Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File:                     1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier:          clhGGno0fti9TxAAFyqxtczSOad06GTKYgCTIK8aLlA=
Subject key identifier:   2B:36:6B:78:55:2B:A6:6F:77:30:67:74:52:8D:DC:50:BC:04:DD:6E
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer:       /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial:       019F94368E1BA3E00AFBC48388473CBCF17A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number:          1715
Signing time:             Fri 24 Jul 2026 13:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:30 +0000
Files and hashes:         1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: QzJIk8S/MH5k24ha5Yb4klFNcAjTcYbR4K3Sez00S1g=)
                          2: GwHZp-kEEMMSmgcidpvuauk-EA0.roa (hash: Xjp5Kh43d0lOVK+MDX99KJIgb/gfu211S8//K3ogwuU=)
                          3: X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa (hash: I3o7rUH/RKJK5k980x+148YLL5ZlqYblJvTvhEFHuDU=)
                          4: g9skLhoTngKF84leEtNBNhGZn9Q.roa (hash: hqQ3HiFBUbLIXn6t3JB+mw0UlnMpWW49qnJ3ApgTu0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:8e:1b:a3:e0:0a:fb:c4:83:88:47:3c:bc:f1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
        Validity
            Not Before: Jul 24 13:00:30 2026 GMT
            Not After : Jul 25 13:00:30 2026 GMT
        Subject: CN=2b366b78552ba66f77306774528ddc50bc04dd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:8c:21:2e:6d:b8:e2:36:f6:8e:1f:66:42:
                    b4:0d:ff:6d:77:7a:bd:e3:bb:4b:a3:89:1a:fc:48:
                    00:e6:87:69:86:e3:ce:fe:02:ff:4c:dc:4a:4a:a3:
                    22:70:8f:d9:77:dd:59:14:73:4b:ed:17:cd:65:c1:
                    97:41:7b:f2:b4:10:dd:fa:b6:9a:38:58:5c:5b:f8:
                    c8:65:a3:7c:eb:22:b0:02:c2:00:9e:14:32:7f:66:
                    fe:56:7d:b3:51:5b:b3:f6:1b:1f:28:03:cb:cb:37:
                    c9:c4:5e:d7:dc:b0:91:4d:94:20:09:2f:c2:b4:91:
                    fb:8c:d2:43:19:66:5b:f9:df:d4:c7:ba:13:e5:3f:
                    6e:1f:f4:d2:d3:e0:71:28:ec:07:00:44:a9:a0:99:
                    83:be:e8:64:73:2f:19:6f:3b:11:5d:b4:d9:99:b9:
                    52:c8:1c:ef:4f:52:73:3f:29:b0:cf:0c:eb:bc:27:
                    be:04:19:76:5e:db:d6:38:ab:e7:5f:35:ac:68:be:
                    5d:b9:5d:30:90:4a:64:c3:90:16:5a:46:8d:e8:2b:
                    1f:17:39:36:b3:df:8e:33:36:be:17:36:48:82:ef:
                    48:7f:e9:c5:b4:7d:0c:6d:bd:9e:7c:45:68:f0:75:
                    ad:2f:25:e2:31:14:81:59:28:80:d4:13:42:ca:9d:
                    ab:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:36:6B:78:55:2B:A6:6F:77:30:67:74:52:8D:DC:50:BC:04:DD:6E
            X509v3 Authority Key Identifier:
                keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:33:b5:89:13:43:93:e1:e2:fc:72:af:1b:31:42:81:f0:
         18:5c:1c:12:6a:03:24:b7:f6:f6:e9:57:21:11:d1:e1:c5:cd:
         06:3c:86:0a:b3:98:61:8d:26:ac:e8:88:27:de:4f:90:7c:5a:
         83:a6:f5:5b:75:8a:9c:5e:cf:e3:a0:4e:cc:16:4e:dd:b4:f2:
         18:a0:d7:49:8a:5d:61:f4:ed:8d:fd:5e:48:7b:ec:5c:2e:c4:
         56:a3:d5:2d:3f:fd:b9:ea:42:2f:16:6b:b6:b0:d6:79:4c:c4:
         f4:ea:6c:23:67:e2:46:ce:6a:6c:d9:72:87:7a:30:b3:53:17:
         67:48:06:5c:66:8c:d8:b3:e3:0f:5a:39:7d:5c:a2:7b:6a:da:
         56:7e:7c:0d:cc:86:13:85:28:8b:42:67:76:6e:2c:5c:ab:9b:
         8e:8f:ec:58:82:c2:f2:b5:83:60:4f:09:eb:56:9b:65:3e:ea:
         75:57:48:2a:27:24:22:90:34:ea:c8:2d:26:b4:9c:01:4c:c6:
         d4:f8:10:13:01:6b:46:08:40:d9:01:26:b0:57:b8:d2:ac:04:
         90:81:df:51:32:ce:b5:aa:67:b5:20:b8:5c:8e:ee:a4:64:5f:
         08:d6:e3:fa:00:62:40:6d:9c:9a:b4:06:d3:4a:01:87:04:2d:
         5d:77:98:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:52:35 2026 by rpki-client