Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft
File:                     1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft (raw, json)
Hash identifier:          ft6fdqHE0SNKhqm3fRszuHQcO0pl/Vx5kRg1CBfjTic=
Subject key identifier:   59:F1:6E:53:4E:A0:0A:18:63:3E:EE:9A:77:E1:4F:6F:28:3C:14:B5
Authority key identifier: D4:65:AC:36:21:B2:26:BC:69:16:70:5B:B5:B2:EA:9B:56:25:9F:C1
Certificate issuer:       /CN=d465ac3621b226bc6916705bb5b2ea9b56259fc1
Certificate serial:       019F8F7F99A9445B667C59D9419432EEA3F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GWsNiGyJrxpFnBbtbLqm1Yln8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:02:11 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:11 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:11 +0000
Files and hashes:         1: 1GWsNiGyJrxpFnBbtbLqm1Yln8E.crl (hash: VEAhzECq8XMwTzO3S+kPI7QbSs9E6VHmY96VUnD9H4s=)
                          2: 8mWPiavSIhHhZrr_OyyIC3ldxIU.roa (hash: 54lDOWiVIqMmT6MqaRlUv+jn9WnmFxvCPORtfhuO2us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GWsNiGyJrxpFnBbtbLqm1Yln8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:99:a9:44:5b:66:7c:59:d9:41:94:32:ee:a3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d465ac3621b226bc6916705bb5b2ea9b56259fc1
        Validity
            Not Before: Jul 23 15:02:11 2026 GMT
            Not After : Jul 24 15:02:11 2026 GMT
        Subject: CN=59f16e534ea00a18633eee9a77e14f6f283c14b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:94:bc:be:ba:21:0e:52:38:57:a7:a9:d4:
                    e2:87:3a:22:b5:94:32:b7:5f:de:de:82:58:5d:32:
                    b6:61:6c:7a:fe:56:85:d4:c4:7a:b8:4b:07:21:33:
                    d7:6e:27:66:9a:68:6d:9f:83:73:ba:d8:5c:a7:5c:
                    e8:40:34:5a:4f:4e:d8:a7:84:25:ec:f6:3f:bc:3d:
                    bb:80:15:a1:ee:59:5c:0e:12:7f:5d:dc:f9:5e:8b:
                    2d:d6:27:65:2e:aa:8f:61:1e:aa:36:bb:06:e0:58:
                    7d:a2:86:a4:9d:87:58:b3:a3:34:f7:e1:ae:5c:25:
                    e0:90:3f:ff:07:14:f4:16:4f:69:02:b9:98:6d:6d:
                    91:e6:69:f1:de:41:57:ca:41:c1:8b:b6:cb:7f:17:
                    16:d6:cd:3d:3f:81:fc:d5:d0:46:42:b3:93:eb:49:
                    be:ee:f3:b6:94:34:0e:9f:51:6a:86:51:df:3e:46:
                    d7:d6:9d:97:f6:98:bf:49:4f:8f:2c:36:a8:56:da:
                    5f:2e:f5:99:16:b4:79:e7:82:7d:92:89:f6:1e:82:
                    1b:64:77:b7:bf:04:64:42:bf:82:b2:04:84:d3:8a:
                    75:f4:60:c4:fb:c6:7c:ae:18:0c:74:d7:0a:40:b7:
                    00:64:2d:ba:58:89:07:16:07:60:94:4c:bd:1c:7a:
                    d6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F1:6E:53:4E:A0:0A:18:63:3E:EE:9A:77:E1:4F:6F:28:3C:14:B5
            X509v3 Authority Key Identifier:
                keyid:D4:65:AC:36:21:B2:26:BC:69:16:70:5B:B5:B2:EA:9B:56:25:9F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GWsNiGyJrxpFnBbtbLqm1Yln8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b9:e2:29:fa:ce:60:fd:54:d2:e5:2c:9b:22:85:14:74:bd:
         60:87:19:51:28:03:1b:80:fc:00:7f:a8:41:2a:e5:b9:53:db:
         79:07:bd:57:74:44:92:31:39:78:cb:cc:cc:d6:fa:3b:f4:6c:
         b8:62:ea:34:f4:20:42:b4:02:20:bc:08:81:46:0d:18:b9:01:
         63:db:fa:d7:ff:9b:3e:c7:d6:b2:22:80:62:cc:8d:4e:83:27:
         ce:ee:d4:7d:03:d3:6e:83:2d:e6:21:a2:e4:95:4b:e6:e1:a4:
         70:01:2e:a4:34:f9:ff:bb:f7:52:f0:94:3d:93:4f:b9:19:15:
         63:46:0b:d0:66:44:eb:3d:64:5f:8f:30:25:40:6e:ff:32:ef:
         b8:22:57:24:16:b4:79:ec:98:e5:a5:4d:db:fc:47:ed:f5:65:
         9b:1e:f9:b6:f6:32:fe:ec:33:99:ed:fc:b0:99:19:b8:af:9f:
         07:7e:10:0f:50:e0:d4:f4:30:e4:40:bd:3e:f5:bc:99:45:a0:
         ae:47:97:81:df:1e:37:f9:3f:76:5d:d0:38:c9:41:b7:43:d3:
         45:ee:7f:06:94:36:ae:af:68:54:05:e8:06:be:41:37:aa:09:
         69:0b:18:08:dc:ba:c0:3b:47:1e:af:9c:32:0c:e2:e0:1e:b5:
         45:6a:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:45 2026 by rpki-client