Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
File:                     quDn_oLDpsQmokwM_6ILDjowT6I.mft (raw, json)
Hash identifier:          L4EoTlXfzM+fF0Qey86JRtYPmp6bE2rbLKP+jdnZFiI=
Subject key identifier:   F7:C3:CB:B6:65:B4:68:C1:B2:0B:7B:22:F9:DF:57:2A:E9:43:6E:21
Authority key identifier: AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2
Certificate issuer:       /CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
Certificate serial:       019F8F7E008E3D0F6721FB1B2A553FDCE12B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:27 +0000
Files and hashes:         1: UL8l5IwcVO4oalkF_m08Q-lh138.roa (hash: Ft4/BZpxSn/GVsZnEbmyHTlyfLxd+14L0O7a+0FPi2w=)
                          2: quDn_oLDpsQmokwM_6ILDjowT6I.crl (hash: pM4mXEB+52xczFIR+EfEGg5moZBQlYjXV4P5bEpYY1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:00:8e:3d:0f:67:21:fb:1b:2a:55:3f:dc:e1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
        Validity
            Not Before: Jul 23 15:00:27 2026 GMT
            Not After : Jul 24 15:00:27 2026 GMT
        Subject: CN=f7c3cbb665b468c1b20b7b22f9df572ae9436e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:15:29:5e:e1:2a:8a:b0:c0:5b:0d:34:ce:
                    d9:79:91:19:59:cb:4c:fd:bd:11:28:85:7c:7d:a4:
                    04:f5:a8:74:99:6c:14:d3:8c:f1:2d:09:05:79:03:
                    eb:54:88:69:a0:f6:a1:3c:ec:24:89:60:20:0d:a8:
                    f6:ba:bf:1f:64:6e:6e:b4:97:79:6a:3c:c3:50:4c:
                    1e:4a:7c:21:98:5b:da:f6:8b:44:6c:93:77:5b:54:
                    86:31:e3:73:83:f6:ef:0a:ad:79:d2:6b:20:0a:53:
                    72:d4:71:24:cf:1d:b7:59:9f:4a:3a:c7:23:8b:ea:
                    bb:2d:dc:71:85:f0:4c:5f:c6:e1:b9:6c:0f:93:e4:
                    5f:7e:3c:da:f0:c8:34:13:5a:1e:ef:ab:9d:71:50:
                    c2:3c:1a:27:dc:50:1e:ce:97:dc:4e:d9:ce:2f:27:
                    20:d0:81:0c:a5:55:ae:d7:57:31:1b:41:82:45:60:
                    79:99:84:12:b9:8c:df:a7:8d:20:cf:30:bd:0d:b7:
                    36:d0:d2:1f:4a:07:96:a7:b8:ce:63:99:96:bd:49:
                    44:30:7e:58:83:f6:40:6d:54:91:1c:89:96:3b:3f:
                    22:15:d4:d6:87:01:25:1c:c8:65:61:00:e7:47:89:
                    1b:e8:75:5d:d5:07:66:b5:5f:28:fe:6d:54:8a:1a:
                    2c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C3:CB:B6:65:B4:68:C1:B2:0B:7B:22:F9:DF:57:2A:E9:43:6E:21
            X509v3 Authority Key Identifier:
                keyid:AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:eb:8f:38:59:cc:21:41:7c:0e:f9:57:06:43:c2:1b:80:2d:
         75:61:cf:3e:a6:bc:49:d7:ec:b7:87:13:55:bd:db:0b:ff:82:
         62:03:36:e8:89:cc:80:d1:17:51:ed:f0:5d:cd:f0:fc:33:0c:
         8c:64:8f:90:05:08:78:91:61:18:dc:63:25:b7:08:28:9f:44:
         2a:a3:6f:db:2e:31:64:40:8c:02:e2:c9:49:d2:27:4a:2b:cc:
         24:84:70:47:ed:af:6d:2e:9f:ab:17:cb:29:95:bf:76:06:5b:
         dd:c6:76:f2:d7:af:5f:65:a1:e9:71:62:ec:cd:a4:23:0a:2c:
         4b:22:1c:d6:4b:9f:cb:ad:a6:e5:57:f6:81:76:10:52:02:2c:
         b6:b1:13:1f:b8:58:23:ff:14:7b:59:4e:0e:22:00:ae:b4:0d:
         9b:35:d1:87:f1:d0:80:a7:f3:58:eb:f4:e0:69:36:5a:8a:8e:
         2e:f2:7c:9d:c8:63:15:ec:9e:f7:ee:1c:30:29:14:47:7c:72:
         c1:27:68:fe:3c:5e:9d:37:2f:42:99:86:c3:aa:f1:97:80:fe:
         15:5f:24:ec:db:54:87:a7:c1:11:5d:89:82:c6:35:f2:36:c8:
         09:ec:0e:1e:c8:a6:00:ee:3b:d9:dc:42:e0:56:29:33:c3:fa:
         0e:d8:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:36 2026 by rpki-client