Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
File:                     tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft (raw, json)
Hash identifier:          Bt8m8l93SGCVsufThYJrs6x1QIuKB0Vd5U4K7WmABaI=
Subject key identifier:   AF:91:D5:77:5E:AB:F4:55:98:74:72:42:57:57:DA:1F:E5:70:15:6D
Authority key identifier: B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61
Certificate issuer:       /CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
Certificate serial:       019F8EA2991F82264521EDEFB262E810F8CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
Manifest number:          026F
Signing time:             Thu 23 Jul 2026 11:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:48 +0000
Files and hashes:         1: jWmjtGD2Z4RaU3asc-wZbXQbm6s.asa (hash: bGy022JMTuJ7OIunwosKl/bvxi77UE2f0xMastYG87k=)
                          2: tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl (hash: ZvwEg3AZwIpcI/dFdBRI6y/knLNRmUVP4bVWGWaoPaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:99:1f:82:26:45:21:ed:ef:b2:62:e8:10:f8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
        Validity
            Not Before: Jul 23 11:00:48 2026 GMT
            Not After : Jul 24 11:00:48 2026 GMT
        Subject: CN=af91d5775eabf455987472425757da1fe570156d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:71:ba:91:c5:7b:8a:29:df:ed:75:8b:6a:
                    e5:10:25:47:68:1c:31:c5:3a:17:3e:c7:6d:d4:55:
                    ff:d1:83:80:a0:99:7b:dc:a1:70:4c:6e:b3:33:bd:
                    aa:95:17:84:1d:e1:bb:9b:56:f6:d8:1e:e8:82:d2:
                    58:60:56:14:8d:7e:3a:85:1d:71:d4:8c:ae:a3:33:
                    e5:0c:08:3b:f7:dd:98:01:70:54:96:6a:08:98:85:
                    ab:46:cd:38:ff:3e:bf:de:46:8e:e9:49:72:3a:29:
                    25:a3:f2:a2:e1:c2:26:3b:c4:06:9b:b6:db:a6:50:
                    db:0c:93:d5:16:fc:38:cc:8d:4d:bb:f4:0d:51:a6:
                    42:e6:85:2b:79:02:22:3c:c9:ff:cd:97:40:e0:af:
                    ed:a9:ea:dc:99:de:26:eb:0d:94:32:f4:cd:2f:a5:
                    3f:27:89:f6:c1:7a:f4:f8:8a:9c:8d:cb:c4:ff:f2:
                    c6:3f:fc:a4:fc:85:31:b8:68:41:63:38:6d:d3:53:
                    99:29:80:ee:db:4f:d2:c4:05:6f:2c:93:15:4c:3a:
                    5d:5a:9a:c4:c0:72:f0:9a:f8:19:cf:da:88:16:0c:
                    0b:22:b5:c1:e4:e3:ab:9d:75:82:fc:71:4d:78:32:
                    26:d1:6f:52:82:8f:ba:e5:8b:fe:bc:06:32:a1:13:
                    ce:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:91:D5:77:5E:AB:F4:55:98:74:72:42:57:57:DA:1F:E5:70:15:6D
            X509v3 Authority Key Identifier:
                keyid:B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:26:49:58:a3:ec:77:ed:e7:58:32:88:19:60:1d:1d:da:e6:
         16:82:c1:e3:9c:d4:12:ea:8a:4d:59:04:b8:b8:c2:13:87:36:
         41:13:cd:ba:a0:60:21:be:67:f1:71:61:86:21:e1:12:dd:3e:
         50:5e:18:d6:9d:83:3e:00:99:1a:39:06:ab:79:12:eb:f3:bb:
         22:e6:31:3d:5b:4d:bd:78:f0:82:96:75:a0:59:f7:b0:b6:4a:
         9a:1e:44:1d:f7:e1:cd:f5:20:99:36:f6:7a:92:40:15:83:e2:
         a3:12:b5:8a:58:e1:0b:71:01:24:78:28:25:04:60:5a:d0:2c:
         eb:7b:8e:b1:01:60:a6:88:97:96:b4:12:9c:e8:3b:f9:9f:78:
         06:ea:7a:f9:9f:b2:a0:40:73:00:6f:9b:6c:5e:e4:49:77:fd:
         fb:84:f3:e0:88:a7:1b:3f:78:e4:27:bf:8c:3a:be:55:91:b5:
         9b:cf:fc:af:0f:82:9c:9e:07:0c:be:da:91:cb:65:19:18:cb:
         a0:8e:b7:6e:12:49:0c:27:c4:ff:d8:82:08:e9:de:f6:94:0e:
         99:c9:f1:2a:49:ef:70:5b:17:b9:dd:7f:7e:df:25:15:79:72:
         44:d8:b5:f6:1f:c2:10:15:0a:dc:54:fc:2f:74:ff:77:f5:e6:
         1f:2f:fd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:12 2026 by rpki-client