Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File:                     AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier:          3HYgheRMZaxFa4KEQNBNZW/cIVRx2Ss1f//KU7P77rM=
Subject key identifier:   25:61:0B:EF:CA:6F:FD:D7:29:04:3A:6E:26:E5:A2:33:3D:A6:B5:17
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer:       /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial:       019F8F7E5AE01DF156D7DCA97419409712BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number:          1996
Signing time:             Thu 23 Jul 2026 15:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:50 +0000
Files and hashes:         1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: mGsoihBba2K39oZNVFnAmVfHImWp3kquV+S7U9HYIgU=)
                          2: qT2NrCiJquJtfq_3e7nF2gYWJ5s.roa (hash: eAGHZA4lhxkkeWMCuFkx9WVGsrMFd32m7CFLgSd01WU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:5a:e0:1d:f1:56:d7:dc:a9:74:19:40:97:12:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
        Validity
            Not Before: Jul 23 15:00:50 2026 GMT
            Not After : Jul 24 15:00:50 2026 GMT
        Subject: CN=25610befca6ffdd729043a6e26e5a2333da6b517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:18:d2:39:6c:dc:f7:ab:38:72:ca:4d:7c:
                    48:7f:7a:15:16:d8:4b:56:ab:41:be:68:52:8e:4a:
                    be:0d:13:e9:67:d7:c5:0f:67:d6:d4:0d:4c:24:53:
                    61:ba:32:05:68:57:bb:42:a6:65:2d:07:df:64:6f:
                    83:e6:15:49:1e:c6:91:3f:b3:4f:1b:f3:49:aa:37:
                    15:2d:f2:72:77:43:9b:14:ef:78:7e:67:d1:f7:91:
                    73:42:1b:54:78:ba:f0:2f:1a:67:8d:66:67:c0:30:
                    45:7a:5f:c7:b6:d4:00:25:05:23:15:3a:e4:c4:39:
                    83:6d:c0:a3:f0:7e:15:81:3c:57:b3:0a:85:f5:b1:
                    0c:06:d6:bf:2c:ed:4a:20:72:f1:d0:6b:3e:83:c9:
                    6e:15:f2:4e:3e:da:12:71:a5:02:29:79:13:bc:48:
                    e7:bf:15:b2:24:1a:d7:e8:b0:90:57:94:08:61:4c:
                    8d:51:3d:40:7d:36:7a:ca:4b:66:34:9a:0d:41:68:
                    ed:94:a0:ac:6c:f8:a5:4d:59:d1:f5:64:bd:ca:43:
                    fa:00:ee:cc:9d:4c:c9:56:e9:e5:f2:59:07:59:c7:
                    c8:ab:01:c1:55:95:78:59:07:a9:ee:d5:51:db:10:
                    18:10:ab:57:1f:19:e8:d3:0c:61:41:cc:7c:37:80:
                    35:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:61:0B:EF:CA:6F:FD:D7:29:04:3A:6E:26:E5:A2:33:3D:A6:B5:17
            X509v3 Authority Key Identifier:
                keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e4:df:a3:4b:a1:f5:6d:04:f8:41:67:96:86:4f:06:c6:56:
         79:76:8e:40:29:71:c9:fe:7c:be:ee:bd:69:1d:67:b7:72:22:
         31:9e:6b:9a:2a:b0:47:a6:f8:bb:49:68:7b:3f:20:c8:f0:0f:
         ae:91:c5:43:30:ba:ed:ca:2a:be:83:25:e8:20:5f:e4:94:8d:
         36:86:28:b4:8b:d1:a9:9b:9d:08:9a:be:a6:fa:ff:1c:ef:7e:
         62:aa:b9:95:0f:99:56:21:2e:7c:67:4d:d8:d0:05:86:2f:fd:
         6e:17:2b:14:4a:7b:95:70:11:82:e8:b6:a0:a3:77:05:3b:75:
         3b:16:ab:80:33:08:78:f5:9c:ba:a3:68:83:44:6f:9f:b8:f7:
         68:8c:78:10:de:1d:3c:4a:26:b2:dd:a9:d4:9f:74:0e:fc:72:
         87:52:6b:dd:30:35:ea:47:42:68:8e:87:49:ba:17:45:7d:ba:
         08:b6:2e:6e:10:3c:36:6d:53:55:de:29:53:2f:80:e1:13:4b:
         ba:25:45:d0:d7:f7:02:b1:96:34:04:cf:ba:7c:34:80:54:47:
         6a:56:3b:4e:2f:ce:34:0d:51:57:68:06:30:99:38:d3:ed:e4:
         35:e5:ef:0e:86:3d:a7:f9:e4:9a:06:0b:22:8b:2f:5d:a3:fd:
         4a:9d:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:03:31 2026 by rpki-client