Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File:                     bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier:          ft4JYaM3wWa7PQHr1Ynilc2GEIe1T/xQNmgVnraJmnE=
Subject key identifier:   BA:C9:A9:CF:D1:E4:8B:19:AC:71:AB:11:F5:75:FC:99:51:A5:9A:78
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer:       /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial:       019F927F84FE649287CC279CB4255F5961C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number:          1785
Signing time:             Fri 24 Jul 2026 05:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:58 +0000
Files and hashes:         1: 1-YrYrU78JVrBQu4b-JvMNXte1Y8.roa (hash: T19rFV+NYifOvJLKtfb/jn8yzfjpP/9o/emwcX4dW0M=)
                          2: 2X2qjtlvWrh-i63OX0duW0X7RUQ.roa (hash: fEDF/KXuTjDM56u/FoBt/YnMpIHjrDBH/KrLWrRIe+4=)
                          3: CgnPVoz_nSq_2jl8rVPXhU6NRRQ.roa (hash: ReEo9rp4x3coc8Tyv/m0USlR6KR0jZ84qGX2CKHn4jw=)
                          4: WwPaGaQpisjEnRGrMLRHcOFL-Fs.roa (hash: 5IoEhSgKYc9VUWIcxC0NxkfJGhGKKPJuUdqSQvnAiQA=)
                          5: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: imNpdqcwRUw38baOkh47mZyUVlp281+AJzTJLM8Crhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:84:fe:64:92:87:cc:27:9c:b4:25:5f:59:61:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
        Validity
            Not Before: Jul 24 05:00:58 2026 GMT
            Not After : Jul 25 05:00:58 2026 GMT
        Subject: CN=bac9a9cfd1e48b19ac71ab11f575fc9951a59a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1c:3d:72:99:be:3d:72:d1:76:99:e7:ef:81:
                    16:14:34:1f:05:02:29:f6:a7:51:73:79:f6:5d:07:
                    4c:33:86:fa:c9:d0:15:e3:08:5e:68:20:76:39:f7:
                    bd:02:c5:c3:21:16:17:63:2d:fa:72:9d:ad:91:b3:
                    d3:a4:4f:27:7d:a7:4b:d7:55:30:84:1f:7e:9b:0c:
                    1e:b1:1d:40:7b:b9:e3:82:5c:47:8c:8f:8f:ca:85:
                    ce:91:ac:d9:8b:3b:f4:43:5f:5d:fc:8c:ee:bb:5f:
                    00:c4:c9:71:96:c2:42:e8:df:09:af:d8:95:db:ee:
                    53:13:59:0b:18:3a:e1:72:4a:fb:b0:80:db:d1:1a:
                    de:a3:35:c5:34:f1:c0:fd:16:42:8c:5e:81:ae:24:
                    39:78:a7:3b:d2:60:22:03:3d:6b:ab:cf:3a:38:38:
                    85:08:0e:24:57:e5:70:f3:31:55:3d:88:45:1b:29:
                    fd:b9:95:2e:ca:98:dc:3f:ef:e9:75:3f:0c:b0:af:
                    d7:e3:47:4e:04:8b:e8:a7:a3:fe:34:db:69:3e:fa:
                    08:1e:61:1b:42:ef:f0:54:df:4b:34:ad:ad:d6:d9:
                    07:7c:8a:22:8d:a8:21:44:bd:cc:2e:84:f0:d5:9e:
                    e1:78:47:95:7e:49:4a:72:0e:82:eb:60:4e:ac:3a:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C9:A9:CF:D1:E4:8B:19:AC:71:AB:11:F5:75:FC:99:51:A5:9A:78
            X509v3 Authority Key Identifier:
                keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:93:4a:ab:f6:a1:44:c8:9d:87:2d:3a:05:2f:36:af:aa:86:
         1b:c3:f4:24:cc:df:f0:38:b5:68:b6:8c:6e:44:4b:8e:ca:59:
         07:90:e2:ed:53:d7:6d:4f:14:c0:b8:05:6a:d1:08:50:b2:08:
         fa:97:73:48:04:e6:5a:42:81:a2:4e:d7:77:8e:7d:40:5e:10:
         ab:cc:94:91:19:dd:76:a0:64:5f:f0:34:f5:2d:32:47:8c:c5:
         4f:76:b9:aa:bd:55:77:11:3a:1c:dd:8b:fc:92:19:e5:f2:b6:
         e4:c4:dd:8b:a0:2e:ae:c0:f7:7f:3a:07:6a:65:78:5a:a2:32:
         85:cc:6e:22:46:ee:7e:13:38:cb:55:29:a7:9e:9f:4f:c2:d5:
         2b:c3:e5:9a:de:0a:c1:55:35:45:0b:20:b3:d3:1a:90:41:92:
         54:e9:38:73:f6:f8:41:f2:44:ce:ed:4b:50:0d:70:07:82:d0:
         f6:68:0f:5a:5d:28:ce:47:1d:8e:22:2a:b7:71:71:51:76:da:
         2d:d0:a6:82:57:b8:8b:e7:c9:20:dd:18:35:2a:f3:0a:54:d0:
         6c:5e:ab:7d:86:8c:f0:40:09:3f:f2:3d:64:b5:0e:42:b8:11:
         e8:45:df:b5:9f:7e:d6:10:6e:df:af:3e:3d:5f:e4:76:49:b4:
         7e:e0:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:39 2026 by rpki-client