Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
File:                     RhX5mPdHJp43r32hEIBhJMmX3Fc.mft (raw, json)
Hash identifier:          fReHeBVNS+unO/yCveJzO9UTEJ4EhhNBQCPnhJLOeEo=
Subject key identifier:   C3:00:2B:9B:9D:5D:F5:5D:22:71:61:09:A0:D1:2B:46:35:BD:DC:CE
Authority key identifier: 46:15:F9:98:F7:47:26:9E:37:AF:7D:A1:10:80:61:24:C9:97:DC:57
Certificate issuer:       /CN=4615f998f747269e37af7da110806124c997dc57
Certificate serial:       019F905A6F9234F258E3DDB336960F178411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
Manifest number:          9E
Signing time:             Thu 23 Jul 2026 19:01:13 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:13 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:13 +0000
Files and hashes:         1: RhX5mPdHJp43r32hEIBhJMmX3Fc.crl (hash: wvOnTuF/+lrJia9L7rsG2+4i1yFWpOcV4BR5PFM0aUg=)
                          2: dLlLozq_LxYh46bnmgkvjvoWmpw.roa (hash: h2aFWt98BJV3iCLAz94s4Esgtecs4nrZqTq2dKOirQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:6f:92:34:f2:58:e3:dd:b3:36:96:0f:17:84:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4615f998f747269e37af7da110806124c997dc57
        Validity
            Not Before: Jul 23 19:01:13 2026 GMT
            Not After : Jul 24 19:01:13 2026 GMT
        Subject: CN=c3002b9b9d5df55d22716109a0d12b4635bddcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:92:d9:b9:42:eb:45:e3:b7:8c:77:26:1e:
                    f5:a3:1c:41:64:3e:28:74:3b:50:92:82:ed:c6:39:
                    3c:6e:8d:3d:29:4c:ab:c4:e0:93:7e:8a:c6:a7:2c:
                    a6:d8:8d:e3:28:35:18:da:05:1b:7e:8b:2f:09:14:
                    53:f5:1b:cd:c8:79:59:2e:63:17:6e:8a:13:85:f5:
                    9b:6d:4e:01:ab:d7:20:24:a1:13:b4:d5:12:21:c2:
                    29:7d:05:f8:ac:d7:67:ce:de:76:d9:76:a6:1a:12:
                    0b:81:5b:44:85:f1:c5:2a:25:22:06:7b:3f:2c:33:
                    7e:f5:cd:02:f1:6e:d2:0a:f1:d0:77:82:55:7a:b4:
                    74:a0:61:94:91:5a:9c:ed:97:6f:63:2b:3d:71:93:
                    27:ef:28:5c:ac:26:70:b2:17:e4:7d:72:4e:53:bc:
                    71:eb:ed:1e:89:e3:c7:3c:8d:a8:7b:b7:09:b3:ac:
                    26:62:83:3b:30:2d:f3:fc:b8:4f:8c:4c:15:9c:68:
                    dc:6a:06:b8:97:4b:4c:bb:e4:f4:d7:e2:bf:77:b9:
                    aa:6f:9a:df:fb:6d:4b:51:5c:30:07:cb:35:77:53:
                    b5:06:37:9a:a7:df:cf:2d:69:19:93:70:d6:ef:b5:
                    0d:df:a3:4e:cf:ca:9e:20:00:6f:37:02:13:bb:2c:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:00:2B:9B:9D:5D:F5:5D:22:71:61:09:A0:D1:2B:46:35:BD:DC:CE
            X509v3 Authority Key Identifier:
                keyid:46:15:F9:98:F7:47:26:9E:37:AF:7D:A1:10:80:61:24:C9:97:DC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e1:64:d2:c1:1b:c3:f6:a6:48:87:7d:4f:47:19:d3:bd:fc:
         ed:e3:24:54:6a:ee:1c:26:06:63:1f:a4:3d:d0:bc:20:3f:a9:
         c4:f7:7c:30:08:0f:32:3c:3f:4d:bc:18:e9:4a:40:14:0f:a0:
         86:f3:ac:08:7b:14:ff:fa:3d:29:1b:16:c3:83:11:a8:5c:fb:
         cd:c5:94:25:ff:c1:5d:1d:5a:5f:bc:e4:15:68:e4:a0:57:71:
         b5:af:4f:d7:9d:ad:bc:5f:52:1e:5e:34:fd:a2:41:f7:d8:3c:
         49:88:3d:77:13:29:8e:7a:7b:80:db:4f:99:db:29:0e:3a:65:
         83:85:ca:69:b8:0e:54:6b:7d:66:c8:fc:72:42:52:c9:6b:80:
         b9:bd:5a:86:56:8f:f5:d3:0a:4c:6d:56:9b:af:5a:07:49:fe:
         68:83:7f:78:e9:db:49:ae:26:fd:b5:62:c6:7f:bc:93:52:c3:
         33:9b:1d:a2:d2:45:1e:b3:22:ec:36:ef:15:5f:3b:f4:17:a3:
         e7:48:d3:03:17:63:fb:20:91:b7:c1:39:ae:8e:db:23:fb:a2:
         6d:6d:55:29:c4:40:0b:9b:2f:dc:fb:f2:13:dc:63:36:3e:55:
         1c:83:df:1a:60:0a:74:46:2a:67:6e:1f:9f:e5:6c:16:a7:ad:
         95:9a:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:15 2026 by rpki-client