Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File:                     mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier:          uCwpTJ50nOicOd7RqU09PRHInY80hdBQKNfhj2kTOeY=
Subject key identifier:   1B:8D:1A:CB:E0:CC:07:22:44:CD:D1:A9:D2:6F:D8:3F:75:B8:2D:E1
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer:       /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial:       019F9391B6EA236567DA0358B019B7F4CE4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number:          16B6
Signing time:             Fri 24 Jul 2026 10:00:28 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:28 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:28 +0000
Files and hashes:         1: D1heTXn7CKy5zLZ_HwZK9LTU77c.roa (hash: 8+cYEf9ivILDKmKrQsHq9USPOFeHqeF4AHnuJu39UqI=)
                          2: SpSWWIAX_co-S7OGVe4xxOaTumQ.roa (hash: eWFs5jFFJQvUBfi8O0eZY0oTE1BIWFbt9F0ZJ8qa89c=)
                          3: fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa (hash: y1cXN1mGBdJu2MTeUqDUwC/XHDAJM3lueicXGuEYI3I=)
                          4: lBg3_ekP2XBYVM3th5LmKxYKUuE.roa (hash: DDkeLmqGCMtQYRPOsdUTG5xK68Edb+Mfg+tAtB+HqA8=)
                          5: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: N2N7JQUb39xkgHxH49GgWmCDqiHw0/Ce3bFXygdse78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:b6:ea:23:65:67:da:03:58:b0:19:b7:f4:ce:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
        Validity
            Not Before: Jul 24 10:00:28 2026 GMT
            Not After : Jul 25 10:00:28 2026 GMT
        Subject: CN=1b8d1acbe0cc072244cdd1a9d26fd83f75b82de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:bd:c3:cc:98:ee:d8:8a:97:01:fa:39:3c:
                    88:0b:f6:23:ce:bf:8a:8e:4f:78:47:43:8f:6e:47:
                    00:52:1a:2d:c6:74:a9:7a:a2:58:c6:75:de:4e:ae:
                    8c:eb:b2:b2:23:71:43:ae:81:48:b4:02:3f:c1:68:
                    23:90:fd:20:25:fd:fb:e6:0d:ca:cf:89:75:49:4b:
                    5b:4f:71:75:69:4c:ae:6b:e8:5c:12:92:99:83:0d:
                    7f:22:76:d7:95:a6:f6:80:8a:79:17:1a:36:80:d9:
                    b3:84:33:5e:d1:66:77:d0:10:64:f4:8f:5f:19:f5:
                    21:ec:84:c1:58:3d:2c:0a:e6:1a:f7:d2:2f:5d:65:
                    ae:fb:77:bf:ab:a3:37:87:f8:77:54:59:82:8d:5c:
                    b6:c0:e5:84:4d:48:be:3a:6d:d7:3f:46:13:71:6e:
                    a3:c0:06:91:c8:d9:fa:14:5a:c7:67:08:d4:06:f1:
                    dc:fd:69:d6:09:8b:d7:a5:79:59:81:93:d1:5b:8f:
                    2b:31:bb:4a:e2:fa:ef:50:0d:8d:40:25:61:95:f1:
                    4d:b6:63:a4:35:4f:68:3d:26:98:a7:bd:3c:f8:2f:
                    f3:61:01:c0:35:68:3b:a7:62:bb:6f:12:22:c7:97:
                    67:3f:47:40:a4:4d:80:59:ae:55:6b:56:74:d5:99:
                    0d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8D:1A:CB:E0:CC:07:22:44:CD:D1:A9:D2:6F:D8:3F:75:B8:2D:E1
            X509v3 Authority Key Identifier:
                keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:42:d3:10:f6:55:84:2c:3e:8b:d2:e5:e2:36:8f:f6:ac:e2:
         59:fe:09:5d:6d:60:be:af:d2:6b:c6:49:06:7b:26:ca:83:7c:
         fb:8d:7a:d3:72:78:e9:61:91:b5:7d:1a:bb:76:5c:0a:3f:f8:
         e5:87:12:71:64:29:b5:3d:b4:48:75:79:2c:7f:b8:33:49:f2:
         d1:9f:86:69:89:a9:a7:6d:a9:b2:bb:75:12:aa:ae:c0:d8:cc:
         3f:98:6d:0f:60:4a:04:a5:d4:4a:81:62:77:73:f0:39:b5:83:
         53:80:3a:ef:ae:3e:8d:58:d7:34:3f:06:5d:b6:4f:28:91:ae:
         f2:b3:87:11:d3:33:62:ba:d3:a0:6f:81:e0:5c:03:da:3b:29:
         b5:db:92:89:93:88:11:e2:09:ac:65:c2:2a:df:98:4b:5f:80:
         bb:69:c0:f9:be:6a:32:1c:f6:91:ba:e2:fa:65:42:e0:4e:47:
         0a:47:d2:89:87:08:de:f7:ae:9f:00:0a:05:5f:00:a0:1b:9a:
         6e:50:7a:73:cb:ed:af:92:d1:df:17:2e:a5:67:96:75:1f:8a:
         2d:81:c3:40:00:a9:d5:26:9c:af:54:ea:de:2e:17:2f:a1:5d:
         22:71:15:a0:94:95:5d:0b:fe:3e:f0:ba:fb:7d:f6:eb:a8:8a:
         63:2d:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:06:23 2026 by rpki-client