Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
File:                     R0d5yAIJX230sqrPXc3F0z3X3m0.mft (raw, json)
Hash identifier:          VYr6e5/PVAWIULadZOK/uL5hkK3SW9IpwCuN0HFhuF4=
Subject key identifier:   F1:19:A2:50:C1:2B:15:66:07:BE:3B:4A:DC:0E:AA:92:00:A1:F7:AF
Authority key identifier: 47:47:79:C8:02:09:5F:6D:F4:B2:AA:CF:5D:CD:C5:D3:3D:D7:DE:6D
Certificate issuer:       /CN=474779c802095f6df4b2aacf5dcdc5d33dd7de6d
Certificate serial:       019F92B6BF1649E7EB8F66AC247E8459D002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
Manifest number:          0B
Signing time:             Fri 24 Jul 2026 06:01:17 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:17 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:17 +0000
Files and hashes:         1: 8f2pZ-X2y_ewfA8UsP_aiBqv6-Y.roa (hash: jKbJJlR/1E8zbPr4O7EmtXI2miGTVc5tDs0R04lVjsg=)
                          2: GVMQ2GhaEdTKaWEvEP46NaINJpE.roa (hash: DuVK+9fHLleTlcN4pfvABl9Ywn2SnErQI65gsGkiRnQ=)
                          3: R0d5yAIJX230sqrPXc3F0z3X3m0.crl (hash: 88lPsyi8ZV1raLembccE3nQsOhlKEFkVhFKqJCLOsZU=)
                          4: UOevWPpBrse5WT2caWjU9GZEo-g.roa (hash: 0LSPg8ENwaB9oJ0jBUlwQU/hrSIv4vEXTwXy9LETBpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:bf:16:49:e7:eb:8f:66:ac:24:7e:84:59:d0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474779c802095f6df4b2aacf5dcdc5d33dd7de6d
        Validity
            Not Before: Jul 24 06:01:17 2026 GMT
            Not After : Jul 25 06:01:17 2026 GMT
        Subject: CN=f119a250c12b156607be3b4adc0eaa9200a1f7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6b:87:ee:08:37:34:bf:fd:05:17:20:45:67:
                    e1:78:0f:6a:99:fe:6d:82:a1:ed:69:01:4c:2f:fe:
                    be:15:61:7e:41:77:ba:74:18:fc:7b:3c:aa:68:56:
                    cc:56:5a:f4:95:41:53:7b:9a:6e:2b:98:16:27:7c:
                    52:94:f7:fc:61:fd:34:83:fc:d1:00:d1:35:27:09:
                    2b:52:a7:31:77:15:ab:a2:4b:7b:c4:58:a1:5a:8e:
                    4f:13:ef:b1:b2:17:6e:9d:59:46:ef:bc:9f:09:09:
                    1c:87:f0:8e:d4:ed:b7:60:68:4d:b8:4b:77:33:34:
                    a9:33:04:c4:fd:99:7c:e7:5e:4a:37:dd:bd:fd:b2:
                    fc:24:0c:86:e2:67:fb:7a:a1:20:90:38:a8:cb:2e:
                    8c:17:6c:e7:db:74:9a:5c:87:51:30:22:13:a2:f8:
                    0b:4a:b7:68:ae:3f:45:46:a9:9f:04:69:8e:64:bf:
                    16:e4:77:31:ef:e4:15:84:b0:9a:7f:b2:c4:7c:4b:
                    12:11:f4:15:35:59:71:cc:d2:5e:0b:8e:c6:55:79:
                    bc:f2:ab:94:0c:28:b6:e7:15:d6:59:06:61:fd:39:
                    d6:40:1b:f3:00:ae:17:86:af:01:ce:af:a5:20:c8:
                    b6:54:f7:cb:2a:15:d4:f1:ab:92:fa:a9:f8:e4:e6:
                    2d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:19:A2:50:C1:2B:15:66:07:BE:3B:4A:DC:0E:AA:92:00:A1:F7:AF
            X509v3 Authority Key Identifier:
                keyid:47:47:79:C8:02:09:5F:6D:F4:B2:AA:CF:5D:CD:C5:D3:3D:D7:DE:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6a:90:71:a2:db:18:44:e5:37:4b:f2:f0:fa:d1:39:3a:1c:
         da:79:11:ac:5c:5f:87:10:8e:43:4d:9f:af:10:63:10:8b:3b:
         45:8e:a4:38:56:ac:90:23:78:0b:19:6d:6b:08:d4:7d:c9:36:
         d2:f1:5a:cf:44:30:8e:e5:ed:e0:22:a1:ef:49:f9:f5:51:cb:
         51:1e:e2:47:2e:04:09:b1:1b:39:98:13:ee:80:22:9a:cd:a6:
         7e:3e:be:ce:71:73:ae:2b:7e:f9:7c:31:e5:4e:5c:07:61:6b:
         71:62:45:89:b0:06:89:ba:f8:bf:09:77:34:0a:8c:4d:08:6a:
         e8:ac:20:30:b2:d3:66:f7:d4:c9:7d:80:6a:b1:d2:41:d1:28:
         9f:8a:0e:7f:28:08:85:e6:f6:66:b3:aa:f8:2c:9e:c6:c6:df:
         46:ed:0a:f1:7d:46:41:40:50:5e:73:b4:f9:93:2f:bb:c0:f1:
         d6:01:24:6f:7d:e6:8c:92:c6:17:4e:9a:6c:48:b7:77:25:ec:
         3f:7e:fd:dc:e7:68:bb:86:88:7a:1d:60:99:26:d6:05:d3:1e:
         25:c0:40:3d:d5:2e:88:ea:50:1e:8f:0a:73:37:ea:c8:7b:de:
         b5:bf:09:c1:f0:a2:86:bc:67:47:db:f9:a5:c2:c8:8c:e5:d4:
         8b:20:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:24 2026 by rpki-client