Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File:                     K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier:          1vwzFNew8tbDjYM2/UsAOtBw/BqVAjmGmGrd48/D0Jo=
Subject key identifier:   9F:DE:DE:7D:17:95:37:3B:7A:47:ED:73:2E:0A:96:52:17:86:A4:09
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer:       /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial:       019F90FE7845E8CA0855DB7EECC0016EAA52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number:          19CC
Signing time:             Thu 23 Jul 2026 22:00:23 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:23 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:23 +0000
Files and hashes:         1: 5seVusnKx_Ys9lX6helV3VYtD2U.roa (hash: PZFyRFcdx9T5Z2TzIZsPirDrvtRVVFWfye1bbVqWbBc=)
                          2: 9btJARByxb1iHyonPUVBkRTOsVo.roa (hash: OoaKNkwSuE9swZGc5WUnPf4K5AgnLBPyAFCvevkhF9U=)
                          3: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: 8WkOCOs9pUV899aEOlz1vcRAOOyyZQcjpvBd9/EDNBQ=)
                          4: XWrsnRZ3w0e0DoMnOjNkuaIXctc.roa (hash: hKOZKXZd+O54dyQoUT1ViJz0QYsGp84f/gyggnOHiyY=)
                          5: _VixDRlDHcr6PrncvZUZ-GW6afw.roa (hash: XqMR9xWk1nvAk22Z7sQHJKRu3wfO9rwjwEWrKeLB+8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:78:45:e8:ca:08:55:db:7e:ec:c0:01:6e:aa:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
        Validity
            Not Before: Jul 23 22:00:23 2026 GMT
            Not After : Jul 24 22:00:23 2026 GMT
        Subject: CN=9fdede7d1795373b7a47ed732e0a96521786a409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:53:54:ff:ae:b8:a4:b0:28:56:c5:1b:4e:
                    ee:e6:93:7a:93:2b:ae:ee:a6:ea:4f:b4:00:da:c7:
                    1c:14:6d:a7:da:3a:c1:8c:6a:60:c6:41:74:ba:dd:
                    f7:86:c3:2b:e6:76:8b:d3:15:b3:01:76:91:27:25:
                    77:20:1b:6d:6c:98:39:95:15:6f:b0:ed:1d:a7:49:
                    cd:ea:09:68:68:9e:5e:bc:78:e5:33:7e:29:86:ca:
                    d9:6c:47:49:95:3c:10:9d:59:04:50:1c:54:e7:31:
                    90:d3:1d:aa:03:e0:87:9e:b2:2a:7b:5b:ad:12:8e:
                    90:9e:ff:e1:e8:09:70:f8:fd:f9:62:7c:b1:a6:ec:
                    d9:7b:ae:c3:bf:3e:c1:34:b7:4c:8c:e5:de:1b:78:
                    a1:32:98:a0:bd:d3:a0:a6:99:71:d6:13:c9:c5:86:
                    d7:a2:57:21:4c:c1:5c:1a:e2:1a:6d:71:e4:e2:c4:
                    dc:46:57:6b:7d:16:c3:55:ef:07:27:44:af:e8:b3:
                    bf:d1:63:df:db:df:4b:f4:c9:50:01:d0:b2:81:b2:
                    27:e9:bf:a9:7e:04:d8:7a:ca:56:53:b8:3a:c0:69:
                    2a:e3:69:05:99:1c:0e:34:e9:e1:71:8e:42:09:50:
                    23:40:3b:31:24:5e:cb:d0:b4:74:d3:6d:4b:9a:c3:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DE:DE:7D:17:95:37:3B:7A:47:ED:73:2E:0A:96:52:17:86:A4:09
            X509v3 Authority Key Identifier:
                keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:fd:61:00:4c:45:90:10:92:dd:b4:ae:e8:f8:64:de:45:13:
         04:27:e0:0f:3f:85:d6:02:9b:1f:70:5b:b3:55:53:e1:45:8f:
         1c:6e:ba:24:5c:34:76:4e:89:9d:b8:7a:c6:48:9e:dd:a2:d5:
         b9:ee:84:aa:0b:02:95:8e:ef:21:d9:60:da:35:55:ea:72:7e:
         c4:48:a1:e0:e8:ec:67:30:be:49:b6:d9:8c:b3:4e:28:02:c5:
         f4:e4:16:54:2b:28:bc:a7:90:88:74:b0:c8:15:fd:a3:25:fe:
         d8:80:0e:55:fb:6c:07:81:39:a8:6e:d0:f5:85:e5:29:0d:0d:
         a6:6c:64:cc:74:a6:e6:b0:43:0e:a5:f1:db:58:08:15:9f:48:
         5b:09:f1:46:f3:0c:50:31:c9:c5:e2:a6:80:42:75:f6:bb:d7:
         76:cb:cb:ec:7c:1b:2f:26:45:79:9a:e2:1f:b7:8d:a3:26:7a:
         28:59:0b:58:06:61:00:6f:af:8a:43:1f:32:a2:aa:fd:1b:41:
         14:f7:e5:cc:97:71:d6:e1:34:73:15:0b:a0:15:ce:54:b7:26:
         ce:c9:e6:1d:2b:eb:84:d5:83:3a:c4:45:37:5d:0e:86:43:f9:
         ed:67:0b:5c:79:8b:80:95:e1:4c:7d:11:0f:7a:d8:81:9b:d5:
         44:40:06:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:13 2026 by rpki-client