Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File:                     1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier:          a9FYQqjDZshGjSNpCyrw5AB6bSsvXOoVAx5CXO19Tx0=
Subject key identifier:   63:1D:AE:40:9C:69:6F:47:58:E9:6B:6C:78:3D:20:8B:0A:41:46:12
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer:       /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial:       019F91DABDC99C2AD3B5CA64DEDC0D24B79C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number:          094A
Signing time:             Fri 24 Jul 2026 02:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:59 +0000
Files and hashes:         1: 0P1RjYkUunzUVQsRql-6_fKRzc8.roa (hash: QQ0zolHUVpVnhMPlw+ijSEm88671++BfofXDGkViKYk=)
                          2: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: wHgyUkKSqiGlHQOh9aIqVV4/zisqOJwwx7rzNXaqRSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:bd:c9:9c:2a:d3:b5:ca:64:de:dc:0d:24:b7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
        Validity
            Not Before: Jul 24 02:00:59 2026 GMT
            Not After : Jul 25 02:00:59 2026 GMT
        Subject: CN=631dae409c696f4758e96b6c783d208b0a414612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:ca:41:18:53:32:56:6c:06:14:e2:67:d1:
                    14:cf:ca:33:48:53:c2:e1:d7:bc:8b:d7:07:04:53:
                    32:ce:e3:81:a6:4a:2f:d7:4d:76:39:84:f2:82:7c:
                    4f:2d:3e:c1:64:96:af:10:1c:65:1a:1c:6b:c3:c8:
                    28:cc:c5:a5:a1:28:59:b9:b9:90:39:44:21:2f:3f:
                    19:16:fc:5e:7d:34:13:65:2a:e0:7b:13:ed:23:55:
                    89:b8:9d:7b:1e:90:3b:e2:02:24:fd:85:9e:e0:f4:
                    84:56:98:8d:f5:28:31:40:71:02:35:5d:8f:63:9d:
                    d3:c5:bd:02:ea:0c:db:d8:48:11:52:08:df:c5:1a:
                    8b:cf:1a:ff:17:3a:ec:f4:74:88:48:67:60:8f:54:
                    af:46:0e:01:00:9b:f5:bd:f3:d4:31:3f:2c:90:d7:
                    e9:e0:e0:95:25:23:80:b2:9c:a3:a4:53:35:f4:f3:
                    fb:55:99:ba:74:57:04:54:96:69:2e:8e:45:3b:d4:
                    9b:12:a9:6d:63:52:dd:29:de:1b:9e:26:e0:6a:4b:
                    eb:7f:2a:ae:a3:ec:cf:80:48:66:53:07:6e:7a:c6:
                    1f:33:bf:3c:e1:82:bc:bb:40:53:08:77:ee:0f:1d:
                    c9:39:d0:05:91:f6:7c:c1:c8:6d:b6:0b:52:59:6d:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1D:AE:40:9C:69:6F:47:58:E9:6B:6C:78:3D:20:8B:0A:41:46:12
            X509v3 Authority Key Identifier:
                keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:bd:23:7c:fb:56:38:31:1a:c3:ff:3b:b4:c5:7c:76:a5:57:
         d3:aa:88:48:e8:98:e2:2f:c0:57:e0:00:e5:36:b5:5f:98:51:
         15:5c:7b:3c:46:e3:b7:b4:9e:a2:3a:c8:da:62:1b:c7:15:37:
         01:4a:76:dc:d8:ea:3b:9b:a9:80:cf:ed:b0:0a:2b:d6:67:84:
         53:0a:b7:7e:4f:7c:8b:1e:26:3e:5a:64:96:5a:3b:74:e5:e1:
         79:46:24:0d:2e:e3:b5:88:7f:eb:dc:20:16:a2:ef:c7:cc:d0:
         ad:57:17:bb:00:2f:a2:b1:09:9c:d1:fe:84:5f:ba:df:22:53:
         c5:7d:a8:c4:e6:0a:e1:2d:61:4e:fd:e2:91:dc:f2:7c:62:9b:
         30:6e:d7:76:d6:21:7c:0d:e1:da:46:90:77:44:b7:e0:ee:84:
         3e:ad:60:49:09:0a:b4:f2:37:3a:5d:4a:11:89:db:ca:cc:9f:
         fd:8f:f8:52:3a:cf:ab:71:c9:05:b0:3b:e2:c1:5d:21:4a:bd:
         17:11:a7:9d:b1:9e:f7:65:e0:3f:bd:27:e5:af:ba:d5:ef:0b:
         59:fe:3c:b6:80:8e:42:b8:8e:50:5c:33:e5:62:0b:cb:b9:6f:
         14:89:81:3b:ab:64:65:7f:0a:24:19:69:8f:7f:77:cd:14:89:
         6c:2c:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:21 2026 by rpki-client