Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File:                     1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier:          6SU45mJEKy6+sM8khi0SlChbMZCrq3AUPskahGy0PE8=
Subject key identifier:   73:2A:B0:AA:06:B9:21:C4:AA:4D:D9:C8:F3:B2:77:15:F5:68:15:BB
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer:       /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial:       019F8F4712F3428544F70795C2ADE39864DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number:          0925
Signing time:             Thu 23 Jul 2026 14:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:27 +0000
Files and hashes:         1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: hpGa1v/24UbVPr3APJO+jf4Qy2r0CZMG6eJwYWt/9eU=)
                          2: jbum_D98f7wXxL3zfJIV6BCwD8g.roa (hash: C+K78EzxF6K+3h9zUKmt0tIENTKcf8CCLlSHEr+JL70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:12:f3:42:85:44:f7:07:95:c2:ad:e3:98:64:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
        Validity
            Not Before: Jul 23 14:00:27 2026 GMT
            Not After : Jul 24 14:00:27 2026 GMT
        Subject: CN=732ab0aa06b921c4aa4dd9c8f3b27715f56815bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:05:a5:ab:db:d0:c8:14:5f:a9:b6:df:09:
                    9d:ce:81:40:1c:e4:f7:8f:a7:9a:59:b7:b5:c3:c0:
                    bd:96:bb:37:c4:73:09:0a:fa:63:ed:19:8c:6b:57:
                    9c:e3:4c:00:64:8c:3e:79:40:ad:44:62:3f:06:af:
                    c3:f3:fb:9b:16:a1:ed:7d:e9:e0:1f:0c:42:8c:43:
                    fb:77:7b:1c:eb:80:e6:44:3d:fc:f2:91:cf:a1:aa:
                    b1:7d:ef:df:84:67:bf:c8:40:b0:d6:74:eb:7d:c1:
                    48:8b:9a:cb:f2:be:5f:a8:f9:dd:0b:62:09:47:a9:
                    b4:08:c0:a2:dd:e5:21:35:0e:f1:d2:f1:ab:7f:36:
                    4f:06:66:6f:98:eb:db:15:50:de:ae:d9:eb:7e:ae:
                    55:fd:00:63:e3:3b:7e:29:a0:5c:ba:8e:b7:27:4a:
                    7a:df:75:a7:de:44:d2:4a:96:0b:66:06:d9:5e:b5:
                    0a:e8:4b:8c:b0:44:39:6c:b2:f0:80:45:06:c4:58:
                    8c:68:bd:1b:8e:13:db:b8:40:99:ca:fc:c5:bd:88:
                    d4:67:9d:e9:64:0a:7e:09:41:f4:f3:de:ab:44:22:
                    a7:fe:2d:18:80:09:c3:e0:6d:e5:a8:92:1d:84:d8:
                    a3:26:58:e3:cf:8c:2d:6c:8f:a8:b2:d1:5f:a7:d8:
                    ae:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2A:B0:AA:06:B9:21:C4:AA:4D:D9:C8:F3:B2:77:15:F5:68:15:BB
            X509v3 Authority Key Identifier:
                keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:67:80:e0:73:34:1d:5a:7d:3f:4d:1d:b3:29:aa:9f:cf:
         d1:65:7f:8d:ab:85:77:85:b5:03:ab:ab:ce:27:11:f7:38:8e:
         0e:2d:3f:89:80:64:75:41:c8:6b:46:c9:14:b2:7a:0c:45:2e:
         61:6c:4f:ee:a3:50:13:47:4c:27:8f:55:21:2f:39:46:0d:83:
         e7:b1:30:7d:51:7a:68:8b:a7:cc:46:8e:9c:79:f0:97:e9:58:
         f4:09:a7:73:03:72:6d:46:78:92:2b:75:21:03:3a:07:0a:67:
         62:67:53:87:03:69:5f:90:5b:a6:76:81:3d:cb:11:91:eb:10:
         67:a7:26:00:47:32:7f:0e:6e:60:80:f5:b0:cd:1d:ce:f3:38:
         b4:a2:e4:cd:30:08:2e:30:9d:0c:02:4e:f1:81:68:f2:21:d8:
         63:8d:6e:b1:0f:b5:2d:5b:72:0a:96:07:56:cf:c4:33:a6:46:
         3d:73:ac:20:cf:c0:bf:70:a9:71:f8:61:9c:b5:80:25:49:29:
         14:52:08:35:60:4d:b4:a4:87:4c:22:a6:35:ba:a8:24:a7:81:
         a6:1b:5d:99:e3:b4:d2:74:54:8c:da:f1:3d:d1:02:02:8f:d9:
         fe:d3:76:36:10:86:9a:33:46:10:83:d0:b2:ad:98:64:f7:a7:
         b9:5a:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:26 2026 by rpki-client