Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
File:                     0PhWqIToYidB9eFo7Hqno95vK8M.mft (raw, json)
Hash identifier:          teM8CsA7effl0Hl7JSQIc+WoFrCLYNkE/mxlmuRyPe8=
Subject key identifier:   6A:56:71:8C:76:0D:2D:D3:3F:41:1B:0D:E4:8A:02:CB:65:4F:1E:C2
Authority key identifier: D0:F8:56:A8:84:E8:62:27:41:F5:E1:68:EC:7A:A7:A3:DE:6F:2B:C3
Certificate issuer:       /CN=d0f856a884e8622741f5e168ec7aa7a3de6f2bc3
Certificate serial:       019F909174E25B0F9E3E2B1964B656718A44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
Manifest number:          88
Signing time:             Thu 23 Jul 2026 20:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:19 +0000
Files and hashes:         1: 0PhWqIToYidB9eFo7Hqno95vK8M.crl (hash: voDd7P0K7Mvre+8l2VAm97FscBvE+1IuWGEFqs4mQq0=)
                          2: 5uwlb6VAMyxIYrxx11L4WCDtq5Q.roa (hash: zVxnrr7NCdH/hFMNNgmxYObL0zm+TgiecARXZu0CtnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:74:e2:5b:0f:9e:3e:2b:19:64:b6:56:71:8a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f856a884e8622741f5e168ec7aa7a3de6f2bc3
        Validity
            Not Before: Jul 23 20:01:19 2026 GMT
            Not After : Jul 24 20:01:19 2026 GMT
        Subject: CN=6a56718c760d2dd33f411b0de48a02cb654f1ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:f7:4b:c9:d4:d8:85:42:da:aa:aa:d9:6e:
                    df:28:a7:55:aa:96:8e:a3:ec:23:be:0f:41:66:cb:
                    ea:12:d5:1c:4d:a8:62:c9:6c:fb:63:9f:a8:e3:85:
                    78:0d:d0:f5:b0:7c:ea:b3:77:32:19:29:f5:a3:aa:
                    f8:e5:29:af:88:92:2f:5d:ba:bd:a0:63:af:27:d8:
                    a6:b8:8c:87:17:c9:c1:f5:40:f8:e6:69:98:b3:c5:
                    d7:90:41:4b:2d:93:3d:99:a7:9a:9e:71:3c:90:40:
                    08:1a:7f:b9:2c:1b:a3:24:3f:b8:b9:0d:75:fc:96:
                    d1:79:c0:15:a8:78:7a:7c:6a:c1:7c:a9:61:36:29:
                    e8:89:86:de:a4:65:c3:21:9d:1f:d3:8c:2f:95:0b:
                    53:88:c4:01:e6:cf:2c:9e:ea:6f:64:58:aa:7a:17:
                    2d:ed:a7:ec:ed:2d:9a:38:c0:47:20:4b:21:30:84:
                    fc:bc:24:02:08:13:fe:12:41:37:9c:e3:79:d3:c6:
                    43:dd:2c:36:59:ef:93:6f:d6:a7:ac:1c:e0:49:c2:
                    16:ad:85:e9:e3:d2:a3:3d:d9:c9:66:e7:41:90:ce:
                    ba:2c:a3:5e:28:d2:20:df:79:96:ec:0a:ca:23:5d:
                    1f:4b:97:ec:c9:3e:23:bc:21:b2:ea:90:3b:d6:80:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:56:71:8C:76:0D:2D:D3:3F:41:1B:0D:E4:8A:02:CB:65:4F:1E:C2
            X509v3 Authority Key Identifier:
                keyid:D0:F8:56:A8:84:E8:62:27:41:F5:E1:68:EC:7A:A7:A3:DE:6F:2B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fa:22:ee:09:8d:11:0a:b2:cd:25:89:59:15:f8:91:e1:36:
         ba:ba:23:65:3d:4f:66:c8:f8:00:dd:f1:83:58:31:42:d1:5a:
         06:94:21:54:b3:61:2b:b3:a2:2f:53:53:ae:2e:13:60:0b:75:
         cc:76:1f:0f:f8:4c:9b:95:81:11:f7:6f:b3:14:ad:17:39:35:
         f8:56:ef:05:72:c9:8e:fa:96:4a:d1:24:18:7b:07:0e:ea:83:
         6c:60:4a:8f:b1:11:a5:90:51:e8:fe:98:9b:9d:0c:64:3c:ec:
         1b:8c:f7:44:66:2a:8a:50:07:84:fe:bf:ea:04:db:8c:a3:64:
         37:2e:26:49:72:64:54:25:17:77:3c:4c:db:a1:b7:74:5a:27:
         5f:d0:08:39:62:42:68:a2:9b:15:8b:e6:02:92:37:71:fe:6e:
         88:5f:ea:14:98:a6:b4:e4:61:d6:0c:9f:d4:df:0b:38:9f:86:
         1a:91:a2:a2:57:58:62:9a:e3:82:83:e0:c3:ae:44:39:55:5f:
         52:c8:b1:3a:48:9f:dd:4f:96:23:3c:b3:88:6b:a0:83:05:72:
         42:02:38:b6:09:83:4a:09:07:bb:1d:fd:8c:b7:49:18:6b:89:
         9a:97:92:ba:f1:6d:07:8f:24:9b:96:e2:26:d3:98:87:f3:a6:
         b9:14:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:25 2026 by rpki-client