Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
File:                     m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft (raw, json)
Hash identifier:          mYkn7ag7a9lIdQGmNH8/00aaz0HwDygeaGBP6YT53yk=
Subject key identifier:   05:93:F0:7E:CF:F9:5B:97:8D:D1:CF:2D:19:C9:C5:81:69:6D:CC:87
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Certificate issuer:       /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial:       019F92B6BA51E3355F6B87CA0F97DC83502D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
Manifest number:          14DB
Signing time:             Fri 24 Jul 2026 06:01:16 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:16 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:16 +0000
Files and hashes:         1: 7jj42obFD8RD0DjQ1ozNQQKQyX4.roa (hash: nLM/rezqL1i4yqf0Rz+h3pdwMXHwlPmA9MtXcIXiwTY=)
                          2: CCQOO8anG7WZQ-CMnCxWzdFShTs.roa (hash: M83hlMTeAUf+xS69MU+OXr2z18iSzDUopMQnLTo5ras=)
                          3: gzPjxSV5NT3n9pyhl6YdC1VefSA.roa (hash: mmHPwTp+4ezqtnWysDoJTp93kBZueU6MUxs9A6m03vY=)
                          4: m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl (hash: 0ztq/uQtCkcEDYjXV6UiN0fIhDNBoLfZr84IvGCOIAA=)
                          5: ngZw_Aqalo4a-WBAo61UeGloX7M.roa (hash: s2t7boy4rl1XclJAMGdyD80QMpg5tZS7P2s0Nr+Sbwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:ba:51:e3:35:5f:6b:87:ca:0f:97:dc:83:50:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
        Validity
            Not Before: Jul 24 06:01:16 2026 GMT
            Not After : Jul 25 06:01:16 2026 GMT
        Subject: CN=0593f07ecff95b978dd1cf2d19c9c581696dcc87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:c0:69:c7:1a:13:66:ee:b3:85:9a:08:c9:
                    13:49:e3:e2:d4:50:3f:03:85:92:65:9a:00:63:5e:
                    55:93:60:e8:b3:2d:4e:c2:11:b0:3b:9e:cc:97:a0:
                    fd:c5:3a:46:34:4f:5d:ba:62:6a:26:ac:c8:0c:18:
                    59:1b:fb:7c:80:a7:1c:0e:10:eb:00:1d:17:41:30:
                    e3:35:56:f2:2f:21:65:7c:8e:37:91:ac:3f:50:76:
                    ee:0b:f8:cc:61:61:32:fe:0f:b6:f4:f7:f0:f7:7b:
                    4d:41:42:44:e6:09:4b:17:ed:bd:87:d2:80:e5:e5:
                    7c:ee:29:09:42:0b:e1:16:ed:ac:25:84:8e:72:d5:
                    ef:da:79:f3:ef:ab:a1:4c:e6:54:6b:85:73:80:ba:
                    2f:df:63:ec:58:58:b7:3f:59:8e:1d:61:f6:9c:78:
                    8e:91:45:e5:0e:ea:02:1c:2d:bf:e4:09:4b:4b:ab:
                    aa:4c:65:c8:33:b6:2c:a6:07:52:c0:ac:5c:d6:2c:
                    4e:a6:67:37:a5:de:e2:57:43:9b:6c:6c:5c:51:c1:
                    53:77:80:d9:5d:ad:22:9a:05:6a:76:80:11:d5:23:
                    bd:2b:81:df:22:b5:c5:cc:ee:cd:15:88:b3:23:4a:
                    ca:fd:4b:61:07:f6:02:01:0a:52:99:a5:41:ae:55:
                    76:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:93:F0:7E:CF:F9:5B:97:8D:D1:CF:2D:19:C9:C5:81:69:6D:CC:87
            X509v3 Authority Key Identifier:
                keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:bf:4e:bb:43:b5:35:45:8b:3b:d0:bd:d1:a9:50:88:86:82:
         5a:a8:87:13:b0:a9:fb:52:e5:5f:7e:c1:1d:72:af:cd:ab:31:
         73:b0:60:7c:fb:a7:e8:48:5b:2b:6e:e3:75:27:d5:3e:92:d7:
         a0:a8:ad:82:bf:3a:a3:d4:2b:fa:fd:62:89:15:13:f6:fd:ad:
         92:dc:c1:b6:30:1b:08:35:8c:52:14:9d:29:d3:df:ba:57:4d:
         74:e4:85:5d:6f:38:9c:5d:47:d9:96:51:ec:16:a8:18:c1:54:
         29:21:92:c2:81:f5:a0:7f:de:cb:ae:9b:36:48:f5:9c:98:2d:
         4d:76:dd:8a:b4:47:a7:d1:e7:16:92:cb:0c:20:2c:37:f1:ab:
         0d:85:f4:00:ec:a5:d1:c0:af:8a:67:62:3d:6d:b9:be:06:d1:
         a4:2a:7e:c7:eb:6d:a3:33:da:2e:67:19:9c:db:73:83:75:aa:
         b8:55:c5:63:10:6f:27:47:2e:ef:92:ff:c3:7c:c0:77:45:d0:
         e2:5c:46:05:23:cb:79:61:1c:26:37:83:6a:60:14:41:0d:ea:
         77:35:0d:3d:86:4e:87:e0:17:d0:41:fc:f2:cb:b2:d9:18:a8:
         fa:81:b8:3a:d3:f0:d2:3f:ad:f0:0f:0d:79:b9:88:81:29:1e:
         7e:0a:6a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:58:59 2026 by rpki-client