Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File:                     qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier:          ATb82ELVqbLvgrYFkvRtSoXObX8wi4w5TUG8ZqR3HFk=
Subject key identifier:   45:BF:59:67:CC:57:CE:08:35:6D:85:64:CE:BE:09:0E:5C:EC:39:61
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer:       /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial:       019F90FE82C3E3759AE94EA2AFC462BE806C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number:          0F0B
Signing time:             Thu 23 Jul 2026 22:00:26 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:26 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:26 +0000
Files and hashes:         1: R6fKmNiL6DPYHGHsgrQhdxRjogw.roa (hash: KlrIoUKqLYU4rd9VeTGSXIJFZfzjhsMmFKFxCnepX50=)
                          2: ThcE502VHh7nDHiwu3z750fA_jI.roa (hash: nZbm/T+Jniaq7ToA4MEmQ7fWhUfWYilhhXfFms2U7ZQ=)
                          3: VyAWND_OasnYuRme0Q6yAU_fUQw.roa (hash: c2ejCdGHIJHwK7lWa3CclVna1o7khnE1y7hWMzg9fC0=)
                          4: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: kaSjo6c3u/pqO90H+YxjaP/3GwyBvWLnasVca9SKVgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:82:c3:e3:75:9a:e9:4e:a2:af:c4:62:be:80:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
        Validity
            Not Before: Jul 23 22:00:26 2026 GMT
            Not After : Jul 24 22:00:26 2026 GMT
        Subject: CN=45bf5967cc57ce08356d8564cebe090e5cec3961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:df:92:49:e8:66:d5:0d:b9:ac:aa:9e:b0:96:
                    5e:48:44:88:e8:7d:60:69:89:17:1a:69:dd:10:a5:
                    00:3a:cc:10:73:da:e9:df:0e:98:f7:b4:7e:a5:f8:
                    66:a1:f2:f8:d9:76:a3:b7:d4:d9:bd:17:3f:26:38:
                    b5:18:66:bf:f5:52:38:76:6e:61:98:90:e1:6a:f6:
                    16:2c:db:89:e7:75:41:5d:c4:83:df:09:9b:7d:b9:
                    47:9f:5b:ff:08:7c:0a:6f:7b:89:dd:20:23:a8:90:
                    29:db:48:d4:13:6f:ac:46:0d:b9:23:4b:90:6b:0a:
                    5f:72:8b:e7:6d:95:00:a1:3e:9b:db:a3:02:74:d3:
                    a1:42:29:5b:c6:38:35:eb:df:0f:2e:68:1d:ad:b9:
                    cb:82:b0:4d:3b:1d:19:39:24:85:c3:9d:b9:0c:c9:
                    21:1f:af:1e:c0:e0:63:0e:62:50:77:28:40:70:ed:
                    5b:d8:67:65:1d:51:40:b2:ab:68:75:bb:51:77:69:
                    fd:ad:ec:4c:f5:2a:ce:f8:24:f0:d8:dc:09:01:af:
                    09:20:7d:bb:53:71:84:86:7b:55:b6:9e:46:55:8f:
                    90:18:df:0c:97:99:3c:88:a6:e7:15:2f:b7:3d:8d:
                    02:7b:35:83:fc:a9:dc:b3:47:2d:03:ac:93:70:80:
                    b1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BF:59:67:CC:57:CE:08:35:6D:85:64:CE:BE:09:0E:5C:EC:39:61
            X509v3 Authority Key Identifier:
                keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9d:1e:02:21:73:82:d2:03:14:72:c6:ec:ba:80:9a:7c:65:
         5f:ab:c2:58:38:01:14:a9:9a:83:b7:cd:ed:1f:c8:19:1b:e3:
         39:d3:98:5c:e5:e8:49:ef:81:55:dd:b0:ed:95:ff:36:7d:26:
         a5:5f:6e:20:43:bc:18:25:72:ca:37:c5:7a:c6:fe:4b:a1:bd:
         14:90:e8:51:f3:b0:4f:ec:b9:76:60:e1:fa:b1:12:89:c9:55:
         7b:dc:f6:9a:4a:3b:db:2a:87:01:12:24:c9:6d:dc:7f:ad:a7:
         1d:00:62:e5:53:40:82:9f:11:1c:f3:4b:6d:36:03:05:d8:7a:
         70:49:41:d1:38:44:68:2f:73:6b:0b:92:1a:66:47:89:6e:7d:
         d3:1e:ab:42:86:aa:98:b3:a4:c4:ab:8d:80:5c:19:f3:09:fd:
         25:ec:48:4b:ea:97:e2:dd:55:21:f3:d4:a1:b9:0f:6d:7f:09:
         68:54:a8:05:69:23:23:90:ad:a8:a4:23:9b:68:7a:57:a7:d1:
         76:b3:bb:7e:d2:94:8e:a9:5a:f1:ca:de:b7:2c:a0:01:ae:56:
         ee:53:34:f1:46:5a:6b:af:ac:a9:ff:5e:f6:3b:30:42:db:bd:
         57:6d:b4:45:0f:0d:7e:38:40:27:6b:30:ed:69:92:a8:6e:fc:
         35:c2:ae:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:09:29 2026 by rpki-client