Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File:                     RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier:          wAtGYPf2fGURrTL04e4ZFf6Wea3+bzQttzXQrytHMUE=
Subject key identifier:   17:A5:8C:03:43:AF:9F:A1:D5:C6:23:87:DF:C7:92:F7:1B:D6:A2:D4
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer:       /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial:       019F943727242052BB10595B16DEE6C37E51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number:          0790
Signing time:             Fri 24 Jul 2026 13:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:10 +0000
Files and hashes:         1: Hrj27dyCNZvY-lKB2ef8Mo4G6tA.roa (hash: ywCaGFxrJHREbSiyJrKj2GAkS5PQJLvo8VTO1MR9hlc=)
                          2: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: XLWe9MoYBfgXLV58zzAXL6RClGSAjseBzoxLlWIFiqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:27:24:20:52:bb:10:59:5b:16:de:e6:c3:7e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
        Validity
            Not Before: Jul 24 13:01:10 2026 GMT
            Not After : Jul 25 13:01:10 2026 GMT
        Subject: CN=17a58c0343af9fa1d5c62387dfc792f71bd6a2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:da:8b:bb:3c:d2:a8:0f:ff:b8:1d:c6:0a:
                    4e:08:7d:64:a2:78:5a:31:2a:70:6b:e9:d5:5b:b8:
                    dc:0a:3d:e8:b5:d5:15:99:e1:6b:f0:d1:f9:67:8b:
                    83:c7:76:62:b5:a5:97:ca:a7:04:30:c2:be:e7:0d:
                    21:56:a3:6f:22:33:b1:81:45:48:75:d5:a1:29:7d:
                    e3:58:7c:dd:04:15:87:4a:fe:ec:c6:94:fd:1e:04:
                    77:b1:e3:63:5d:30:60:20:8a:3b:82:54:4a:42:15:
                    d2:90:0c:67:00:92:1a:a7:ea:03:0b:17:d8:33:c4:
                    f7:b6:3f:71:fd:bd:ee:e5:bd:35:80:af:03:cf:ad:
                    a9:f6:f6:3d:1c:af:50:1c:58:2b:8d:15:37:10:60:
                    24:48:7d:87:65:d5:bd:cc:66:1f:d7:76:da:59:4c:
                    ee:ea:64:a4:4d:72:0e:96:77:b0:5f:24:bd:eb:8e:
                    51:26:f7:27:f6:a6:ed:46:d2:8a:84:26:66:87:bc:
                    28:41:ba:7c:1f:93:35:d4:39:0b:b8:b5:21:0d:39:
                    99:06:68:de:b0:ab:2b:73:89:66:e6:d5:1a:c6:24:
                    62:23:61:98:47:bc:86:53:82:6a:dc:b6:26:52:20:
                    40:3d:40:da:b9:0a:fd:27:a5:97:c5:4c:45:df:44:
                    13:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A5:8C:03:43:AF:9F:A1:D5:C6:23:87:DF:C7:92:F7:1B:D6:A2:D4
            X509v3 Authority Key Identifier:
                keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:55:38:1d:27:c4:a2:65:7c:2e:7f:24:d9:9d:75:65:90:5d:
         27:d1:23:7b:8d:2d:2d:4c:6f:eb:8b:1a:b8:87:bb:5a:f5:2c:
         28:26:d6:28:66:37:54:85:3c:ef:2f:29:d3:62:20:59:93:c9:
         a5:8a:27:f2:f4:20:f3:e7:97:64:85:03:0a:4f:ce:7e:ea:aa:
         83:85:1b:72:d2:52:31:9e:cf:cf:0a:69:a6:80:78:4a:24:4b:
         8f:78:cf:dd:11:11:1d:26:fb:05:a3:28:56:e1:40:8a:47:9d:
         ff:48:cf:eb:31:1b:0f:78:a4:8a:86:bc:22:5a:26:0b:45:34:
         19:bb:57:58:81:56:ed:db:33:db:d3:c6:80:b8:e2:ac:0b:fa:
         7c:d4:8b:a4:f8:83:c2:d5:11:eb:95:12:ef:51:0c:9e:02:b9:
         d1:51:eb:5d:41:ec:f9:22:cb:e6:d4:f8:a5:5b:bd:68:4b:03:
         ae:b4:ea:92:11:f4:ec:0b:48:7c:bd:a2:2d:e9:15:23:08:6e:
         02:60:fd:66:30:df:e6:38:fa:a9:85:e5:a0:92:83:02:ac:22:
         f6:80:f8:64:ef:15:bb:9d:41:2a:c5:73:c5:4e:16:ed:8f:8e:
         72:d1:c2:68:4d:7a:80:33:61:db:48:94:90:5f:25:2b:0d:24:
         f1:b3:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:16:59 2026 by rpki-client