Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File:                     iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier:          nICcG5O3hqG3doJuJUVQDbFl7JwmDNbxJ2qvNK6puJ0=
Subject key identifier:   5F:67:A2:4C:E4:52:F9:4B:23:D0:AF:35:EB:A5:4C:95:97:FA:C7:78
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer:       /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial:       019F8E6B2894F44EEA0B3093A265A48028E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number:          0211
Signing time:             Thu 23 Jul 2026 10:00:15 +0000
Manifest this update:     Thu 23 Jul 2026 10:00:15 +0000
Manifest next update:     Fri 24 Jul 2026 10:00:15 +0000
Files and hashes:         1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
                          2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: /Y81sWYj7bVZUsc6/k6x3QX2xwyatMssJ/KrwfXIWA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6b:28:94:f4:4e:ea:0b:30:93:a2:65:a4:80:28:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
        Validity
            Not Before: Jul 23 10:00:15 2026 GMT
            Not After : Jul 24 10:00:15 2026 GMT
        Subject: CN=5f67a24ce452f94b23d0af35eba54c9597fac778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:70:dc:59:f2:9d:8f:7c:b5:d7:9b:d2:60:
                    9c:76:41:8a:51:cc:f1:b1:24:8c:cf:5e:cc:b8:dc:
                    a5:e6:2a:45:89:e8:76:fb:96:ec:d2:c2:2e:94:77:
                    93:d1:18:1e:68:05:c5:af:db:dc:bf:90:63:6d:9c:
                    e2:9d:7e:eb:03:a2:33:32:12:25:46:8b:f9:c0:7a:
                    66:a1:fd:b9:37:14:9f:1a:a5:3a:d5:c3:2d:cb:c3:
                    11:e0:50:77:20:cd:fb:49:17:94:92:d1:1b:58:32:
                    20:0d:bb:ae:b7:33:8f:57:71:02:39:77:0f:de:b6:
                    3c:a9:0f:3b:38:e4:f7:08:ac:47:82:b1:9b:0a:0e:
                    7b:b3:e0:40:63:0f:85:51:16:5e:ad:b5:91:f5:da:
                    30:be:31:4d:95:14:9e:a6:68:94:a2:ac:bb:79:08:
                    dd:5f:ae:c5:31:76:ae:73:df:20:ba:9d:fe:9e:44:
                    59:2d:83:8a:94:85:0c:5f:1e:77:65:4d:9e:92:63:
                    c5:53:12:fb:bf:6d:05:ac:77:89:f6:a1:77:e6:33:
                    86:32:ef:57:22:a3:6c:97:34:bc:8e:21:5f:ec:16:
                    6f:8b:bf:cc:0e:bd:25:d4:27:3e:54:20:d5:60:e2:
                    34:f3:9c:ad:3c:8b:68:3e:4f:d9:91:59:d9:47:32:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:67:A2:4C:E4:52:F9:4B:23:D0:AF:35:EB:A5:4C:95:97:FA:C7:78
            X509v3 Authority Key Identifier:
                keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ea:ff:2b:fd:0b:05:e3:a8:01:e4:2d:67:c2:5d:b7:14:d7:
         e2:e4:22:a2:39:a9:3a:78:cc:91:5d:0a:af:2a:a1:ff:7d:e9:
         4b:93:10:dd:10:5e:65:a7:2f:1d:5d:13:3e:61:02:08:ca:ab:
         78:ed:b9:ea:f2:77:3e:e3:50:8c:15:6f:ad:6f:91:3e:cb:31:
         d4:6a:47:69:ec:5f:00:45:5a:23:80:fc:ff:a8:18:11:9b:c1:
         a8:11:4e:d2:6a:94:e1:d9:6f:58:39:ba:d6:ee:3b:c4:23:d4:
         a0:7b:fa:68:94:b1:60:c9:92:7a:ff:10:bc:68:87:5d:07:f0:
         0f:2b:93:7b:1c:6f:15:68:b4:49:0d:7f:db:92:a5:c4:ff:78:
         e0:f2:27:da:37:3b:14:f0:31:64:81:92:be:0f:bc:fc:e5:00:
         a6:65:5a:a9:1b:9b:aa:ba:bd:05:9c:ac:81:1b:02:fc:a4:99:
         72:6f:6d:43:21:fa:fa:38:ac:30:e7:ba:15:6b:49:cc:91:36:
         24:2b:2a:1e:5c:07:46:f2:53:a7:da:36:f3:c6:92:94:48:a1:
         1a:46:91:92:01:12:b4:01:a5:bf:ce:bb:94:e6:c7:ef:e4:2f:
         2e:40:b9:47:70:66:11:bb:42:44:54:40:7c:89:21:3e:68:42:
         72:67:b0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:59 2026 by rpki-client