Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File:                     datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier:          226juaZoUjJG8d8dQLP+ZEmWJiUoPkDun67bxTEIGz4=
Subject key identifier:   C2:95:B9:78:51:E8:E6:DD:73:98:FF:83:F1:E3:26:26:C5:8E:DB:25
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer:       /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial:       019F93FF936294B1D84ABEBD5D999327BEE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number:          06AC
Signing time:             Fri 24 Jul 2026 12:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:27 +0000
Files and hashes:         1: ajNgz3i4R4z9MoH7g9Gh2FsCAiM.roa (hash: ak7eVyyVkmWQATGl9IjiTOWOerTXTRW7k0wkBuX7rhg=)
                          2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: OzZ5x8HKOOR1qwKW8XG7owJ0pPcWBuGNekLyrMM/ejU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:93:62:94:b1:d8:4a:be:bd:5d:99:93:27:be:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
        Validity
            Not Before: Jul 24 12:00:27 2026 GMT
            Not After : Jul 25 12:00:27 2026 GMT
        Subject: CN=c295b97851e8e6dd7398ff83f1e32626c58edb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:5a:77:27:70:5a:aa:55:d0:4c:55:c7:fd:
                    bd:2b:f0:ff:d8:d1:9e:03:d4:25:6f:21:08:ea:e7:
                    d2:99:e0:97:58:22:de:95:0d:d4:3a:35:28:cc:85:
                    7c:90:b1:bb:ad:b6:18:19:c5:8d:72:3d:89:27:44:
                    57:b6:e9:a4:f5:17:22:b4:b3:89:50:6c:28:36:0c:
                    26:85:27:f1:34:14:af:d4:85:f4:0b:25:42:c9:e5:
                    f3:dc:93:1a:e8:30:44:69:ec:0c:b4:6c:1b:23:1f:
                    db:e8:ac:7b:30:6a:98:cc:72:d6:2d:d6:8b:72:4d:
                    b0:7e:21:23:23:6c:04:4f:f5:a1:dc:28:d2:1d:6b:
                    78:bf:f4:12:ac:9f:3c:9e:ee:da:be:14:b1:53:02:
                    f7:24:be:5f:4e:62:e8:2a:31:26:0b:39:45:6a:d0:
                    92:31:60:cb:e5:73:7f:52:0b:56:75:df:e0:02:89:
                    28:84:00:dc:43:60:7d:1d:0b:61:b3:e0:4b:39:98:
                    8b:8d:57:e6:d6:2f:d9:ae:0e:a5:6a:41:10:80:eb:
                    50:e7:0a:d2:07:1a:eb:a9:84:d8:e5:cf:97:03:88:
                    97:9d:e4:cf:d8:94:81:2e:38:40:b9:c5:c4:d3:3f:
                    97:d4:c7:b4:fa:ff:ea:64:39:48:87:95:3c:07:6f:
                    f2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:95:B9:78:51:E8:E6:DD:73:98:FF:83:F1:E3:26:26:C5:8E:DB:25
            X509v3 Authority Key Identifier:
                keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:9e:1e:9d:46:e3:4f:3f:1c:17:c3:4a:e7:61:d6:9c:01:
         ad:e8:ed:4d:70:ac:2a:8c:60:bd:e5:b2:61:d0:c3:85:e8:29:
         e3:54:a6:ed:51:14:d9:7b:3d:82:76:55:cb:0f:0d:6e:d9:92:
         f0:d1:7c:2e:0c:73:0b:f1:ae:23:b4:8f:44:20:06:66:e5:1d:
         5c:e8:19:31:47:b6:67:58:4d:47:34:ca:73:2f:14:2f:95:da:
         d2:8e:a3:80:5d:19:38:f9:e8:aa:b9:5c:76:9e:d0:c0:eb:71:
         ef:cd:4f:e0:e9:ac:d7:da:f6:a6:1a:36:fc:37:74:e9:8e:0f:
         3b:2e:07:0a:5b:6a:66:ff:19:fa:2b:c4:2c:2f:67:7b:a0:33:
         ec:4a:95:89:12:7d:64:61:fd:c1:94:8b:f1:7f:ef:00:ff:68:
         b8:e0:c7:c4:0d:f2:01:4e:44:2f:59:60:0f:74:c1:56:21:fb:
         fd:e4:a1:12:81:1a:28:4b:68:17:2b:5b:2d:fe:c3:6a:47:da:
         31:bc:b8:f2:9d:d2:8e:a1:a8:ef:ea:e8:44:96:be:83:25:5f:
         8e:64:b7:fd:b2:cb:46:7e:5e:e5:26:6a:ce:c2:84:20:95:60:
         13:62:04:e6:b8:5e:b6:cb:a0:0a:38:42:77:6b:7c:d1:59:af:
         1e:6a:e6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:30:43 2026 by rpki-client