Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File:                     rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier:          9C3CAnIuR/3WgILFo3mMoKmx2oAgAwE+sUFxN4YGi78=
Subject key identifier:   B7:BC:50:4C:95:49:7A:2D:1B:47:36:6D:E9:CE:39:32:82:F3:DC:ED
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer:       /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial:       019F93FF694A6D55C67F976022C87C494899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number:          13CC
Signing time:             Fri 24 Jul 2026 12:00:17 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:17 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:17 +0000
Files and hashes:         1: ETi6rBv0jmHDZMdhavHXc91w57c.roa (hash: dIyT+dh+7DYUIlNnbK/CAN49jDHLvDXQ+GqXfT4OXIo=)
                          2: PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa (hash: 7iRXsmizHd8Z7h/cdyZGhXFEz1E/csMcQ5uEyt4e7f8=)
                          3: iIFXLBXRyhHRxODZud1xrElh64s.roa (hash: AExhCYGcQMhNtoiQSq64xmFEgJgvDNV9lYLc/Z+6mC0=)
                          4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: iJDjfmPeC2Jbb16y+z/chPpEmsEA1nJnVIWDs7JKX7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:69:4a:6d:55:c6:7f:97:60:22:c8:7c:49:48:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
        Validity
            Not Before: Jul 24 12:00:17 2026 GMT
            Not After : Jul 25 12:00:17 2026 GMT
        Subject: CN=b7bc504c95497a2d1b47366de9ce393282f3dced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:02:4e:54:26:dc:55:5a:e3:6b:d7:c8:b6:
                    f7:81:4e:48:00:5e:e7:46:a1:8a:27:44:1f:4c:84:
                    97:51:1e:0f:6c:d3:6e:9e:1b:29:8a:56:e1:34:b8:
                    c0:c9:db:85:86:16:fe:ca:19:37:f4:49:84:94:41:
                    20:f7:5f:4a:93:be:e0:17:56:7f:37:ce:a9:f9:bc:
                    a2:bc:54:e6:42:98:33:63:7a:66:6d:6f:1e:c4:92:
                    13:ec:24:ea:b9:ee:5c:26:10:5d:c4:96:2b:64:24:
                    2e:d6:03:be:2e:7a:40:46:20:2e:a5:db:49:ca:63:
                    6b:9b:1e:9f:9b:20:ed:17:1a:39:69:43:47:36:08:
                    ba:e6:b0:2a:26:33:65:2f:4c:f9:78:34:04:67:a0:
                    73:80:e4:13:57:d5:7a:de:62:57:fc:cb:31:96:39:
                    73:1b:57:bb:fd:30:4a:78:6a:05:a2:c2:85:09:27:
                    9d:2d:12:f1:85:ed:f7:9b:84:de:0e:49:c2:22:b2:
                    a9:78:e5:ee:f2:b5:73:b0:26:dd:ac:fc:64:92:62:
                    8e:9c:41:a6:e0:15:14:9d:13:6f:04:f9:93:1b:c7:
                    05:87:82:16:d7:c5:d5:95:9e:f8:1f:92:8a:97:79:
                    40:fc:71:67:32:7f:61:27:b1:31:5a:a7:59:16:04:
                    26:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BC:50:4C:95:49:7A:2D:1B:47:36:6D:E9:CE:39:32:82:F3:DC:ED
            X509v3 Authority Key Identifier:
                keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:dd:59:91:c8:63:4a:f3:5d:67:b0:0b:b1:02:cd:2d:e4:15:
         49:7a:55:cd:1e:d0:98:ba:b8:be:0f:50:35:ee:64:17:e3:5b:
         8f:55:e7:0b:9a:63:4e:ff:20:a9:a0:b1:a3:f9:e6:f0:31:f3:
         f7:fa:23:c4:e6:92:88:71:c8:8e:9e:8d:3d:2a:6a:9f:56:f6:
         19:0e:ac:a7:62:c6:93:88:46:1d:39:d8:ee:6d:32:4c:8d:52:
         76:8d:d6:77:a8:ef:7a:59:6f:48:3f:20:0d:b8:37:d4:ae:d6:
         45:79:73:59:72:6b:f8:1f:8b:46:ee:69:05:48:a7:23:77:61:
         61:e3:95:c0:25:7a:9e:3f:41:78:d2:25:ea:6a:5e:94:cb:55:
         6f:e4:6e:1c:5b:48:ad:71:7a:b3:e1:c4:2c:24:0f:08:ae:54:
         02:f6:e4:94:a6:eb:79:59:1c:b5:8a:24:f4:2c:7a:4d:82:05:
         ee:7e:06:58:19:80:72:b2:25:93:93:ac:bc:92:8d:25:6f:bf:
         cf:d4:5a:28:b4:0f:06:0a:19:c8:21:46:fd:e8:a2:c2:aa:d8:
         96:43:fe:24:34:72:2e:bf:58:2d:98:ca:1c:c1:49:39:89:54:
         84:65:3d:cc:7b:82:6b:d0:c7:43:73:52:02:0f:68:72:0a:8e:
         ef:24:dc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:41 2026 by rpki-client