Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File:                     cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier:          LcJ91/jCrsYBxV9ii/5GBU4+6tua6wMoAyXttnKKG9Q=
Subject key identifier:   D0:B5:A6:1E:03:37:F2:68:1D:29:0E:88:92:FC:D2:31:33:48:CB:92
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer:       /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial:       019F935AE9069F1296B4CEF8F2911F394DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number:          16E0
Signing time:             Fri 24 Jul 2026 09:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:36 +0000
Files and hashes:         1: N1jnZKgFWeeO_mSOZ-Ze4VQuw40.roa (hash: p2mqoQD/zjBSyOFNJGsdIrV1TF5FFtEk9b08kwg3UPc=)
                          2: _62J83lzQ1oFlJFExShsa6-ZEdE.roa (hash: uU0IWCbhbUzEOirSzRssIA5YpPwmzBjL6oB4XiM15Ok=)
                          3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: OqOZ7bucNMkj1vEMwYZzWdzn/1VijdAqDtda48JaJA0=)
                          4: jOwlKFNThlCAigDd4FjuTpSW9As.roa (hash: RSHefX5Zz29vKhe8YnCs3jQBCzq18ilVKULjruBqd+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:e9:06:9f:12:96:b4:ce:f8:f2:91:1f:39:4d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
        Validity
            Not Before: Jul 24 09:00:36 2026 GMT
            Not After : Jul 25 09:00:36 2026 GMT
        Subject: CN=d0b5a61e0337f2681d290e8892fcd2313348cb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ac:54:04:6f:ae:f0:28:02:99:d8:1a:9b:ff:
                    41:d3:09:24:94:d9:5e:b9:41:1d:57:a6:69:6c:d6:
                    8d:e4:dc:e5:77:01:66:ec:c6:f1:42:65:dc:56:94:
                    59:ad:2b:2d:72:8d:7c:13:ef:b2:b0:08:93:0c:99:
                    04:38:34:0f:69:c4:20:56:78:6d:80:80:cc:5d:2a:
                    a9:3d:aa:3e:90:db:a8:64:e5:7d:6e:e8:79:e1:82:
                    5e:c6:9a:b1:d3:b0:15:e7:6e:45:fb:fa:1d:b2:55:
                    4e:d7:7c:5f:7b:cf:f3:05:fc:ea:29:4c:14:f5:4d:
                    06:02:6a:79:05:41:67:58:72:fb:17:a7:ea:0c:92:
                    3a:22:e0:0c:94:39:6f:de:85:ce:ba:87:b3:56:fa:
                    7e:76:74:8f:06:d1:e3:b7:fd:36:2c:b3:19:84:1e:
                    00:68:84:4a:83:b2:33:86:fc:c7:26:bd:bb:51:b3:
                    d1:48:44:a4:2d:2d:29:4a:03:d9:35:5d:d0:37:9b:
                    ec:e2:aa:69:1f:7b:eb:98:44:c2:34:3f:1e:eb:3b:
                    53:85:53:a1:6e:ab:d0:25:ce:1d:80:5a:0b:90:a1:
                    44:0e:2e:0f:87:66:f9:3b:de:fd:3c:e1:59:b2:8f:
                    af:e2:15:b8:9d:a5:ca:1a:dc:97:2c:95:eb:d7:6a:
                    bd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B5:A6:1E:03:37:F2:68:1D:29:0E:88:92:FC:D2:31:33:48:CB:92
            X509v3 Authority Key Identifier:
                keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:87:3a:7e:1a:f3:68:28:bb:ce:fb:f6:07:60:7b:62:07:
         13:eb:b1:4e:1a:c5:97:40:e7:b9:32:1d:2f:18:ee:27:e9:9e:
         94:b0:31:cf:ae:16:90:9e:42:11:ae:34:06:b9:5c:e0:57:80:
         c5:d9:03:e4:50:a7:d9:72:99:76:f6:6e:ae:72:b1:d0:db:da:
         26:33:ae:f0:e9:41:16:62:f2:d4:bc:16:9d:49:61:43:b7:42:
         c0:7c:3a:cf:6b:35:ac:7e:1a:bb:4c:40:fa:75:c5:da:e7:41:
         74:4b:00:66:29:ce:4d:14:60:ab:c2:5a:12:69:ff:ec:7f:a6:
         e5:2c:dd:14:51:e3:e4:2c:f4:c1:95:78:90:3a:b8:98:85:ce:
         c8:66:c1:2d:67:6e:92:14:6c:b3:ee:a8:50:38:b5:36:8d:4f:
         7d:5f:15:87:6d:9f:bf:d6:ea:96:97:e4:a2:3c:12:7c:52:e4:
         54:a8:2c:6e:b9:74:c8:93:64:a8:fa:9a:cc:4b:c9:8b:3e:79:
         a7:16:04:e0:ea:e1:b7:41:ca:81:4d:ae:c3:2e:de:cb:7e:bd:
         4c:60:25:31:84:9a:33:b3:c2:01:f6:92:d6:c2:d2:87:2c:1b:
         21:67:ad:b9:bc:4b:0f:a3:6e:f1:c5:ea:f1:d6:15:da:59:21:
         26:05:b7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:51:18 2026 by rpki-client