Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
File:                     b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json)
Hash identifier:          KL4GoNAjzvCNmzjQsn3y6/yIoMz7zaAZ2mz6PvoJQmg=
Subject key identifier:   AD:34:4C:B8:1F:6C:C2:8F:E1:80:CC:AC:47:B7:D0:C9:FE:3E:B9:DA
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Certificate issuer:       /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial:       019F94A49C3AD3EA01E57F992AE1D208E807
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
Manifest number:          0517
Signing time:             Fri 24 Jul 2026 15:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:43 +0000
Files and hashes:         1: Qiay74MbBLJX0CXXaOcyKRwu1oE.roa (hash: kahuToIQXEZrrTaByaYWat/npZL3xVVcTJ88XatdcNg=)
                          2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: PIJEBW3bKc96ERealDFXEwois42/zp1y5TSE/AUcSPc=)
                          3: wRTMOrkX1ouLA7Ftep2w9MCoso8.roa (hash: ZiDIanCBWcKXO0L8q8SokXWtymLcGL3qIpU5tjdgTQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:9c:3a:d3:ea:01:e5:7f:99:2a:e1:d2:08:e8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
        Validity
            Not Before: Jul 24 15:00:43 2026 GMT
            Not After : Jul 25 15:00:43 2026 GMT
        Subject: CN=ad344cb81f6cc28fe180ccac47b7d0c9fe3eb9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:78:ba:85:35:a7:b1:08:b1:85:97:f2:96:
                    74:76:be:39:48:20:57:88:00:2b:d5:2e:28:f3:d1:
                    85:49:d6:fc:f1:60:cf:bf:a4:39:8d:73:73:af:71:
                    69:9f:4b:a9:f7:ad:36:88:7c:c5:e2:61:c4:f1:43:
                    a5:a0:4c:bc:d1:01:90:10:ca:1f:5a:20:90:fb:1b:
                    eb:8d:25:96:fe:13:fb:15:68:bf:02:9f:f6:d7:f9:
                    3d:ef:1c:86:f9:e7:f4:0e:24:fe:5f:ea:02:0e:75:
                    a9:b5:50:56:b0:6d:dd:d1:55:0b:e2:0c:f8:6c:c3:
                    3f:d9:fe:5c:e1:e2:2d:8b:b5:ae:de:16:43:c6:dc:
                    fd:52:01:97:6e:7d:c1:9a:55:38:64:1e:81:af:c0:
                    65:58:2a:7b:fb:e6:b9:b2:17:ca:3f:e8:f6:18:8e:
                    ce:82:6c:eb:a1:ab:c9:87:70:b0:c5:04:bb:61:15:
                    45:95:f5:91:bf:a1:92:76:c3:40:a3:32:be:3f:82:
                    ad:85:a8:90:df:97:5d:35:63:4c:d0:b2:2c:c6:f9:
                    7c:d6:37:75:96:ff:0d:59:78:97:bb:31:39:af:c8:
                    34:17:c7:e3:a3:4e:36:a6:f2:32:9f:25:81:5c:02:
                    0c:89:c3:01:14:e4:69:0c:06:57:c4:b7:d1:1a:5a:
                    e0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:34:4C:B8:1F:6C:C2:8F:E1:80:CC:AC:47:B7:D0:C9:FE:3E:B9:DA
            X509v3 Authority Key Identifier:
                keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:dc:ff:8e:21:ea:b1:08:64:dc:ec:5f:b3:c1:a9:cf:b4:bf:
         72:83:ff:33:ee:95:95:3c:de:ec:2b:4c:26:ee:16:45:f8:fb:
         5a:16:72:2c:5e:c1:b6:54:b9:b5:b3:a2:a8:0b:b7:2a:7f:33:
         ef:49:be:1e:9d:2e:68:1c:f4:5a:bf:78:86:02:dd:eb:b8:43:
         6a:52:e1:04:9a:c0:ba:e3:d8:1b:57:09:54:cb:66:4d:d9:05:
         59:1b:eb:13:94:a9:4c:a1:82:a6:18:8b:a5:b4:2b:63:86:d5:
         5c:38:4f:0f:9b:b2:11:41:71:9c:8d:fa:59:cc:5d:0b:06:5b:
         6d:13:33:22:48:7b:f6:98:98:8f:e2:93:88:fd:09:b8:83:eb:
         4f:56:07:0d:f1:45:df:9c:b3:a2:e3:51:34:ee:fb:3d:cd:70:
         52:c4:39:23:b0:99:dc:9b:e0:c8:aa:15:d2:64:2e:22:ea:e8:
         69:1e:f1:44:13:df:6c:f7:a7:92:a1:09:5d:9c:47:dc:da:f5:
         57:61:ec:65:7d:f6:5b:f2:96:2a:88:24:dc:5d:8a:92:64:80:
         2f:b8:16:35:8b:c0:1f:f5:84:5d:27:74:05:01:8b:fe:4a:a3:
         5b:94:1c:6a:fc:27:85:4e:66:19:9d:59:04:64:75:6c:41:1d:
         85:43:d2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:04:46 2026 by rpki-client