Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File:                     t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier:          murP8RQE2QPPZQEBkgLJ6lO2cWGO7SUDNyatwNcPjhg=
Subject key identifier:   19:64:43:05:80:81:5A:62:11:94:50:C9:F2:64:50:1D:46:8F:26:8D
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer:       /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial:       019F91A44E9E0C306875ADA685D29317F635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number:          04D7
Signing time:             Fri 24 Jul 2026 01:01:32 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:32 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:32 +0000
Files and hashes:         1: 1LsBmA-SbOfGa2eleJLL4F-PoS0.roa (hash: fOsQjw7Bt8zL6Bscj5Hp28N4r7Zpof4N2iXErdaa6yA=)
                          2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: 0MaV1ffEgwbAMXCeGxn9kSxxN6BHOt+sPQ2bxPoZaiY=)
                          3: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (hash: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:4e:9e:0c:30:68:75:ad:a6:85:d2:93:17:f6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
        Validity
            Not Before: Jul 24 01:01:32 2026 GMT
            Not After : Jul 25 01:01:32 2026 GMT
        Subject: CN=1964430580815a62119450c9f264501d468f268d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:9f:04:10:91:68:f1:88:dc:01:4a:ad:87:
                    30:2c:d9:96:a0:5f:c8:9d:b7:93:20:f2:a1:f5:66:
                    36:65:ef:cf:b9:b6:85:ba:9e:b8:d6:2a:b0:15:e8:
                    e7:f4:9b:50:28:87:32:3e:d6:37:ce:b8:56:33:20:
                    a7:8c:13:07:d7:80:83:dc:f2:ab:ec:0b:be:ae:c5:
                    ac:59:96:b2:00:44:56:df:67:3b:c2:52:80:e0:9b:
                    52:26:f8:64:92:c4:c7:c6:ea:bc:c6:3f:99:bf:63:
                    6c:e5:c5:53:5e:6c:a3:37:ed:77:0b:67:c5:3d:38:
                    10:74:88:aa:86:68:66:fd:cf:29:a8:d8:30:ad:d4:
                    d5:ab:eb:c1:c0:ea:f2:01:ac:b9:aa:5f:2b:bf:c9:
                    cc:b9:84:dc:fd:5a:cf:8d:af:3e:dc:fb:03:3b:cd:
                    40:5a:ee:bf:b5:ef:c2:99:81:1c:46:6b:c6:fb:e2:
                    05:94:17:4f:24:a1:96:f3:34:e8:74:6c:73:51:72:
                    a4:15:d6:c7:24:9d:c9:36:72:ce:60:92:07:cb:ab:
                    70:88:9e:04:ff:29:69:2d:b2:86:92:b0:11:3c:d9:
                    b2:0a:cc:cc:39:0c:1d:46:b8:c6:42:e1:39:c0:ad:
                    13:49:a2:80:07:48:5d:62:b0:9c:ce:07:2e:a5:4b:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:64:43:05:80:81:5A:62:11:94:50:C9:F2:64:50:1D:46:8F:26:8D
            X509v3 Authority Key Identifier:
                keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8e:28:93:6c:6a:fe:8b:99:81:07:ad:03:e3:49:7b:52:ca:
         a9:ba:8b:01:6a:2e:e2:ca:d5:7e:b3:5f:e2:1e:8a:bd:d8:02:
         b6:53:62:0c:f0:12:d2:7d:88:4a:65:a8:dd:2c:7c:61:64:07:
         cc:90:0d:cd:b9:08:b3:f3:ff:b2:49:4d:24:ed:41:43:76:b8:
         af:78:d1:00:1a:08:d0:93:0a:47:41:b4:c1:45:15:66:ef:c7:
         ee:5b:54:b4:a1:da:ac:cf:0e:d8:f6:66:3f:3c:8c:7c:f5:3c:
         96:cf:c3:49:99:f8:43:6d:26:fe:ac:c3:02:ec:63:63:18:d6:
         49:12:2e:b6:68:87:9a:ac:93:2d:d1:2c:98:c4:44:5b:ba:1d:
         2e:d1:e0:ea:d0:38:62:7a:72:b3:f4:98:35:2b:a4:65:89:04:
         e4:58:f4:05:bb:de:fb:9d:da:79:c7:bf:b1:69:63:b6:fc:b6:
         e8:7e:24:29:33:3d:81:65:77:b6:64:68:ea:d3:93:c4:fd:0e:
         3f:fb:0c:54:5f:45:da:8f:fe:a3:ff:8f:76:25:3b:97:2e:e4:
         cf:74:38:2c:4d:5b:66:e6:06:de:f2:0d:92:35:83:f3:00:3e:
         1c:60:8f:b9:9f:25:29:e6:7c:94:2e:e6:f7:7d:b7:9e:29:b9:
         91:c5:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:52:16 2026 by rpki-client