Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
File:                     Jm8xrRcB38ohu_SmXgfyXBzyssg.mft (raw, json)
Hash identifier:          Az6djwFoDuX5aJsYLxQoPtagaF/M2jJO4HNFCADqqQE=
Subject key identifier:   91:79:9E:D2:21:EB:6A:26:AD:51:28:D0:7F:B4:20:6C:E5:2A:13:FE
Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
Certificate issuer:       /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Certificate serial:       019F92B63BF47CF8F3F25C7F3B1CD07CD3BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
Manifest number:          0A44
Signing time:             Fri 24 Jul 2026 06:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:44 +0000
Files and hashes:         1: Jm8xrRcB38ohu_SmXgfyXBzyssg.crl (hash: VIlsEokMT3lhLTk1C+/eGjVrDDMcTckjKcfkHG7smaM=)
                          2: bZ2MoSlfcA_Bg7BrRKE2leLFknc.roa (hash: mlGeYAkzIiaMQu2uNg0bx5zSdfDctbxIGGNO6WnD0zI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:3b:f4:7c:f8:f3:f2:5c:7f:3b:1c:d0:7c:d3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
        Validity
            Not Before: Jul 24 06:00:44 2026 GMT
            Not After : Jul 25 06:00:44 2026 GMT
        Subject: CN=91799ed221eb6a26ad5128d07fb4206ce52a13fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bc:a1:b2:b6:96:a3:02:71:e6:aa:20:dc:7e:
                    c0:88:3e:a5:09:a9:c3:da:ac:03:c5:b6:9e:fd:f4:
                    c6:1a:3b:17:38:86:7e:d4:48:97:3e:18:dc:53:6a:
                    b1:e3:35:60:8a:b1:0c:94:2d:52:0b:41:bb:0e:f9:
                    a8:0f:56:a1:a6:b8:4b:4f:e5:5e:96:c9:a0:2c:57:
                    0c:9f:8a:d9:c8:c3:e9:e3:96:32:1a:38:7e:f9:85:
                    ec:fc:57:0e:5b:3f:60:ba:36:ef:41:af:49:05:43:
                    7f:35:aa:c8:6e:01:98:02:d9:91:4c:0b:ac:56:8a:
                    f5:a0:c0:cf:a4:8c:90:7f:a3:07:9c:9a:b6:eb:9d:
                    6f:40:67:be:43:70:73:ac:01:9b:ce:ac:96:f1:71:
                    1e:83:c0:12:59:83:56:9b:20:5e:56:6c:a5:d2:a3:
                    25:e8:ea:5a:c9:f9:66:d5:ec:29:ec:51:8e:9c:c3:
                    5a:5e:74:26:3a:b8:bf:59:9d:fb:80:90:f1:02:ed:
                    6b:49:fb:41:39:3a:c0:b0:3c:2d:ae:68:7b:cd:cf:
                    15:e2:d5:a5:00:36:fc:08:ed:41:85:0c:9f:83:f3:
                    5e:f9:e8:f4:80:e8:31:47:29:34:45:26:2f:e9:fb:
                    39:2c:83:13:84:16:77:8b:c9:b8:9a:04:88:88:3d:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:79:9E:D2:21:EB:6A:26:AD:51:28:D0:7F:B4:20:6C:E5:2A:13:FE
            X509v3 Authority Key Identifier:
                keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:bd:98:ae:c8:1e:9d:0b:9c:13:81:cb:cf:f3:79:e3:76:
         ad:46:bf:fa:f0:b2:4c:d1:ad:90:2c:d0:41:d6:9f:7e:06:eb:
         60:b2:85:3a:ae:58:31:83:e7:00:b0:fd:6a:9d:5a:d8:40:27:
         7d:6a:7d:63:c9:15:55:cc:85:7e:1e:ec:34:37:1e:48:11:7d:
         6e:8d:52:08:79:be:45:ba:07:11:3d:ce:ba:50:91:ff:fb:3a:
         82:0e:a5:30:f4:fe:c4:82:eb:6b:90:91:7e:31:88:98:a5:a3:
         da:e5:65:9f:74:79:f9:38:e0:96:e0:e2:39:6c:c6:27:87:01:
         1c:35:28:79:78:99:c5:84:76:ec:72:f4:60:b8:f7:58:36:3a:
         c7:60:24:93:95:78:6a:75:05:8f:7f:3d:d2:78:fd:b4:da:13:
         1d:47:db:5a:0b:c2:39:00:e2:08:7c:3e:5e:f8:5e:ad:7b:0f:
         26:1b:2d:2c:42:c3:c2:94:f5:25:9b:18:c3:9a:ea:d4:0f:97:
         2a:91:61:97:33:cd:a2:3e:c3:a4:b5:86:36:d2:fe:b9:d6:56:
         c2:3f:f5:d6:cc:30:7a:d9:26:06:4e:fb:d5:ba:56:15:72:19:
         77:2d:87:1e:b1:91:35:86:5b:5a:e5:91:4b:df:f6:a3:e3:d7:
         21:47:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:14 2026 by rpki-client