Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File:                     mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier:          4HjDxUGQWOa2mlCXk8G7yY2QAcXFiKMxyLTa1c65ptI=
Subject key identifier:   C8:5D:E8:CC:B3:66:44:A8:03:91:B4:6A:ED:E6:84:2A:22:7C:72:76
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer:       /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial:       019F90234253310694276A5DDB262B2179B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number:          1539
Signing time:             Thu 23 Jul 2026 18:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:57 +0000
Files and hashes:         1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=)
                          2: _aGsIkHdm69JuDVPQz7v4_sNbPM.roa (hash: OlUUaLGTOWMuneie8M0isdkVhnsbncnaYj7jEv7cF7I=)
                          3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: dCoKow6ZLZDguMubf5THwYIt7U7Ww56FOgtazUBjoTE=)
                          4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:42:53:31:06:94:27:6a:5d:db:26:2b:21:79:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
        Validity
            Not Before: Jul 23 18:00:57 2026 GMT
            Not After : Jul 24 18:00:57 2026 GMT
        Subject: CN=c85de8ccb36644a80391b46aede6842a227c7276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:f5:1b:bc:67:b8:3b:05:75:ec:e3:10:43:
                    8b:5b:68:77:63:a5:a5:ae:08:24:1f:b0:76:4e:33:
                    50:44:21:e2:15:e7:ae:3a:25:4a:c6:1c:00:f3:04:
                    fa:f3:86:63:71:0e:eb:8e:b5:a8:f7:fe:c5:03:b2:
                    36:59:42:26:dd:13:9f:05:d1:a2:06:a7:98:3d:6f:
                    53:ac:24:8c:d0:fd:c7:02:9b:49:d0:44:ec:aa:97:
                    06:21:92:97:4c:44:8a:d5:1a:29:6b:e8:6a:b9:9f:
                    47:d4:26:d3:60:7b:d0:5e:eb:da:2a:35:6b:fc:e8:
                    d9:9e:3d:8c:0d:1a:91:45:56:94:bf:e3:ec:29:ef:
                    1e:a7:90:b1:87:ca:bf:7a:7e:47:32:e2:ff:9c:ab:
                    78:c1:ae:37:61:7f:34:0c:4b:a0:82:ed:04:27:cd:
                    e3:a5:32:62:ca:e7:c8:e4:6d:b6:d1:27:a7:76:fe:
                    b5:8c:11:9d:a0:5a:95:53:80:2c:10:37:e6:c1:ce:
                    d9:ac:9b:32:8a:aa:7b:0b:04:d3:3a:47:59:fa:1f:
                    08:da:7a:2c:0f:26:37:93:7f:f8:30:f7:23:e1:ac:
                    5f:04:5c:ed:85:73:69:5f:fe:fb:c9:3a:08:a5:d5:
                    cb:05:62:6b:87:3b:e6:43:a5:9a:f2:c8:ed:dd:84:
                    c9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5D:E8:CC:B3:66:44:A8:03:91:B4:6A:ED:E6:84:2A:22:7C:72:76
            X509v3 Authority Key Identifier:
                keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fd:ce:86:f9:db:33:d3:3b:3b:1a:74:ab:31:2e:af:0d:0c:
         50:71:4b:51:bb:d5:bf:34:74:4e:db:f7:31:f5:31:f6:c6:d6:
         0c:fa:98:70:58:60:bf:e3:40:6a:0d:8a:a5:82:9b:75:39:08:
         24:b1:e4:0c:40:fd:6a:88:21:cf:f9:80:45:a6:5f:12:a6:92:
         36:21:4b:eb:44:6c:0c:ae:10:38:92:4d:44:fd:e2:04:b0:15:
         f7:21:f7:76:9f:e7:5c:25:4b:aa:47:76:7b:7b:7e:d9:38:67:
         72:e6:af:94:ed:02:64:2f:29:cd:e5:3d:cc:63:2c:17:24:a4:
         46:96:02:d7:a9:de:35:b7:1f:63:a7:a3:b5:e8:a1:eb:ad:ff:
         4a:2c:7b:31:7f:cc:74:d7:57:26:5f:1d:5a:69:3a:68:fb:d7:
         d2:2f:d5:13:fd:b4:38:57:13:48:35:79:90:18:6e:20:36:a6:
         70:34:9b:ad:66:d3:74:a1:a4:35:82:2b:ee:8d:8b:1f:96:c9:
         c2:9b:4f:db:a2:8c:c3:ca:50:d7:f2:02:95:e6:f9:68:6d:a7:
         74:73:e9:ca:9d:0f:b5:28:27:07:9a:e9:1a:87:b6:e7:7a:99:
         aa:01:27:ff:cf:72:cf:60:42:bd:2b:8d:aa:b5:f2:fd:0b:92:
         b9:01:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:01 2026 by rpki-client