Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
File:                     ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft (raw, json)
Hash identifier:          2SuTMNKlwDHczzESQ1PtCkkPQCFhR6XYBdw0mlNFFlo=
Subject key identifier:   75:67:9D:0C:14:31:9C:44:11:A4:A5:69:B6:D8:35:DC:BD:B8:61:10
Authority key identifier: 49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
Certificate issuer:       /CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Certificate serial:       019F91354EF1853BA08AE2F2AB2EC7A894D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
Manifest number:          1E
Signing time:             Thu 23 Jul 2026 23:00:17 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:17 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:17 +0000
Files and hashes:         1: 9KcTd1IGZHRv0B-1lN3bR5j0dnA.roa (hash: eFhdSfFf7rhWziAPLqibOglSLYqWl4gf7RvZLdXF6D0=)
                          2: ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl (hash: UgKQfFTYsOt/SEeSElykPYRkKxnaWC/lxOjdEDGFhfQ=)
                          3: fHjeWk0X-9p1R4DiQBN0NOabyAY.roa (hash: CXvc3jafQmeKRESg6l+phyxsh/MDhMbCl7fOLISnWT8=)
                          4: iM1oUl29TZo8TBmUQuzNvFuJWQs.roa (hash: jxbp4u9Zss89VbcKpO1URl2CR7HBCn20++6ggU5n1h8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:4e:f1:85:3b:a0:8a:e2:f2:ab:2e:c7:a8:94:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493e63e071904e21e1b878ae4550813f0e07ae4a
        Validity
            Not Before: Jul 23 23:00:17 2026 GMT
            Not After : Jul 24 23:00:17 2026 GMT
        Subject: CN=75679d0c14319c4411a4a569b6d835dcbdb86110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:cf:ba:ff:e2:50:d4:de:9d:37:b7:54:e4:
                    e5:f2:9b:2b:bb:01:1a:ae:25:a6:2c:9b:05:db:1c:
                    82:fb:cc:b5:66:27:06:af:41:4a:89:a0:b5:d6:c5:
                    b0:5a:70:90:07:82:75:de:a9:03:7a:6b:63:57:50:
                    84:da:6d:ca:b4:4d:14:d1:8d:e5:8a:17:be:77:d0:
                    b6:0a:6d:37:e1:7a:df:62:01:b3:1a:1a:2a:c9:fd:
                    06:2b:fe:9b:83:5e:c5:1a:c6:70:ae:71:ff:2d:4b:
                    51:84:78:30:fd:c4:f9:e0:60:33:f1:51:5b:f1:93:
                    80:a1:22:3d:9e:6b:85:37:fd:23:b2:1c:ea:67:fc:
                    94:2d:fe:34:cd:ce:2b:9e:1e:a7:85:1b:e5:26:de:
                    b0:38:08:39:ee:24:51:a6:9e:f6:e5:0f:5f:69:44:
                    1b:74:b3:c8:66:d2:2c:03:0b:77:46:46:80:1a:5a:
                    65:1f:a4:82:71:bc:84:e8:75:e8:3b:b6:1b:d8:30:
                    50:74:2f:34:99:15:4c:22:0b:f1:eb:77:b1:e6:70:
                    75:2b:68:54:6e:72:9f:02:31:3a:12:1e:d9:fe:10:
                    96:fd:97:6a:bc:85:62:16:0c:01:74:7d:b3:fb:b2:
                    73:74:e9:1b:ad:1e:67:4c:63:47:44:81:c7:52:8f:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:67:9D:0C:14:31:9C:44:11:A4:A5:69:B6:D8:35:DC:BD:B8:61:10
            X509v3 Authority Key Identifier:
                keyid:49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:dc:5c:79:17:6d:fc:67:23:16:f6:6f:0a:16:12:33:42:57:
         03:55:80:5f:4d:98:d0:90:cc:b7:08:f8:41:a7:50:2a:20:66:
         0f:83:be:19:b5:3a:f0:64:3e:32:30:7e:c9:c2:03:0b:54:e3:
         f1:61:e3:d7:a8:4e:c0:e1:c3:b4:07:c2:71:19:78:45:81:24:
         65:c7:b5:51:0a:7c:0a:d0:ec:a1:5c:f7:2a:37:2e:95:da:d4:
         ed:74:47:a4:44:e4:69:47:87:b8:1b:e2:f9:fa:f3:97:e6:f4:
         b4:03:a2:cd:48:8b:16:c4:2a:ad:79:a6:22:b2:6f:01:9d:92:
         e8:e0:92:af:ff:51:70:bc:bb:15:e1:a9:09:ad:68:7b:e4:fa:
         3f:b5:02:95:7e:0f:ad:47:ce:97:f0:76:a4:24:5e:16:da:e8:
         63:93:eb:9f:d8:ed:10:3e:5d:3e:c7:00:33:d6:0f:11:8d:44:
         74:ea:97:07:1d:12:8c:d6:e2:d5:41:11:ff:21:ef:2c:e1:4f:
         32:31:a7:56:06:e9:d6:c1:c4:f2:8b:70:7c:78:11:09:83:d6:
         d6:b5:ba:65:e6:d3:db:81:d4:fa:9b:de:3b:14:cd:38:4a:0d:
         6d:b5:e2:95:7b:fb:de:fa:ba:ec:1e:b8:c5:8f:41:99:8f:74:
         18:52:a8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:29 2026 by rpki-client