Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
File:                     C0ojfRF9934LiqUS9vJfsgf5orE.mft (raw, json)
Hash identifier:          BTQQC75Ip8qN6RtL++pJlV9Uj3kMhmtU9TLmWcsgysA=
Subject key identifier:   D7:16:4C:3F:BD:7C:02:3F:93:C8:B8:2F:1A:74:C5:1B:45:19:92:81
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Certificate issuer:       /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial:       019F9248B310A611D7C937B3403EAD7807C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
Manifest number:          1562
Signing time:             Fri 24 Jul 2026 04:01:05 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:05 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:05 +0000
Files and hashes:         1: C0ojfRF9934LiqUS9vJfsgf5orE.crl (hash: +AH+dEYTHNj3vNIKLcPWV+NlSE0LkB4Ji1/nh88em3s=)
                          2: sV7_z3SZk6LqLitV-wqEx_InYyY.roa (hash: uJQknWD1q4gFVKPsqZnSjyh2z6Bj3wZE5RXoYc2FcBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:b3:10:a6:11:d7:c9:37:b3:40:3e:ad:78:07:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
        Validity
            Not Before: Jul 24 04:01:05 2026 GMT
            Not After : Jul 25 04:01:05 2026 GMT
        Subject: CN=d7164c3fbd7c023f93c8b82f1a74c51b45199281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:dd:8e:47:b8:67:d8:45:96:b9:24:50:38:
                    3f:fa:3d:6d:97:5f:fd:3a:4b:16:f4:aa:2c:30:68:
                    6b:d8:31:8a:c8:b4:5d:33:53:53:82:d6:01:0f:22:
                    c2:2d:f2:eb:90:41:65:a2:6d:fa:57:ce:6f:be:9f:
                    e7:f1:98:5e:69:b7:5c:72:f0:be:66:9b:12:4f:e0:
                    2f:bb:b3:cc:5d:84:f9:83:55:d6:4c:35:67:4e:bf:
                    cc:c3:58:1f:dd:6c:a3:11:82:f1:66:ed:18:d0:05:
                    39:ba:08:46:87:56:70:09:3f:f7:63:e2:17:01:80:
                    3e:2c:a2:76:1d:6e:e8:c7:6e:b6:50:7a:71:31:40:
                    84:b6:33:e9:8e:36:97:d9:80:9b:e3:8b:38:63:86:
                    e3:37:ed:3c:64:ad:09:6d:88:4f:b3:46:76:dd:33:
                    ef:fe:fa:40:60:b8:4d:9f:b7:da:60:b1:e4:06:0a:
                    20:91:42:da:88:26:58:2e:d5:80:48:d6:7a:3b:27:
                    1e:e6:b4:13:b2:bb:19:3f:f6:85:82:e1:14:d6:b2:
                    49:99:89:1f:7c:e9:ce:98:96:19:f2:9e:69:f2:a5:
                    37:dc:fc:8d:46:f8:ed:f8:d8:60:a2:a9:44:dd:66:
                    1b:17:60:23:9a:90:17:56:95:0d:89:ab:1c:a9:41:
                    a3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:16:4C:3F:BD:7C:02:3F:93:C8:B8:2F:1A:74:C5:1B:45:19:92:81
            X509v3 Authority Key Identifier:
                keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2b:65:21:62:c1:e2:aa:b0:93:58:76:74:32:51:a5:79:f2:
         0e:f3:e5:30:0a:88:f4:be:9c:21:08:d9:03:3e:e8:06:e1:4a:
         13:04:e3:6e:33:32:d3:7e:ce:99:a1:ea:15:0f:2b:bf:b9:99:
         67:54:9f:a2:b7:26:81:83:9a:cd:3a:d7:aa:ea:a0:1d:9e:28:
         6b:39:c2:75:fb:a8:78:fb:4f:8e:b0:ea:1f:86:7e:fb:87:00:
         67:66:df:6a:45:fd:9a:3a:be:a1:34:5c:f1:b9:90:bd:58:81:
         93:89:33:b4:30:ba:1f:03:8d:f2:60:d3:6d:90:f2:a9:72:24:
         94:bc:33:b6:ba:2b:1e:b9:5c:1d:42:96:3d:ee:70:f7:96:f3:
         60:a7:16:cd:1e:10:ff:cf:92:05:14:d5:b9:41:14:c6:ec:33:
         25:7d:48:05:32:a7:9b:74:a8:dc:84:3f:5f:db:b8:f9:d8:61:
         f6:96:26:fe:40:e4:6d:cc:7c:f2:58:90:72:93:4d:14:ec:b9:
         2e:c5:14:c6:1c:5c:f7:33:78:32:95:54:10:7f:92:85:96:c7:
         7d:6f:00:18:a0:49:9c:c0:94:4b:96:60:8c:1b:a2:c5:f2:ff:
         63:b8:42:de:d0:c0:5b:25:92:96:8e:74:58:11:c4:a7:b1:fc:
         e4:2b:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:44 2026 by rpki-client