Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.mft
File:                     11daq8dYqWhvnUPnrA7TWuRHj00.mft (raw, json)
Hash identifier:          TQM3gDdtYFfJcRost+pR/po29newFyEhZLHt8NSj6Aw=
Subject key identifier:   BF:48:DF:D2:CB:97:78:2B:67:67:31:F4:90:4E:65:58:23:41:90:F2
Authority key identifier: D7:57:5A:AB:C7:58:A9:68:6F:9D:43:E7:AC:0E:D3:5A:E4:47:8F:4D
Certificate issuer:       /CN=d7575aabc758a9686f9d43e7ac0ed35ae4478f4d
Certificate serial:       019F90911FFBD9F4758BA9DCB2A47A302868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11daq8dYqWhvnUPnrA7TWuRHj00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.mft
Manifest number:          010D
Signing time:             Thu 23 Jul 2026 20:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:57 +0000
Files and hashes:         1: 11daq8dYqWhvnUPnrA7TWuRHj00.crl (hash: HuMZqsQE3JZt0RrYbA3Z//dbfwxx3wrn8d9kVBMhmzc=)
                          2: Csx9QDzDsQz_aHEulUGMnETy388.roa (hash: C8BP4jzTuTTi1E6V65zQ+3x8Wh6nKEgy7uqDWh2K8g4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11daq8dYqWhvnUPnrA7TWuRHj00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:1f:fb:d9:f4:75:8b:a9:dc:b2:a4:7a:30:28:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7575aabc758a9686f9d43e7ac0ed35ae4478f4d
        Validity
            Not Before: Jul 23 20:00:57 2026 GMT
            Not After : Jul 24 20:00:57 2026 GMT
        Subject: CN=bf48dfd2cb97782b676731f4904e6558234190f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4e:15:61:d2:09:d6:30:09:a3:62:83:e9:77:
                    84:42:c8:b6:40:d5:05:0b:20:c3:83:41:3a:e3:90:
                    d3:8b:d4:38:c8:93:b9:a5:39:74:7c:41:a2:5c:38:
                    8e:b6:e2:ca:8a:2c:3c:9a:03:e3:4f:6c:d6:5b:cd:
                    1a:8e:91:ff:ba:01:40:e0:41:40:0c:98:f6:22:da:
                    b6:85:74:50:b9:10:df:ea:6c:db:8e:a6:2f:12:4c:
                    62:cd:a9:11:cb:91:25:7c:1d:e1:5d:0f:9a:93:4c:
                    73:aa:ab:65:12:e8:df:98:f7:cc:18:e0:b2:54:d8:
                    bf:50:00:8d:d6:ab:e6:dd:ac:6e:ad:06:1a:c1:60:
                    a9:f8:22:f8:cf:1b:34:44:7d:8f:b9:56:85:50:0b:
                    fb:4e:ba:42:32:67:49:f2:55:25:9b:41:2c:43:d7:
                    bf:b8:c5:60:f8:a6:47:fb:c9:08:ba:f7:1e:a0:40:
                    42:06:8f:f4:38:ea:6c:dd:27:bf:be:32:32:93:9b:
                    6e:b8:c5:6e:5d:47:c7:bc:37:d5:a6:7e:93:a6:88:
                    1f:96:3d:88:65:ad:7d:c9:33:26:b8:79:ec:9c:f0:
                    10:9c:fa:1a:cb:c4:4e:f5:a7:04:ec:33:58:59:56:
                    be:b0:e0:60:79:53:1a:91:3f:0d:f5:0d:7a:c4:22:
                    ee:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:48:DF:D2:CB:97:78:2B:67:67:31:F4:90:4E:65:58:23:41:90:F2
            X509v3 Authority Key Identifier:
                keyid:D7:57:5A:AB:C7:58:A9:68:6F:9D:43:E7:AC:0E:D3:5A:E4:47:8F:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11daq8dYqWhvnUPnrA7TWuRHj00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c3:ff:59:12:f7:7b:99:b9:d3:26:2d:f6:13:99:41:9c:fb:
         bd:31:80:ca:2a:9e:89:20:67:ba:53:b2:61:dc:c8:ca:53:98:
         4d:d3:a6:21:65:1f:ce:51:c3:8d:25:89:d7:8a:6e:a0:b6:7e:
         8f:90:74:2e:58:42:45:dd:08:47:e5:bd:65:8a:8b:68:45:99:
         96:51:f2:11:b4:88:05:7c:fb:58:5c:6d:bd:04:21:b7:c1:9e:
         58:08:e1:a6:20:32:9c:a0:b1:80:a7:12:52:6e:6c:56:94:96:
         a5:f8:a5:c9:24:5c:24:76:79:0f:62:fc:3c:5c:5e:76:2d:39:
         27:36:f5:70:41:11:1d:c7:93:72:10:ca:a3:13:71:69:6e:a0:
         86:31:b4:5b:2a:0d:7d:e6:45:95:76:05:43:ed:40:46:b0:88:
         35:90:6c:e2:47:99:64:a0:b3:6a:d5:51:68:af:6a:18:0f:05:
         0d:88:6b:88:7a:67:c3:43:bb:77:26:f8:c2:83:39:96:e2:b4:
         ae:11:46:18:50:c5:1c:79:82:0e:bf:5e:9e:e2:06:00:65:af:
         38:3d:6d:4c:bb:6b:c9:21:00:f6:ab:01:b8:2c:16:9b:42:17:
         67:24:7a:4e:d5:f2:df:27:e1:35:c5:d2:09:9c:4c:95:3e:f7:
         d2:64:96:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:41 2026 by rpki-client