Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
File:                     ADn3QWhtoR55rnxeSGqikICMsbc.mft (raw, json)
Hash identifier:          uYFfItEjrxewf0fMRTEz77HEq8FgZzZFLCZlHAB+Dwo=
Subject key identifier:   34:B5:E4:33:7F:EF:59:7E:85:92:BD:D0:9A:11:10:C2:08:A8:ED:49
Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
Certificate issuer:       /CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Certificate serial:       019F8FEBE45C578C4E559E581DFE3DDB6A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
Manifest number:          1672
Signing time:             Thu 23 Jul 2026 17:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:28 +0000
Files and hashes:         1: 1-e2VHJm1yprgoA2RO2M4enqAR0I.roa (hash: CA/ebUSWsRTpO5S95m/XbkHLFfreMZcZS2Awj+CjjhM=)
                          2: ADn3QWhtoR55rnxeSGqikICMsbc.crl (hash: /d798wJmPBJUMrB41+oxDbEeXoDZDygEDU4YssoPC4k=)
                          3: _5T_1t2Yk9cmdZJ5fdqbqhNia9g.roa (hash: PMdqBWS8Sq248VJe7WCjyLlSwcajdgjPj9KSZB54XXA=)
                          4: dCiOeRkpSuZVBvBHJ0Lxc8zRp5g.roa (hash: x8CtoyQL2Hjjdaplub12VkRqDXEO1pw4zhwQndzYIcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:e4:5c:57:8c:4e:55:9e:58:1d:fe:3d:db:6a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7
        Validity
            Not Before: Jul 23 17:00:28 2026 GMT
            Not After : Jul 24 17:00:28 2026 GMT
        Subject: CN=34b5e4337fef597e8592bdd09a1110c208a8ed49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:87:50:a7:1d:27:f2:f6:59:26:bd:68:00:
                    28:d2:72:50:d3:59:ee:17:89:9c:85:23:7b:d8:5c:
                    1a:e7:ff:84:23:2d:5b:35:24:11:a4:f8:ac:2d:f2:
                    35:cb:f3:b5:ce:6b:ee:4c:5e:1c:06:07:e0:f6:89:
                    52:8a:21:1f:e0:26:2e:7e:ee:eb:ed:f5:4e:71:7e:
                    76:07:e7:00:96:45:49:08:17:1c:7a:2a:96:6b:95:
                    c0:70:b0:7c:ba:03:95:65:d6:fd:89:c1:fb:b4:7b:
                    4f:f4:71:f2:50:1c:6e:cd:b1:f5:84:d9:ec:22:7b:
                    52:e9:41:50:21:0d:91:ff:d7:00:f2:7e:96:dc:6b:
                    78:fd:a9:b5:8d:53:79:b0:2d:e9:97:e6:bd:7f:ce:
                    8f:88:6a:1c:41:02:70:94:0b:1c:05:a4:55:10:a4:
                    db:34:79:56:5f:53:7d:00:55:e5:da:6e:3a:f5:a5:
                    76:29:68:5f:91:65:ab:a7:79:f6:55:9f:3c:80:d5:
                    79:57:2e:79:a2:23:d0:a6:0f:61:37:2b:12:37:95:
                    ba:d1:ef:46:ac:f0:4f:89:ab:8c:cd:bf:1e:b7:6e:
                    fd:25:74:26:48:01:7f:80:79:51:4f:f2:e6:aa:a9:
                    69:83:d7:6c:4c:b3:20:8e:ee:f6:c6:e7:4b:80:f6:
                    3e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:E4:33:7F:EF:59:7E:85:92:BD:D0:9A:11:10:C2:08:A8:ED:49
            X509v3 Authority Key Identifier:
                keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:53:a7:e3:5e:9c:a1:68:e2:8b:ff:ae:5e:a7:c8:62:b4:a9:
         e3:4d:a2:45:84:2e:8c:b4:23:21:b8:fc:5d:3a:2d:d6:bc:ab:
         1c:84:10:eb:9a:8b:78:ad:80:f2:4a:2d:ef:b3:72:c4:6a:ce:
         c5:59:49:07:36:6c:0b:55:22:6e:07:55:fb:15:4d:a6:ec:98:
         87:bd:6e:b5:7a:e8:d5:b3:d7:48:da:41:b2:f2:0b:4a:43:ab:
         a1:35:48:05:a0:03:14:67:69:0a:ea:a8:90:b4:3e:64:c0:71:
         11:10:a0:15:a2:ae:07:50:0b:5f:02:dd:0e:d1:43:26:fc:4e:
         92:6c:ef:9c:62:22:67:58:5f:2f:90:2a:56:6e:a5:e7:5b:c5:
         98:41:b0:fd:51:18:14:19:41:4b:ef:85:79:71:bc:dd:d6:ec:
         60:dd:a1:e6:c1:75:80:8a:c8:99:ee:0c:66:5c:da:17:ef:7e:
         43:20:16:75:a3:d9:e1:16:b9:71:2a:bc:6a:00:c1:b5:0b:c9:
         da:c3:6e:64:88:ce:bd:30:f5:0c:b5:de:7a:41:1f:89:b1:fb:
         7a:67:57:3e:98:3c:a7:10:aa:fa:aa:73:11:5f:d0:59:59:e1:
         3e:ad:b7:d7:25:a6:99:b4:6d:51:aa:92:77:b1:0a:23:dd:c4:
         75:42:73:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:41 2026 by rpki-client