Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File:                     mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier:          OkeMoGQOFzr67/N6IZdOsldIS2ZfyvzjdwW7kvKQiFs=
Subject key identifier:   D4:E8:E6:41:46:F5:42:EF:51:3C:29:96:30:20:99:16:F9:DA:BF:9C
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer:       /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial:       019F9700C4A3B93F367D19E039186D8AEF58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number:          0F24
Signing time:             Sat 25 Jul 2026 02:00:37 +0000
Manifest this update:     Sat 25 Jul 2026 02:00:37 +0000
Manifest next update:     Sun 26 Jul 2026 02:00:37 +0000
Files and hashes:         1: 277UMnCRR7zGdjhVvQlpf_Mrq_c.roa (hash: 9NAkWSbKvGlMuPXkg4z5e3x+bsBrci205y78D304cAA=)
                          2: E-p4X1qIBG8Spe6P6zk9N3q_I2U.roa (hash: V2KNJduz45ZPpbV/yVWVdNPDTFIpJ9BIkmO53dLe+Sc=)
                          3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: iaJuF20FOkVntFfJ/oKtQPHhyzJRmW781WuWs2NSWew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:97:00:c4:a3:b9:3f:36:7d:19:e0:39:18:6d:8a:ef:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
        Validity
            Not Before: Jul 25 02:00:37 2026 GMT
            Not After : Jul 26 02:00:37 2026 GMT
        Subject: CN=d4e8e64146f542ef513c299630209916f9dabf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:42:bd:a7:88:20:b4:c1:2b:fe:09:d4:16:
                    be:a5:70:9e:d8:65:33:60:67:e7:12:38:e8:47:1d:
                    1f:19:e4:af:ae:1f:2d:b5:27:ef:b8:8b:67:11:62:
                    c2:c0:da:26:c2:87:24:16:06:10:d4:4a:f5:13:6e:
                    d1:a0:74:33:a0:c4:39:b8:60:c8:fe:8f:e6:5c:96:
                    7a:99:15:aa:7e:4b:69:4a:f5:20:6f:dd:42:da:92:
                    83:58:5a:60:f2:d4:1a:2e:f8:93:de:a0:0c:2e:e1:
                    52:60:82:be:92:fe:0a:2c:73:8e:72:fd:5f:ff:d4:
                    e1:86:b5:50:c3:84:54:29:a6:bb:a9:97:16:77:8b:
                    1f:ec:a3:62:ca:98:7e:a2:57:3a:01:be:46:ed:18:
                    45:b3:43:95:2b:42:66:70:a0:a9:92:2a:ff:23:24:
                    29:31:2a:75:16:17:0a:d1:04:89:f6:f2:76:f7:49:
                    1b:22:bd:f3:4f:bd:07:88:10:35:00:f1:38:c0:f9:
                    e2:61:ab:f9:fd:9d:6b:82:ae:f9:21:76:81:62:19:
                    8d:0b:05:80:58:ce:5e:99:84:a8:f1:be:36:d9:a8:
                    b4:c1:3c:b0:c4:eb:0e:96:94:7f:99:2f:13:d6:38:
                    a8:36:0e:49:1f:ef:9d:8c:91:38:12:53:e7:b5:bf:
                    8c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E8:E6:41:46:F5:42:EF:51:3C:29:96:30:20:99:16:F9:DA:BF:9C
            X509v3 Authority Key Identifier:
                keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:51:4a:d5:b4:1d:b4:6d:5c:4f:21:39:ce:d1:56:ed:1e:b1:
         ac:40:b6:a2:9d:5e:71:43:2a:ce:9b:90:5e:32:e5:42:ad:3a:
         4d:66:38:ec:8a:24:8b:3b:83:99:26:3b:5d:19:7a:ed:f0:37:
         73:58:8e:bd:71:50:18:41:43:17:04:ac:a3:8b:cb:ea:e3:11:
         e1:74:e8:a3:56:23:20:3b:4f:fb:16:8b:20:d0:9a:d8:71:b0:
         cd:a3:e0:4b:7a:28:ad:19:0f:28:a5:9a:d8:cb:65:81:46:3c:
         6a:4d:33:20:85:a3:66:c4:32:c6:bf:dc:74:9c:0b:6f:54:62:
         df:62:7d:9a:24:31:4a:a3:40:08:04:e0:3a:4f:fe:21:c9:9a:
         9c:f2:53:8d:a0:1a:98:75:53:20:39:62:12:09:f4:9f:eb:a0:
         55:28:48:81:ee:d0:b7:bf:77:a1:17:dc:8d:8a:7c:40:84:7d:
         86:cd:7c:cc:2f:8d:3c:60:60:74:f4:68:80:97:1a:fb:3e:42:
         a5:c1:52:4f:27:23:7c:43:29:4c:89:a4:c8:cf:55:19:30:2d:
         cf:5e:b2:7c:3e:a9:ab:5b:b6:e4:68:7a:f9:66:75:f9:13:57:
         c0:fd:55:25:f3:47:46:85:f0:ae:72:6e:58:fb:e6:3f:1b:25:
         4a:90:13:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:12:24 2026 by rpki-client