Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft
File:                     D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft (raw, json)
Hash identifier:          jtjwd1YtV7IYz3jHjW58FHzZ5dwx2A4ExDh3yw51HjE=
Subject key identifier:   27:2D:0B:28:A8:5B:1C:DC:53:8E:96:94:BA:AD:CB:6B:DF:1F:C9:AF
Authority key identifier: 0F:42:07:CE:80:85:5A:5C:C9:7C:0B:A4:73:B9:58:72:C7:C1:93:C4
Certificate issuer:       /CN=0f4207ce80855a5cc97c0ba473b95872c7c193c4
Certificate serial:       019F8ED9DD81B255E6DC15748F61FB3E9F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft
Manifest number:          0281
Signing time:             Thu 23 Jul 2026 12:01:10 +0000
Manifest this update:     Thu 23 Jul 2026 12:01:10 +0000
Manifest next update:     Fri 24 Jul 2026 12:01:10 +0000
Files and hashes:         1: D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl (hash: 46yp/xXgmm1FKchEHXe30MP1uDdaX4uqDRHpY7eEKX0=)
                          2: JE0qSqnrDvpmqnPdeXtfY3ANrng.roa (hash: X1IyMy+PkbmsuUsMO+dutHfTqsCVh+3kH50SqPaLXA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:d9:dd:81:b2:55:e6:dc:15:74:8f:61:fb:3e:9f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f4207ce80855a5cc97c0ba473b95872c7c193c4
        Validity
            Not Before: Jul 23 12:01:10 2026 GMT
            Not After : Jul 24 12:01:10 2026 GMT
        Subject: CN=272d0b28a85b1cdc538e9694baadcb6bdf1fc9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:97:b2:62:aa:ea:5d:48:b3:d6:ee:d4:1a:
                    cf:c4:e1:db:d3:99:b6:92:48:82:20:98:93:99:b8:
                    a5:f5:5c:49:f8:c1:c6:d2:19:84:0f:48:f0:a3:d9:
                    a9:8e:7f:1b:44:a2:9b:fa:e9:e0:54:7a:4c:7c:9d:
                    36:70:38:de:b0:64:60:01:b4:dd:fe:21:a3:8a:a5:
                    79:8c:97:f3:c2:41:cb:f3:4c:d0:08:71:28:51:b5:
                    8f:0f:5d:6f:03:6a:a3:3f:d3:7a:c6:b8:d8:cf:a0:
                    03:f8:82:6d:08:d1:81:e4:84:d7:23:d8:60:70:ca:
                    37:ca:82:2a:ad:bf:55:47:e9:e8:16:d7:cc:55:ef:
                    f7:ac:f4:4f:f2:af:4e:58:75:08:c6:cd:b4:a3:70:
                    b6:9d:61:3a:31:70:2c:ff:63:54:6b:91:51:56:93:
                    ab:c4:83:78:f7:57:3b:68:97:80:ba:83:12:70:40:
                    5d:85:d1:98:8b:7f:ed:87:eb:ac:e8:ca:a1:f4:f0:
                    e4:05:1f:2f:f3:fc:0f:e4:81:f6:6b:78:e5:11:51:
                    56:0b:6d:b4:b0:13:6d:cd:2c:84:86:51:fc:90:7b:
                    1c:6b:e1:57:e5:19:28:19:5c:98:16:42:b5:23:e0:
                    cf:b8:17:74:f2:3a:b2:1b:d9:37:17:ec:f1:a9:3e:
                    13:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2D:0B:28:A8:5B:1C:DC:53:8E:96:94:BA:AD:CB:6B:DF:1F:C9:AF
            X509v3 Authority Key Identifier:
                keyid:0F:42:07:CE:80:85:5A:5C:C9:7C:0B:A4:73:B9:58:72:C7:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e3:8b:49:ea:12:b2:e2:ff:06:a0:13:30:b6:c6:d8:e9:dd:
         f8:f8:f1:5f:aa:c2:dc:61:15:24:04:81:61:b5:d5:0f:b3:4d:
         e3:e5:49:74:25:af:9c:7f:18:d9:62:49:8b:3e:38:96:39:bf:
         94:45:87:9b:37:af:fe:16:ea:27:74:1e:8f:6c:80:fa:f0:58:
         aa:0f:7d:3f:7b:6a:69:5c:bb:76:38:c9:c2:34:14:33:54:f2:
         77:64:4b:be:14:4b:f4:eb:15:05:57:ec:5c:ba:8a:ad:05:f2:
         5c:d7:a0:2a:71:f9:e0:f3:c1:9e:db:b7:63:ff:1a:a5:7d:9e:
         42:37:a5:b6:d4:03:59:10:51:c5:49:a3:14:92:cd:0c:f3:6b:
         bb:9e:f8:1f:8f:6f:81:e1:0a:cc:a3:35:f7:7f:c3:78:02:d4:
         53:65:d7:12:b5:d3:9c:e3:55:fa:c4:88:a7:19:99:bb:da:23:
         5a:5b:00:3c:64:d5:16:ac:b9:e1:3d:21:a7:be:60:b2:bc:3f:
         29:e2:94:b5:33:e3:e4:b2:3d:32:47:9d:6b:20:16:f7:89:7f:
         c2:c8:b1:7b:38:2d:c9:82:a8:94:94:6d:72:17:7b:b0:86:31:
         5a:13:fe:9c:a6:b8:05:e1:4d:27:ef:af:2c:a8:8b:20:3c:07:
         aa:bf:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:31:03 2026 by rpki-client