Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File:                     RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier:          uMKrhbq04KHiJtoCV0eFllQggCtRWyA0DQ9/sSyatgI=
Subject key identifier:   84:14:E4:F2:4F:90:0E:83:40:6D:D0:86:67:9B:4B:24:3A:35:BE:26
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer:       /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial:       019F93C94AA247D9308431518209584897AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number:          118F
Signing time:             Fri 24 Jul 2026 11:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:10 +0000
Files and hashes:         1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: Z8j0t1y5GzjD7RmtyKlMxA1bh4+gHl3FMdqBP3jrLUw=)
                          2: c4pt8vUVaeXjMXnofvH8CstQg9I.roa (hash: JquKoOYBsn6huX/IMn7g4cc/ok8BfYvy/bpSr/C0iVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:4a:a2:47:d9:30:84:31:51:82:09:58:48:97:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
        Validity
            Not Before: Jul 24 11:01:10 2026 GMT
            Not After : Jul 25 11:01:10 2026 GMT
        Subject: CN=8414e4f24f900e83406dd086679b4b243a35be26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:b2:ea:4c:02:1f:6e:e4:27:d6:c4:21:a0:
                    4b:f3:eb:3d:6a:2b:de:ac:2c:42:45:ff:2c:6b:06:
                    fe:35:45:9e:a6:72:d4:af:20:a6:58:cb:06:77:0f:
                    30:ee:5a:22:07:a4:d1:98:bf:4c:9e:f6:63:a8:d4:
                    e4:38:f1:29:40:a9:5e:2d:8a:86:d7:56:a1:0f:90:
                    4f:6c:87:06:dc:b1:16:7d:8d:89:8e:4c:0b:42:dc:
                    79:4d:f6:30:fd:25:8b:6a:3f:27:a3:5e:d3:c8:81:
                    ee:29:10:29:4c:66:c3:3e:70:ee:b9:68:6d:e7:2f:
                    49:3a:9d:ad:92:e6:88:a2:22:9e:a9:89:9d:c7:55:
                    b5:38:7c:d7:26:36:c6:b7:78:77:77:be:c7:aa:9e:
                    e2:6b:9b:20:c3:c8:61:b8:f3:02:96:3e:c0:45:4d:
                    55:0f:ee:4d:81:72:8f:7b:51:31:b1:3b:cc:81:5c:
                    32:35:bd:51:16:06:14:b7:e1:2e:30:eb:69:33:da:
                    b9:ef:28:3a:a5:65:d3:00:ab:dc:74:2b:21:d5:b4:
                    5f:27:2c:64:62:9b:03:aa:27:ce:30:94:d6:54:a5:
                    40:01:73:7d:d2:3c:0b:c8:04:e3:a9:21:71:4a:c2:
                    9c:ee:8c:c1:d5:09:d9:26:9a:c7:8e:fa:3b:76:91:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:14:E4:F2:4F:90:0E:83:40:6D:D0:86:67:9B:4B:24:3A:35:BE:26
            X509v3 Authority Key Identifier:
                keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:57:3d:29:e4:18:46:e3:4f:fd:e2:89:38:e0:b2:fd:71:33:
         f5:ad:c0:cd:17:53:cb:76:98:c4:96:27:55:27:34:b9:76:73:
         02:87:63:8b:10:c1:13:1d:36:34:b5:96:f9:b7:74:9a:f7:b4:
         9a:a0:19:9e:f7:fa:72:fb:23:b2:ce:3e:b7:f7:76:16:c6:12:
         1b:81:04:a5:e8:37:4d:37:7c:d7:4d:20:83:64:b9:05:6f:c2:
         a9:fa:72:5f:91:a6:04:7d:a9:24:10:aa:cf:60:b9:c8:cd:12:
         7b:3c:55:86:5c:2f:2f:af:08:39:e9:e4:4e:9d:27:12:9b:1f:
         02:f3:65:c1:52:67:03:87:17:46:d8:74:62:53:b9:c8:e6:a4:
         6a:f0:a7:03:f9:d8:db:8d:33:70:be:04:84:57:f8:6f:fd:15:
         59:e3:51:cb:22:1e:f7:7c:07:8c:ae:95:59:80:20:03:00:aa:
         ca:cb:aa:88:97:c6:fd:bb:c9:9e:d3:33:4f:45:9f:53:72:30:
         14:f3:c8:6f:34:ac:e8:cc:f3:39:6b:b5:70:23:b0:b9:eb:24:
         9e:1d:cc:8a:13:47:0d:61:81:06:c9:bc:b9:5b:fe:ac:2c:66:
         28:fc:24:da:69:9d:c1:5d:4f:c9:cf:a1:06:b7:56:39:80:0a:
         f1:20:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:39 2026 by rpki-client