Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
File:                     1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json)
Hash identifier:          uWPpcl3TsZlKrZwir1T+R+kj4WrKizUTXHI6vw74fsI=
Subject key identifier:   23:91:88:0B:39:9C:0B:6E:A0:F8:0D:D5:41:26:89:69:6F:C6:30:3A
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Certificate issuer:       /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial:       019F8F476C15937AEE816772179DCD887355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
Manifest number:          0ECF
Signing time:             Thu 23 Jul 2026 14:00:49 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:49 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:49 +0000
Files and hashes:         1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: YxJNE7aI8aPPNmFVe5CmW+EnPd2mk5N1VUdkqVAHYRQ=)
                          2: 5lUQZsEUGyOae8g7ck1qxAKPHD8.roa (hash: n4Xk9RLkEFoassK3zDhzjezu9B6KPSvljIoQuRXwbfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:6c:15:93:7a:ee:81:67:72:17:9d:cd:88:73:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
        Validity
            Not Before: Jul 23 14:00:49 2026 GMT
            Not After : Jul 24 14:00:49 2026 GMT
        Subject: CN=2391880b399c0b6ea0f80dd5412689696fc6303a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:68:17:d3:04:b1:40:29:5c:a7:a1:97:83:04:
                    a4:1d:3e:cd:25:9f:d5:62:d3:2e:c6:9f:e9:ba:86:
                    2e:cb:cc:28:a9:f1:08:27:3a:2a:64:2b:15:b7:a6:
                    63:84:a5:29:ca:f7:18:dc:26:35:e8:e6:03:82:0a:
                    34:4f:34:85:f1:fe:8c:77:7c:68:38:57:a3:c2:e0:
                    92:df:62:6a:51:f3:47:9f:46:bb:f1:64:7a:8f:8c:
                    da:1f:5e:af:8c:9f:c7:2d:a1:59:e9:3d:4e:10:f6:
                    40:eb:e8:ba:26:02:e9:df:25:82:ec:55:cf:5c:13:
                    de:f1:36:68:5c:28:d1:08:78:34:8e:fd:e0:92:a2:
                    8f:d1:3f:5e:49:a1:92:6b:4b:5a:13:bd:4a:30:71:
                    c4:c8:0c:18:fe:09:bf:4c:01:9d:d7:4f:62:b5:49:
                    88:9a:33:64:b3:0c:28:e2:d9:ef:36:cf:67:4a:28:
                    cb:fd:a1:96:59:8f:d8:74:ad:c8:d8:3d:f0:e9:0c:
                    3a:6d:52:47:d1:ab:51:4b:dd:8b:16:2a:4b:7f:31:
                    92:c2:fe:20:5f:f8:a4:b7:24:db:e5:08:83:de:a1:
                    1f:1f:1b:1a:01:58:d2:1d:a2:44:7a:a7:19:b6:33:
                    89:81:95:c8:ca:7f:68:3d:db:2e:90:7d:f2:b1:12:
                    05:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:91:88:0B:39:9C:0B:6E:A0:F8:0D:D5:41:26:89:69:6F:C6:30:3A
            X509v3 Authority Key Identifier:
                keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ae:29:48:7f:eb:ab:94:aa:54:f7:bc:ff:eb:ce:67:28:eb:
         24:04:a0:86:a8:58:41:8a:20:ab:20:c5:84:1f:12:ff:b6:3f:
         db:2d:3b:95:3d:be:cb:37:c7:bc:cb:26:19:84:ce:3f:42:8e:
         89:1e:f5:f7:00:c5:3d:85:93:1a:38:6e:8b:2c:3c:bb:61:8b:
         13:bf:c4:8d:a7:aa:e4:d9:bc:a6:ee:0a:bb:2c:d8:05:9b:18:
         06:33:ac:17:a2:5f:5b:2d:0a:b4:9c:c3:df:44:28:9c:15:f1:
         9b:fe:b7:6d:46:c0:15:cf:49:cf:d3:c2:ce:8a:60:6e:fc:42:
         53:09:b1:2e:78:b8:1d:79:58:1a:dd:4e:40:7e:86:d6:2d:77:
         6c:be:57:80:1c:db:94:e4:c0:56:80:16:b2:3f:a5:1d:55:9e:
         69:c7:4e:f7:cb:30:64:70:7f:85:a7:94:e4:06:d7:9a:9f:a0:
         81:45:a8:2f:39:57:40:0f:72:e6:68:63:b6:b8:98:0d:6f:db:
         67:09:26:d0:19:b1:03:16:fa:1d:72:ab:26:c4:90:5d:d5:a9:
         7d:ad:fd:96:5b:5b:b2:36:c7:47:64:fc:5e:04:89:5d:1c:05:
         e3:a9:fb:8b:ee:a7:af:c3:87:81:41:d2:d5:c1:dd:f7:c7:d7:
         39:22:c6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:55 2026 by rpki-client