Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
File:                     MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json)
Hash identifier:          8wSGrczm94ewS31Xgww0A3nJyMp1/r29JLX0+UmZmBU=
Subject key identifier:   48:F5:87:F5:F4:53:39:3E:1E:CE:A3:24:DA:78:50:F2:1E:E7:6C:2E
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Certificate issuer:       /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial:       019F8FEC2C758DAFFEA16BC7445A85186DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
Manifest number:          14AB
Signing time:             Thu 23 Jul 2026 17:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:47 +0000
Files and hashes:         1: 6JYQqrzS3UTPcgvWPbO4TgCoS3k.roa (hash: iOMk6cfEftH8+M5zAq6J+7nYiKbK2CplnfrSukCWdkM=)
                          2: KiViUlRdp1iVIBpAgxyCpxxK3gQ.roa (hash: Yk/aBj6tG6In28XxnbyhWgRKpfIGrGy/o9iiuy0VDDg=)
                          3: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: XQSbgkqG+i1IwM75XokmIqrbzrtTfM4HAvHR9571w1Y=)
                          4: aZwxLLe27uK7ns0bAgvQ0s7Mqt4.roa (hash: IJFNHlYozh1R/6V0WKyYnkoCMR+po4mStHpa7SQZbq4=)
                          5: qM92mL8g634Yh9KwZjRzI5vZ9l8.roa (hash: f+n6LoAwAduArbfX5BlVpkBMLZF56N90CkVkSMu7mrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:2c:75:8d:af:fe:a1:6b:c7:44:5a:85:18:6d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
        Validity
            Not Before: Jul 23 17:00:47 2026 GMT
            Not After : Jul 24 17:00:47 2026 GMT
        Subject: CN=48f587f5f453393e1ecea324da7850f21ee76c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:13:ce:94:d6:e2:ec:2d:42:b4:b3:57:26:
                    03:62:5d:ba:81:37:d1:86:38:bd:34:7c:22:ed:56:
                    89:81:e9:b7:80:65:91:39:c4:ad:b0:48:93:58:69:
                    3b:11:e5:e4:0c:6f:f6:cd:df:d2:8a:42:eb:57:a8:
                    15:44:d4:6c:41:d0:77:e7:0d:7e:f5:60:d8:cf:5d:
                    fc:3f:ef:5e:d1:ad:6d:60:d7:92:47:c5:d4:eb:07:
                    b1:89:64:24:a9:b0:12:29:6b:2d:30:42:e8:be:30:
                    7c:c5:c5:d6:c7:a9:1b:52:aa:81:b3:29:2d:df:38:
                    59:63:dc:c5:61:c3:00:20:4a:8e:50:8b:a0:88:b5:
                    1f:b6:f8:87:4c:aa:14:5a:70:7c:0b:a1:9f:ea:8f:
                    bf:33:01:66:3a:c0:21:4d:9d:c5:3f:a4:02:b2:a1:
                    5b:d9:fa:4b:ba:1c:c2:5d:e3:f1:88:52:3c:08:66:
                    7e:4c:a1:bf:c2:de:b6:e7:25:c6:c7:b8:e7:34:dd:
                    8d:bc:76:2e:39:33:af:2c:58:56:e2:e3:58:ba:1e:
                    88:00:f7:52:38:ac:e0:55:a6:96:f2:65:8b:34:b7:
                    bd:a5:e6:71:35:2f:ce:28:54:0d:2c:ee:78:a1:22:
                    a9:01:ef:31:5f:bf:ad:92:a5:73:d8:fc:73:d6:f9:
                    a3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F5:87:F5:F4:53:39:3E:1E:CE:A3:24:DA:78:50:F2:1E:E7:6C:2E
            X509v3 Authority Key Identifier:
                keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b8:27:3d:9f:72:6f:3b:8a:2e:88:ba:51:92:56:25:18:0c:
         60:cf:80:55:b4:02:d0:60:ba:7e:ca:e4:52:d2:e4:35:a6:68:
         63:22:70:79:51:91:aa:ec:76:3f:e1:1f:52:34:1a:06:0e:3a:
         bc:ba:c3:1a:05:da:ea:1c:81:e0:4d:67:0f:3e:dd:1a:fa:16:
         88:12:45:4a:be:fc:13:1b:2e:24:b7:e7:81:78:e7:35:aa:e6:
         9f:c2:2b:4e:6f:ec:ae:83:71:38:36:3f:14:c1:35:fe:94:f3:
         b6:3e:28:b1:96:f3:1b:bf:bb:61:d8:49:b4:af:85:5a:07:f1:
         4d:7c:71:b5:21:7f:d8:9f:40:87:f4:68:21:57:72:6a:85:29:
         37:0e:43:ce:e7:9b:d1:76:8f:f6:d5:24:9d:d2:51:fa:cf:2b:
         a4:9c:55:8a:e6:8c:92:e7:07:6c:ca:52:85:ed:c3:38:8f:90:
         49:43:73:94:b0:b7:de:da:4d:15:f4:99:a0:49:c0:52:09:13:
         b7:62:bf:8c:15:5d:62:37:05:f4:ee:7a:3b:08:ce:0d:01:43:
         eb:c8:22:f8:5a:77:f4:c6:ec:dd:69:97:4c:f3:df:0f:a1:08:
         c8:6f:b5:bb:ab:b8:ce:3f:d5:27:8d:e1:aa:cc:f9:50:b4:91:
         19:e1:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:45 2026 by rpki-client