Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File:                     39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier:          gtK9JhEIMJTXB/M5ac4Ew7sGCQqMZl4zakriPWc+9BY=
Subject key identifier:   AC:18:CC:4B:F6:AF:A2:1C:61:D4:58:75:1F:8A:F4:DE:C6:BE:BC:6C
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer:       /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial:       019F8E34E4B84FEDB26EBDBC997911C537CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number:          08AE
Signing time:             Thu 23 Jul 2026 09:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 09:00:58 +0000
Manifest next update:     Fri 24 Jul 2026 09:00:58 +0000
Files and hashes:         1: 1R8Nv6bwHGDwo2mOtPOF_3tZNSM.asa (hash: tt15uIuTQgd6Syibc3srDH+USXZ4ejIXqOAjH/FfWt0=)
                          2: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: QAmBD53guB4k5e4qxKNkCX/TDrpCUcyA5BHwpuLu4jA=)
                          3: DbKSgaJwD4s0pMi5dIKaS74GVd0.roa (hash: T+MZOVnJ5hOhtVk6sS/9F3yH/t9bf3m1uORMjvQu1Mw=)
                          4: FcXv6_6IBhw3gOJhd-oIzN0MdTA.roa (hash: QOZ8gHmHm+d2woOpHnxCfU5p8HTqH4kCDsC9bYWmmqM=)
                          5: QTUs2t29sOiO1bQndfZmKxNAYdQ.roa (hash: myzQSNEVPstuOfu5qsB9AEg4A9vQ4YhsK6/lq/QzmjU=)
                          6: V0dM0OGiOIRr_LANVdvcw5kopNw.roa (hash: LNRzC3fIfmhFsLHaDaO4AM9qxVQUMv8ErtHtGjlMGJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:34:e4:b8:4f:ed:b2:6e:bd:bc:99:79:11:c5:37:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
        Validity
            Not Before: Jul 23 09:00:58 2026 GMT
            Not After : Jul 24 09:00:58 2026 GMT
        Subject: CN=ac18cc4bf6afa21c61d458751f8af4dec6bebc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:c7:f5:66:83:58:a3:87:2f:a8:c8:09:45:
                    8b:9c:10:3c:4d:07:5b:31:1a:42:62:a9:10:99:4b:
                    17:57:3a:62:64:f5:f5:ad:3b:16:69:28:5e:d1:b1:
                    f8:99:22:7b:d7:3a:c5:68:ce:e1:69:ec:83:c5:ab:
                    7c:a6:40:5f:20:d8:8a:c1:32:99:56:6a:83:12:88:
                    84:0d:7b:b3:88:15:c9:a9:83:cd:07:4c:c1:d7:82:
                    83:a9:c0:5c:33:74:26:59:7a:3d:1d:c9:a6:52:57:
                    01:28:36:78:bc:66:6e:47:94:e7:33:d6:e8:3a:e0:
                    ac:25:7d:4a:f1:97:ef:9b:8e:43:c3:6e:0a:53:09:
                    db:cc:e1:3b:70:4e:cf:b7:da:80:34:d4:be:9e:1b:
                    79:fb:4f:80:e0:9f:67:37:20:e2:0a:bf:49:b0:61:
                    85:d7:57:00:a8:31:13:fb:2c:2d:99:6c:72:f0:97:
                    ce:e8:68:8e:c0:53:2f:4e:ce:be:e6:21:c7:52:ab:
                    27:5a:31:c0:0b:f2:85:1b:1e:32:bc:c5:31:9a:83:
                    28:c9:ed:92:31:b3:8d:bf:d4:09:95:76:bb:3d:01:
                    04:46:f7:73:7f:39:4f:e9:1a:4d:f7:b7:7f:4e:31:
                    9e:a2:ed:16:54:82:69:79:4b:42:81:8c:d6:cf:02:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:18:CC:4B:F6:AF:A2:1C:61:D4:58:75:1F:8A:F4:DE:C6:BE:BC:6C
            X509v3 Authority Key Identifier:
                keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5a:29:90:ee:59:d1:7c:bd:88:33:3a:0f:eb:a5:9d:22:75:
         73:74:72:5d:86:23:42:36:37:31:64:27:1b:59:4a:58:cc:38:
         90:89:e1:a6:4d:c0:96:04:91:ab:21:16:f6:06:e6:01:fb:fe:
         c5:0a:ca:60:7e:9c:fd:0f:ad:c7:39:5b:cf:94:98:eb:1b:0c:
         60:54:36:5d:37:2f:5d:d5:2d:0e:5b:23:e8:4f:b1:b4:5d:44:
         a1:f1:04:ba:ec:d7:e5:82:61:4d:3e:29:58:d6:14:a2:ef:5c:
         21:68:1e:2e:3a:c7:0b:8f:19:e3:6a:b9:5c:86:57:18:b4:df:
         fc:02:9d:31:aa:9f:0b:18:35:2e:05:32:66:3d:76:c5:f3:b5:
         27:99:02:52:8d:d0:92:a3:b1:b6:df:c3:3f:9b:17:41:c5:65:
         22:38:62:47:9b:2a:4c:a1:a4:db:11:0a:50:61:0f:a3:38:39:
         cd:5c:ed:71:96:00:0d:4e:8c:51:43:3b:93:5f:a7:e9:5c:d1:
         98:74:8c:5f:be:e0:69:91:78:ab:02:e5:14:1b:34:56:ee:61:
         a0:04:63:81:b1:24:aa:28:70:a7:75:d5:e4:44:d2:6b:02:ec:
         ef:47:72:48:6d:ed:c1:b2:37:9b:a8:07:5a:c5:ad:62:cb:4e:
         35:0a:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:56 2026 by rpki-client