Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File:                     tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier:          P11zyvXcRAvWHGSD0MUTJp9a5TUAOlyTd+C8f3EYCL8=
Subject key identifier:   FA:8F:C1:56:D9:46:91:B5:E5:7F:D1:CA:46:0E:F3:08:F0:61:37:FD
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer:       /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial:       019F9323FDD47BC1CB62669799097F8C68B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number:          1093
Signing time:             Fri 24 Jul 2026 08:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:37 +0000
Files and hashes:         1: 5-8A-Jtguk4c0zw03gWcTS2JHrk.roa (hash: EMcolqjYtxL2odJigbooGYOxo0xOZo49xkFasVkABn0=)
                          2: 6_uqscAUqLl-U-FOdnB8b80ymVs.roa (hash: 6iIxj8hFU1rpgiG9WHmnrQdt6HoHVlv0NufbYcZmLKU=)
                          3: Asdq0CBEIsgp9XnIZOINz9u9Cp8.roa (hash: nOKPYxisoFhulj9H3B7lMkY5LfDFsGYXQ3OYtNKl888=)
                          4: I2T7UeDGLA8H6P-KL1eFGnyz1sw.roa (hash: v4p0Y6w9BB4bsfMbtUIZ8Y6YLTCCJcFeqfZJdPcFyGU=)
                          5: Rb8NbhTAxdW8Qozx0F0hMesjBeQ.roa (hash: vFhA2KjCPdOcJsVjA7uGx7jrzbvsOL97jtv5aYxWqgs=)
                          6: kXPy2txtviypD5vwBDji7qgiSxU.roa (hash: fv/wHDl1gYo3IGDSXMLvUCYdHmU4dilfu63Wi3/dV9k=)
                          7: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: wVcJSTZ6+gp8f1UGLjs5QSUGhfSlMwB+yEERNZQbN3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:fd:d4:7b:c1:cb:62:66:97:99:09:7f:8c:68:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
        Validity
            Not Before: Jul 24 08:00:37 2026 GMT
            Not After : Jul 25 08:00:37 2026 GMT
        Subject: CN=fa8fc156d94691b5e57fd1ca460ef308f06137fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9a:a8:13:f3:be:0d:69:01:bb:ac:ec:87:9b:
                    01:c0:ae:04:89:23:7c:06:4d:96:2d:62:09:af:28:
                    a6:25:3d:c6:f2:52:c5:a7:0c:22:a2:28:ab:8b:8f:
                    1b:d3:62:4f:b3:08:18:dd:e4:18:5c:f1:ac:40:d3:
                    22:d1:4b:d0:c3:9f:2a:18:b9:a2:72:41:f1:28:0d:
                    fb:90:64:84:ee:39:cc:04:43:ae:b3:b4:ed:64:46:
                    b3:34:b6:0e:f3:6c:46:14:b5:83:6c:c0:60:26:7c:
                    92:b0:12:37:d9:8f:76:51:cd:b2:68:92:50:8c:e0:
                    a6:12:4b:5c:09:37:b6:64:b7:88:de:a2:4b:11:c1:
                    90:72:ab:7d:8b:fd:69:e1:a8:be:15:2d:82:58:1c:
                    33:78:2c:c8:39:81:60:c3:7b:b9:ba:50:cc:60:8e:
                    e2:75:a7:1f:c8:f3:d2:c3:e3:65:29:a7:47:ad:77:
                    66:6a:dd:c7:43:5d:0a:79:d8:9f:57:df:09:eb:ad:
                    62:64:34:fe:c5:cf:a0:03:ca:e5:21:a0:c3:ea:22:
                    1e:05:9b:cb:3c:1b:73:a4:15:85:62:26:06:fa:2a:
                    8f:0a:a3:aa:ad:9e:2c:ea:d3:b5:8a:5d:17:57:9f:
                    60:be:bf:10:14:c0:be:91:1c:76:14:61:fc:93:0a:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8F:C1:56:D9:46:91:B5:E5:7F:D1:CA:46:0E:F3:08:F0:61:37:FD
            X509v3 Authority Key Identifier:
                keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c9:46:c3:13:66:66:31:32:29:80:31:15:85:82:b4:d6:1b:
         09:9b:43:a6:2d:67:5b:07:64:90:d8:b4:c1:80:0b:58:de:bc:
         cd:91:7b:88:40:95:b5:cf:6d:06:6b:61:81:cd:88:40:23:8c:
         b7:4d:8c:3d:a9:94:8e:3d:6f:79:e6:bf:85:2d:c1:d2:b5:eb:
         d4:30:4b:d6:58:53:57:15:ac:2e:7f:d1:11:e5:44:3b:1e:1b:
         de:62:36:b7:67:7a:e6:55:c7:8a:d2:b5:b9:c0:3c:b0:04:f8:
         e0:d7:25:08:15:f9:5f:e8:ee:48:d3:e8:53:b2:c6:ce:b1:25:
         ce:c0:a9:91:5a:3d:6a:4e:a5:52:1a:16:a5:5d:30:d0:ba:8b:
         a9:08:55:c2:6a:e2:d4:4d:92:a2:97:cf:9b:17:76:21:e2:ee:
         13:ac:b2:d0:28:92:e6:1a:c2:e8:b2:df:63:6b:fa:a5:3b:de:
         ca:39:e5:4e:ca:45:7e:1a:53:34:49:a1:81:f6:35:7a:5b:c0:
         c7:6a:57:fd:1a:c3:70:8e:55:83:c3:24:d5:f8:67:82:f9:b5:
         2e:77:1c:6d:ff:4e:83:c3:91:62:b3:37:3a:4a:64:0b:b6:84:
         49:4a:98:1f:0c:89:e7:b8:74:43:9f:ae:5c:12:69:20:0a:2b:
         c5:79:93:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:57 2026 by rpki-client