Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
File:                     fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json)
Hash identifier:          KGpdDuz9kqHXzu4tu94+/9Lezv3XVYjDVtNN28Xi5yQ=
Subject key identifier:   0D:99:D6:61:45:A3:01:EE:84:AA:48:AC:10:44:F0:AE:89:77:4C:80
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Certificate issuer:       /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial:       019F92B60CB13114AD51883C7A39F4CD5E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
Manifest number:          19DC
Signing time:             Fri 24 Jul 2026 06:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:31 +0000
Files and hashes:         1: E7wjJIpp_incFIPPoxFXkTVNOZ4.roa (hash: dWCBkyUED92Ky9/PvSo7QQdS38SvVtpgkoIQkxWKNdI=)
                          2: IuJcF4mH2-0BSlT6G6AhKea-qcA.roa (hash: T022zetJkpJSmZy29rCTHnD8e/gW5HPSAFMOxFPo87E=)
                          3: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: Kfn57zRxDIJXY2t0Srn11o13645chBcL4b/aSRnDehI=)
                          4: i5uiOxUKql3E_IHTtTBz9-Sb4xc.roa (hash: tZ8uEFMzEFAwyadWPmY+Ye5B1UCKISaztWjCzXC/FxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:0c:b1:31:14:ad:51:88:3c:7a:39:f4:cd:5e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
        Validity
            Not Before: Jul 24 06:00:31 2026 GMT
            Not After : Jul 25 06:00:31 2026 GMT
        Subject: CN=0d99d66145a301ee84aa48ac1044f0ae89774c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:4c:39:28:20:75:74:03:94:af:ac:31:4a:
                    14:6a:0f:b2:33:cf:37:43:82:d8:fb:1a:86:43:31:
                    2e:14:f3:2c:c1:fb:f5:c4:cf:73:5f:4d:e5:cd:48:
                    5d:52:52:78:56:0b:ec:8e:76:20:d7:77:50:12:b8:
                    ba:60:4c:cb:77:c9:1d:62:3c:8e:62:02:dd:7f:bd:
                    1b:12:ad:a7:30:d8:41:87:98:0a:ae:1b:c7:7d:51:
                    50:ab:5e:eb:c6:88:43:1c:9c:3b:0b:aa:01:8e:f8:
                    4a:38:95:4d:bb:4f:4d:34:3e:d0:ca:1a:30:7c:2b:
                    09:b7:4b:bd:7e:94:29:07:d5:f2:1c:52:39:d1:f9:
                    67:97:2f:8c:0d:43:a1:31:bd:89:6f:50:16:1d:84:
                    17:d4:59:a9:1d:55:f6:fc:da:66:36:9a:50:70:da:
                    78:d5:fb:ee:8f:a8:c0:ea:56:12:72:24:57:2c:c5:
                    91:4d:10:c0:b9:cc:7c:10:23:af:b5:52:0d:58:d2:
                    e1:cc:5d:a5:43:91:aa:91:11:e0:92:76:2f:48:ac:
                    0d:8e:47:93:d1:2c:e7:79:e8:4b:c0:ac:81:ca:17:
                    b7:10:1f:84:19:14:a9:27:45:99:2e:27:38:c8:84:
                    46:34:ab:1a:d1:df:d7:66:6d:d8:15:5f:d9:04:35:
                    50:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:99:D6:61:45:A3:01:EE:84:AA:48:AC:10:44:F0:AE:89:77:4C:80
            X509v3 Authority Key Identifier:
                keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:28:be:2e:53:cb:ca:ce:0d:07:4c:50:e0:21:27:c0:43:d4:
         6b:4f:88:4f:63:fe:06:55:2b:21:87:eb:ff:57:1b:87:6b:44:
         f6:19:a7:f3:6d:72:ca:20:9e:78:5e:cc:e9:08:26:ca:45:2f:
         91:16:03:e7:6c:3b:a1:5c:f5:2e:58:5c:c6:00:9c:22:10:43:
         3f:d6:8e:3b:0a:f0:5d:0d:b1:48:91:94:cf:c2:11:57:c2:b9:
         21:d0:3e:82:8b:f9:76:bf:1d:56:2d:c8:cf:8a:f5:fa:3b:08:
         9a:c3:52:58:11:2d:56:47:ef:bc:18:ce:85:fe:7a:81:6d:6a:
         30:b1:36:bd:7d:ed:78:4e:6d:5b:cd:f0:dc:19:21:77:92:bd:
         2a:47:27:7e:08:56:cd:c7:0d:25:b2:87:75:c5:98:3c:1c:c8:
         e6:15:03:9f:54:9e:f3:5f:33:76:57:ca:47:b5:72:56:aa:cf:
         7b:01:a0:ac:01:49:92:9c:d4:9e:67:c2:66:15:c6:4a:4f:90:
         fe:11:b0:9a:77:69:a6:0d:89:9a:6a:2b:84:b2:3d:11:23:d1:
         e2:db:c1:9c:06:a9:46:42:a6:fa:14:59:10:c2:e1:a2:27:9f:
         8f:87:0d:e4:81:17:39:c5:b2:30:c2:56:2c:20:32:6e:71:78:
         cf:ea:c7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:00:47 2026 by rpki-client