Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aafe7a-e179-4d6d-9d62-9da36e9173a3/1/45R9MIiPTYgtNYTtyKcPt2YV5fo.mft
File:                     45R9MIiPTYgtNYTtyKcPt2YV5fo.mft (raw, json)
Hash identifier:          HPO2ZzET3HRdwX80BRSLFesYBoU9EztfCF+jVUtK/5E=
Subject key identifier:   7E:93:4C:BB:3D:25:82:F3:C6:6E:59:78:06:B7:7E:14:1A:2A:E8:18
Authority key identifier: E3:94:7D:30:88:8F:4D:88:2D:35:84:ED:C8:A7:0F:B7:66:15:E5:FA
Certificate issuer:       /CN=e3947d30888f4d882d3584edc8a70fb76615e5fa
Certificate serial:       019F90FF793C70515A5ABD356838CD92FE26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45R9MIiPTYgtNYTtyKcPt2YV5fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/aafe7a-e179-4d6d-9d62-9da36e9173a3/1/45R9MIiPTYgtNYTtyKcPt2YV5fo.mft
Manifest number:          020B
Signing time:             Thu 23 Jul 2026 22:01:29 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:29 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:29 +0000
Files and hashes:         1: 45R9MIiPTYgtNYTtyKcPt2YV5fo.crl (hash: yaLKvlP837wfBf2jUeQPwvW9NuKEjnBOOEUXajVHXvI=)
                          2: GTC6u_8Z9gd4xadpdKdM5XAZSl8.roa (hash: 0yWQwDQexpIwRL0OkehWTxguFnP2RgOpylnrHqYuR9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/aafe7a-e179-4d6d-9d62-9da36e9173a3/1/45R9MIiPTYgtNYTtyKcPt2YV5fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/aafe7a-e179-4d6d-9d62-9da36e9173a3/1/45R9MIiPTYgtNYTtyKcPt2YV5fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45R9MIiPTYgtNYTtyKcPt2YV5fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:79:3c:70:51:5a:5a:bd:35:68:38:cd:92:fe:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3947d30888f4d882d3584edc8a70fb76615e5fa
        Validity
            Not Before: Jul 23 22:01:29 2026 GMT
            Not After : Jul 24 22:01:29 2026 GMT
        Subject: CN=7e934cbb3d2582f3c66e597806b77e141a2ae818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:47:5b:a4:15:d2:33:ba:f0:6a:b8:0a:33:
                    1f:70:73:12:f2:ec:b1:50:82:b5:17:44:9b:7b:5f:
                    63:5d:0c:cb:ff:85:b8:73:45:1c:85:6d:07:7b:20:
                    d3:ad:11:bf:ea:f0:ea:46:87:34:83:15:2b:aa:dd:
                    25:22:40:f0:52:51:3d:2f:0f:f8:ca:63:28:77:bb:
                    04:ac:ac:a8:50:36:37:f2:1b:4e:ca:1a:17:dd:c8:
                    bb:c6:c6:8a:e8:d6:bb:f2:90:da:c1:b1:53:8c:a9:
                    1c:3d:11:2b:cb:db:76:7b:c5:4f:69:e3:e5:36:3a:
                    11:1d:ba:cf:54:a2:bc:fb:02:5d:60:01:36:40:9b:
                    2b:b5:a0:7c:d7:46:27:58:34:92:8c:b1:10:b4:3c:
                    1f:ab:84:bc:51:58:cf:bb:87:e8:90:5f:03:cc:b6:
                    15:d7:ce:1a:b0:e4:25:96:43:54:03:37:9b:03:9f:
                    80:63:3a:6e:b8:47:38:ee:b1:90:ca:a2:2f:50:ea:
                    bf:cc:5d:02:64:9c:f5:04:e6:50:91:57:3b:7a:63:
                    d3:6e:3a:eb:c6:53:2a:d1:93:81:da:a6:22:5a:b7:
                    09:9d:d1:d4:fb:3d:8e:98:f9:06:82:a7:91:a9:12:
                    1c:75:fe:e1:fb:09:9d:90:6f:3e:5b:cb:9b:db:e5:
                    cc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:93:4C:BB:3D:25:82:F3:C6:6E:59:78:06:B7:7E:14:1A:2A:E8:18
            X509v3 Authority Key Identifier:
                keyid:E3:94:7D:30:88:8F:4D:88:2D:35:84:ED:C8:A7:0F:B7:66:15:E5:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45R9MIiPTYgtNYTtyKcPt2YV5fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aafe7a-e179-4d6d-9d62-9da36e9173a3/1/45R9MIiPTYgtNYTtyKcPt2YV5fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aafe7a-e179-4d6d-9d62-9da36e9173a3/1/45R9MIiPTYgtNYTtyKcPt2YV5fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:cc:5a:09:82:7d:55:2b:72:ad:2c:5b:d1:b0:cf:5c:3c:85:
         e1:14:44:95:cb:26:8e:30:c6:81:0b:9d:b1:3a:40:ee:cd:01:
         04:30:03:28:f5:81:3b:47:ed:68:2c:83:73:0f:1b:9b:f2:0d:
         0d:e2:75:f8:5d:51:19:e2:99:1c:f1:c9:c3:72:51:b0:a2:15:
         b8:c8:21:ef:28:85:7e:98:42:85:2e:5d:7a:28:9f:2a:9c:9f:
         f5:ec:69:6f:21:8a:3d:2a:7e:9b:0f:57:e5:0e:53:71:ad:8c:
         b2:61:25:95:5e:43:b3:57:31:bb:3e:ba:6f:05:8d:45:3a:ec:
         95:b5:11:11:a0:b5:e2:5c:7d:69:7d:ef:1f:7b:2e:6e:12:70:
         a5:5f:ae:3f:b7:fd:3e:42:0e:48:14:49:f5:61:af:16:bc:67:
         4b:4f:60:d0:5e:88:39:53:80:3e:9b:2f:4b:dd:2a:26:bb:a7:
         73:cb:37:00:ab:8f:ec:95:76:ce:e8:fc:b3:8c:a8:dc:0b:7d:
         c0:ee:ad:41:76:ab:54:f9:37:1d:58:06:1c:c3:ce:75:e2:b1:
         d3:3d:b0:03:53:58:fb:4f:d1:53:62:ca:cb:8c:d6:8f:e2:5f:
         35:b9:d8:9f:8f:e7:b4:96:dd:ea:2d:df:3e:0d:59:44:d4:33:
         16:31:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:47:08 2026 by rpki-client