Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
File:                     4puawu9jG5LoL1ldc-R5LIFuxuY.mft (raw, json)
Hash identifier:          QdH5ji0p5U93s+jNToL4R08cXInQIo3C3KabLK7ByNA=
Subject key identifier:   98:9A:11:DB:4E:D3:21:6F:15:E1:DF:6A:CD:62:6A:F1:A9:F3:BC:22
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Certificate issuer:       /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial:       019F9211A23791F5093076E78CBB70090B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
Manifest number:          10B8
Signing time:             Fri 24 Jul 2026 03:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:56 +0000
Files and hashes:         1: 4puawu9jG5LoL1ldc-R5LIFuxuY.crl (hash: JSsEdpNDq48gjAahQjn/qboSvRShp/955pCholx1igM=)
                          2: 5uh-9bmbFKl3mY9dQ-trlVcyuXw.roa (hash: 7VoUKco9uMR4votOVTE4cFdkMXMlmmD0Z2XuyuOwo54=)
                          3: D6gTiVO-9PFx1VXaAiVU2jihjro.roa (hash: cxYog1EZCaoK2oy6il6DzlbbblthBZpzQajZ4Iuz3ss=)
                          4: Go5O8u6koNHV7b7UoH00mholn8I.roa (hash: iLDBMtL7MeCo+uMKF6jUonWy9kHpSBrH0Ajuok1AP1g=)
                          5: RHtSPb_4urWRb_Me8JE-aMOq7ME.roa (hash: WYOOK4rHLtPNbsObjpbWYMyv+6VV44Z6DDVLnIDNy/c=)
                          6: faOrucFqifHg9ZQWslyFQV3sAg8.roa (hash: +17wes5PNs8b98M2LmcNOgvHcF8OBtgbRoMn5hJbWa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:a2:37:91:f5:09:30:76:e7:8c:bb:70:09:0b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
        Validity
            Not Before: Jul 24 03:00:56 2026 GMT
            Not After : Jul 25 03:00:56 2026 GMT
        Subject: CN=989a11db4ed3216f15e1df6acd626af1a9f3bc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:27:3f:56:b7:91:85:c0:20:98:c7:e3:f4:
                    b6:31:19:e2:12:77:2f:57:64:da:33:59:76:ca:ae:
                    8a:c9:0a:53:6d:ea:dd:23:93:e1:4c:6e:09:13:c3:
                    f2:d9:16:4e:ab:49:f7:dd:93:6a:7a:84:52:58:d4:
                    1f:03:ee:f4:b6:cc:0c:98:b2:2f:33:16:14:57:55:
                    47:68:63:fc:e4:bb:7b:d0:b0:21:a1:f8:8f:bc:2f:
                    0f:6d:7e:d3:ee:c1:28:ff:30:20:47:25:02:b1:4f:
                    52:2e:76:ac:28:b2:cf:5e:5a:9a:18:5c:b3:17:96:
                    1c:e6:d2:14:d1:fd:53:6e:b6:4b:3f:41:0f:91:1b:
                    eb:47:82:26:a5:0b:e4:12:02:d0:7a:dd:a5:e1:85:
                    62:d1:86:e4:40:e5:a2:e0:b6:af:2b:f4:45:f1:e6:
                    00:86:f9:c1:92:02:4a:3d:57:02:43:e2:62:7a:57:
                    63:83:f4:c3:7b:f3:07:ff:03:0c:5a:c6:c3:ac:f6:
                    b6:60:5b:77:f8:4e:37:90:c2:d5:66:d7:4b:00:d0:
                    b8:f4:e1:72:11:ef:43:ab:0b:20:43:5c:a2:00:29:
                    b4:d9:88:0d:a9:2a:0a:12:ae:5d:b5:c9:c3:41:06:
                    13:25:b5:e1:2b:2e:72:2b:34:82:c5:f4:ca:83:35:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9A:11:DB:4E:D3:21:6F:15:E1:DF:6A:CD:62:6A:F1:A9:F3:BC:22
            X509v3 Authority Key Identifier:
                keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1e:a6:33:89:fa:1d:92:c8:f8:6d:d9:2a:d1:e7:0f:62:7d:
         17:80:a3:15:35:f4:f5:95:6b:0f:64:37:b7:0e:a0:05:f5:c8:
         03:ac:26:1e:f0:24:7d:a6:06:58:ab:d1:22:8b:31:12:28:b0:
         9e:90:b3:b7:3d:39:b9:e8:10:46:89:8e:20:f5:ed:47:63:53:
         f2:71:6f:98:3e:47:16:77:a3:76:de:a8:36:cf:e8:b1:9e:e2:
         3a:77:66:62:06:04:00:4e:f8:0f:c8:a3:68:4c:45:e3:e4:2a:
         98:2a:c0:61:31:d8:8d:f8:b6:bf:27:7b:47:fc:45:7b:97:0a:
         0d:43:5d:ee:82:ce:9c:1f:3e:ab:de:d5:df:c6:44:e0:91:af:
         46:29:89:ec:73:45:48:ac:de:7d:71:4b:06:c6:f6:73:f7:88:
         ed:eb:6a:a5:e8:f1:03:6f:fc:52:4b:1b:81:bc:b8:cc:cf:07:
         86:ba:42:e4:af:9f:43:59:3e:d5:10:21:b6:b4:02:fe:32:11:
         f6:94:9c:28:f4:05:e0:78:8b:2b:3e:50:22:b0:be:3c:ea:be:
         81:f9:43:5d:2d:59:b3:5e:b6:37:15:d3:8a:24:8f:f5:f7:0b:
         64:6d:0d:7e:a6:27:b4:a1:6f:f2:84:da:b8:6d:0e:da:9c:9b:
         7f:77:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:12:59 2026 by rpki-client