Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
File:                     x-nHqlNLEwC_ck__DwwbBRnVBbs.mft (raw, json)
Hash identifier:          ai9RDkOdPHojVXyaHh1EkVfNbJOIfk3xub/7FfF3GSY=
Subject key identifier:   2E:0E:FD:3B:AA:77:E8:16:A8:FF:D7:BB:CA:7C:8A:5F:AE:1B:EC:C1
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Certificate issuer:       /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial:       019F8F7E0296355E876B227887CE70C55E79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
Manifest number:          1297
Signing time:             Thu 23 Jul 2026 15:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:27 +0000
Files and hashes:         1: dEnHFZk05aY4cgV0s2QNjTG_aiE.asa (hash: 85J9mRxBgzT4mAYbFVUMmPvP7vuAIQqlGKi5trfW7P8=)
                          2: mh_TdtzBIEJPW0ulUNVzoJPlQfo.roa (hash: VHQC5JXNXPL7dViMaRJsghQyLf8Q641q1jtdoqA0N7c=)
                          3: pup7KKGu6INuR9GPvvhFR29g5Oc.roa (hash: 7AwIieGtN+w625KKmDmNhVi+0hmbjN0Jhpfdv8RT964=)
                          4: q3AcvSoNF20doXTk9QlAnTvcSjA.roa (hash: Ui8SoolJbLZ5X4LyhiafgmO8BgxCUTg7oVZBkGTjS2g=)
                          5: x-nHqlNLEwC_ck__DwwbBRnVBbs.crl (hash: 6gReh4ulKRPaGnhUg70n3iR6dPpVTomHoebHGgG2tH4=)
                          6: xZh2bocDA2yvFjE0_wiUAEY6dzo.roa (hash: Tzt6JK47BDLVwIilYNgHd87uaHUZEPoA9qdEO9K7mHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:02:96:35:5e:87:6b:22:78:87:ce:70:c5:5e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
        Validity
            Not Before: Jul 23 15:00:27 2026 GMT
            Not After : Jul 24 15:00:27 2026 GMT
        Subject: CN=2e0efd3baa77e816a8ffd7bbca7c8a5fae1becc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c9:2c:d6:7a:03:4e:39:5e:a1:2b:53:e4:dc:
                    61:5e:c9:54:dc:71:50:fd:56:3d:b2:6f:da:43:67:
                    04:c8:fc:8a:ab:d7:ab:83:74:74:47:56:de:c5:0e:
                    aa:49:de:aa:cb:a4:ea:47:c1:80:24:1c:67:c5:f6:
                    20:48:8b:98:d6:e6:94:44:2e:fe:6b:b5:15:71:ee:
                    3f:ce:1a:88:47:8a:a6:7b:9c:66:ea:81:db:7d:d1:
                    f4:6e:92:1a:50:9c:03:17:3c:14:0b:a9:9e:08:c9:
                    e9:2f:c6:b4:5c:53:4f:7e:fc:9e:aa:65:4c:b8:c2:
                    21:d0:9e:de:d4:3b:d3:e5:26:7e:e6:d4:b5:cd:d8:
                    08:cc:36:45:b2:59:b4:38:b9:c2:61:2a:09:6a:40:
                    67:bb:b9:08:9a:ba:71:3a:66:ef:9e:af:4b:99:c3:
                    c3:1f:63:4d:d0:4e:18:65:e6:dd:1f:e3:35:c2:3b:
                    05:20:92:98:22:2c:0e:67:9a:03:5b:f4:e5:ee:59:
                    de:dd:e0:32:c9:fb:20:2a:fe:71:41:7e:40:01:11:
                    ec:70:c6:6e:c1:44:b5:36:09:82:48:8c:0c:aa:96:
                    8c:63:99:ab:ac:0c:24:ca:1f:9e:67:f7:ba:26:47:
                    0e:67:49:be:3c:70:99:16:5e:4f:75:17:5c:f2:48:
                    ca:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0E:FD:3B:AA:77:E8:16:A8:FF:D7:BB:CA:7C:8A:5F:AE:1B:EC:C1
            X509v3 Authority Key Identifier:
                keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:37:e7:1e:6c:b5:e5:6b:e8:e5:f6:c2:37:ef:bb:dd:e5:39:
         81:85:c4:f1:a1:51:a9:2e:df:79:4b:a3:b2:c0:86:5d:f1:01:
         58:1d:71:55:88:94:d0:34:ac:a0:65:77:4d:ff:10:50:11:4d:
         ea:43:59:69:dd:c1:06:be:91:b5:5c:40:96:d5:93:15:18:e1:
         97:16:57:35:c5:72:0d:cc:1a:82:d3:9e:35:ec:3e:17:89:fa:
         7c:97:a7:24:67:de:cb:f3:9a:bb:1c:9c:7a:37:1b:79:aa:89:
         2a:ac:92:af:57:a8:72:1a:70:c2:1b:eb:9d:dc:51:94:df:f9:
         72:1a:0b:31:7f:1f:cc:c5:26:7b:ad:f3:9f:28:42:10:dd:8b:
         a8:22:1c:9c:66:75:2a:f8:97:df:45:09:78:e6:1e:2d:e0:5b:
         8d:37:a8:df:a0:ef:4a:11:41:3b:a4:40:f0:7b:7b:4c:b2:7d:
         48:9e:63:5f:76:6a:1d:b8:5c:1b:90:71:08:41:0e:c1:a2:d6:
         f3:d8:1c:0b:ad:d3:8f:16:48:9a:27:eb:a9:a0:61:df:20:f6:
         b6:3b:1a:ab:2d:31:55:46:b8:ac:bf:e6:08:7e:f3:ff:6b:4b:
         31:30:9e:31:83:5f:79:6d:b0:c0:70:d9:e5:96:63:2d:64:d9:
         e4:66:3b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:47 2026 by rpki-client