Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
File:                     02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft (raw, json)
Hash identifier:          ffuC8owWSTCc+ET5WmpxhX+cCUuA4VCNcl91nDCYOsM=
Subject key identifier:   74:F5:E4:EF:A9:36:BC:C3:A6:0B:A9:05:89:0B:0F:BC:20:56:51:98
Authority key identifier: D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
Certificate issuer:       /CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Certificate serial:       019F9022DE31F3398938323CDFABB68554F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
Manifest number:          0A7A
Signing time:             Thu 23 Jul 2026 18:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:31 +0000
Files and hashes:         1: 02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl (hash: GJR0j5SN6GgyFUxD2UiiUetWhVjZeOa8DVbVj1G6CA0=)
                          2: ZBxHkBcK2oMlGtDosjh9VGHmkqg.roa (hash: gV8rVYlB+7jAAEqNCaLk0r1iqei/ZFmeHTI/zHMf8g4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:de:31:f3:39:89:38:32:3c:df:ab:b6:85:54:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
        Validity
            Not Before: Jul 23 18:00:31 2026 GMT
            Not After : Jul 24 18:00:31 2026 GMT
        Subject: CN=74f5e4efa936bcc3a60ba905890b0fbc20565198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:27:29:36:a7:fa:c1:c9:cf:a4:b6:59:30:
                    3b:09:d4:9e:67:91:72:33:ef:36:55:92:0d:41:11:
                    7e:e1:8b:fa:76:04:88:55:60:80:9d:bc:fe:40:52:
                    2f:08:6e:dd:23:0d:04:1f:d2:ec:54:1c:4a:1f:26:
                    95:cf:67:4f:b0:d5:27:ea:b4:ac:41:a2:ea:89:61:
                    7f:2c:df:6b:af:3b:9f:09:d2:94:b2:db:ff:7e:d5:
                    f4:4a:3e:5c:4b:15:f2:94:1e:4e:f6:7e:1a:f8:8d:
                    0a:9c:e7:13:b0:77:0e:7b:fa:76:04:1c:82:de:d8:
                    20:5f:08:33:60:b6:0d:1e:09:1d:5e:30:fc:81:79:
                    4d:50:4c:24:57:2f:b9:76:9d:e2:ab:d7:da:1c:87:
                    75:31:76:11:56:4f:ac:b2:1c:3f:4a:20:f4:3e:6c:
                    6d:90:ba:20:14:87:d2:23:7e:eb:73:05:3a:07:92:
                    67:4d:3d:40:75:6f:6c:34:11:f8:62:4d:42:8c:0a:
                    c8:9a:e8:63:de:8b:30:29:f7:23:ea:0e:b7:1c:e7:
                    0f:da:93:02:06:aa:54:bb:db:70:66:ee:c1:0e:59:
                    30:ea:07:4e:fa:02:18:3c:ef:90:05:fd:72:73:e5:
                    1c:a6:00:ff:df:48:24:4f:dc:98:3c:6d:5e:95:7a:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F5:E4:EF:A9:36:BC:C3:A6:0B:A9:05:89:0B:0F:BC:20:56:51:98
            X509v3 Authority Key Identifier:
                keyid:D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0b:9a:89:a4:9c:ca:6f:8e:25:cd:9f:22:f3:2c:d9:15:55:
         e2:8c:cf:20:c3:79:df:77:eb:39:ec:de:30:26:f6:67:24:6f:
         de:ca:7e:53:73:f9:6d:64:c9:0d:2e:45:0f:fc:ee:c4:39:67:
         2c:b5:f3:ee:ad:4c:99:98:cf:c9:c9:aa:57:76:c7:21:4a:77:
         bf:a9:4d:85:82:a0:ba:ed:8e:b3:5f:3f:29:07:8a:09:92:44:
         8b:1b:1c:a5:30:24:0e:8a:b1:41:97:6f:4f:a8:ed:e0:4e:13:
         28:4f:d0:3d:ee:1b:04:e3:a6:a1:dd:c8:31:24:5f:0e:f3:bc:
         5e:05:53:a2:ac:d9:b1:e9:cd:47:a4:fd:45:ce:3b:59:ba:1f:
         7c:fb:1a:ab:1f:17:f3:1c:4f:5f:1e:a9:7c:0f:fa:24:7f:9a:
         97:39:13:8f:45:b1:75:ef:0b:2b:bd:53:f6:bb:56:c0:5c:60:
         c7:7e:cc:59:07:fc:fe:dd:f0:7e:0e:80:2c:19:eb:ef:11:37:
         ce:bb:fc:dc:74:a3:04:1e:69:af:6e:0c:b5:25:f1:7b:96:0b:
         89:0e:0a:1b:fc:e4:07:c9:0a:b0:10:56:fb:c6:ee:09:73:84:
         c9:f9:0a:d0:e8:ab:f1:94:5e:aa:5e:7e:39:b5:8a:08:c6:37:
         11:51:84:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:33 2026 by rpki-client