J8/a4wFc3Mw6td5sedXHYSUR5haXaCE=)
                          2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: E6t8Jvlgg0GJGcLK7vPf4ANN0NvjQ4BD5JVCP/23Xl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:bf:2e:f0:61:1c:51:b2:cc:05:0b:aa:10:90:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
        Validity
            Not Before: Jul 24 05:01:13 2026 GMT
            Not After : Jul 25 05:01:13 2026 GMT
        Subject: CN=39fb733373b24a963fd2524b796cb329f29d7b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:a9:37:59:39:8c:18:87:b1:e5:1a:77:f5:
                    e6:57:64:3f:13:2b:e1:70:f5:b5:57:b8:b2:fe:33:
                    df:f3:be:8b:39:e4:ab:0f:18:41:4a:b1:b5:54:e5:
                    b7:aa:14:10:c3:7d:de:5e:ca:d9:38:66:82:57:59:
                    b3:eb:6c:31:b3:c3:0a:55:fe:73:f0:39:b4:b9:2f:
                    10:09:09:94:95:d7:ec:fc:1c:7d:5f:05:19:9c:1e:
                    d1:ac:83:d5:20:8f:44:e9:d8:7b:21:c0:d2:80:c0:
                    cb:10:47:9b:28:13:d6:37:55:5e:d9:fd:ab:89:0d:
                    d9:85:d7:9f:93:71:75:11:05:5c:eb:4e:45:e5:98:
                    43:86:4e:e0:02:ec:6e:e9:16:5a:7e:84:d3:89:7b:
                    fb:fc:fb:40:d2:31:e0:34:6c:51:ef:36:bb:2e:1c:
                    ba:a3:93:c7:87:8f:45:06:72:59:44:6d:fc:d8:d7:
                    ab:08:65:73:94:00:0b:65:c7:85:70:30:ca:97:c9:
                    45:8c:aa:b4:bd:1a:f7:c5:fc:d5:e8:fb:e5:55:39:
                    3f:71:2a:9c:27:ce:b4:48:fa:e7:5e:e9:80:2d:ec:
                    5b:23:e6:87:e8:60:8d:11:d9:ac:2c:3e:ec:60:9a:
                    b1:15:c4:c6:34:d8:06:c9:52:d6:46:ca:68:5d:a5:
                    45:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FB:73:33:73:B2:4A:96:3F:D2:52:4B:79:6C:B3:29:F2:9D:7B:98
            X509v3 Authority Key Identifier:
                keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4f:91:6a:67:d2:a1:e8:80:df:db:79:49:a5:95:8e:c3:1c:
         3b:c8:c5:c0:04:50:4b:99:61:78:53:9d:67:8e:04:3e:d6:9c:
         77:9b:fd:b1:70:b1:1d:22:b3:15:5a:dc:24:f8:92:3b:45:25:
         33:77:79:ff:2a:b5:d2:27:f8:1f:d4:db:a2:bc:78:61:0f:ca:
         d2:88:f2:ca:7a:ff:bf:a7:af:f8:59:19:77:4c:7a:42:8b:c3:
         0b:91:dd:e3:fc:55:92:29:1f:50:4c:7b:f2:a8:b4:75:f6:ce:
         e1:1a:15:6b:d6:7a:cd:1c:7a:29:45:75:fa:2c:7e:5d:20:29:
         58:76:1d:e8:b7:21:40:95:58:e3:b3:f8:67:4f:38:48:7d:af:
         07:f4:88:3b:60:71:48:5c:8e:c0:bd:a3:6f:de:cb:9e:31:24:
         ca:a0:4e:3e:d2:6a:fa:27:5f:ed:db:c2:8f:6f:13:8d:da:cb:
         c7:f2:59:5b:ef:92:d7:65:6b:0a:04:d0:ca:27:64:d1:91:8f:
         76:46:e0:ba:53:d5:a5:49:a2:e4:87:1a:67:1a:52:88:43:8d:
         2a:96:d8:7e:ca:90:f4:20:3e:e7:1e:83:df:1c:bc:11:20:d3:
         5e:85:7e:33:6b:cf:14:a3:2d:de:37:7b:db:e2:0a:0d:81:03:
         39:50:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:29 2026 by rpki-client