Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File:                     fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier:          ccPKd/loYooWODCNUj7uIS6sCdxiMKPnKFX2iY4zJMo=
Subject key identifier:   E6:8D:AE:07:B2:FD:A4:03:A1:DA:95:CB:39:81:DD:7D:CF:C7:77:35
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer:       /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial:       019F905AA27D06D8B36679A5EFA867B60259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number:          088E
Signing time:             Thu 23 Jul 2026 19:01:26 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:26 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:26 +0000
Files and hashes:         1: 1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa (hash: 1Isp4qEhUMW8RbXIHRvEykaShiBFWYANN4lo8FswOgU=)
                          2: OF8_FWobXxZIravQspxAerLsQCQ.roa (hash: Y7S5oVSgN9LGWqLS5miIXFy0ldxtoJVgFrZlsFrthM8=)
                          3: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: j94KZTDTm/t1py7ojubHMszlik2nSlxBRrRh/gEuQ+k=)
                          4: iYC8lbhytTD32pOwIBpaKnVh070.roa (hash: YM6e3l9qg3NAPYfHxGGt9x27m8gykxKp/xuSfybtvWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:a2:7d:06:d8:b3:66:79:a5:ef:a8:67:b6:02:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
        Validity
            Not Before: Jul 23 19:01:26 2026 GMT
            Not After : Jul 24 19:01:26 2026 GMT
        Subject: CN=e68dae07b2fda403a1da95cb3981dd7dcfc77735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:7c:bd:a5:65:13:00:16:8d:49:94:48:10:
                    f5:f4:5b:34:b8:f5:7c:af:24:a5:84:02:d3:92:64:
                    c5:d6:71:da:dd:f4:e6:5b:1a:59:37:21:75:1b:eb:
                    4d:9c:ae:dd:e0:84:d6:ac:38:b8:20:31:68:96:df:
                    43:26:6d:d3:65:f6:35:64:25:fd:a2:8c:23:5c:b0:
                    7b:51:e1:65:fc:9d:4e:40:f3:ee:f2:61:44:73:12:
                    a3:ae:60:61:aa:0b:82:88:e6:59:8b:00:ed:05:99:
                    b1:34:3c:90:95:3a:f9:30:43:62:f6:d7:b0:46:cd:
                    9a:b6:7e:b4:34:c5:f6:56:c8:72:f2:dc:ec:f9:d1:
                    1b:ae:ef:f5:76:e1:d5:16:e3:f6:12:a6:f0:b4:49:
                    16:77:ec:c8:64:22:a4:d5:fb:d0:95:09:d8:30:15:
                    82:c1:1a:e5:77:a7:4d:98:f6:33:7d:ec:67:73:69:
                    42:82:3e:af:be:dd:2e:56:40:0b:b8:a9:7d:21:35:
                    80:c0:1b:83:4c:cf:28:87:39:be:56:50:15:40:08:
                    fe:57:32:17:ce:1e:84:bb:2d:dc:76:58:f8:fd:1f:
                    0a:09:56:b5:65:2b:3f:48:57:79:70:2b:d6:bd:ac:
                    32:96:fb:8b:1a:ae:75:cd:9d:4d:99:82:ba:55:de:
                    f1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8D:AE:07:B2:FD:A4:03:A1:DA:95:CB:39:81:DD:7D:CF:C7:77:35
            X509v3 Authority Key Identifier:
                keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:90:a0:b7:c3:11:f2:23:65:8e:35:c9:ca:4c:88:38:81:ec:
         c4:87:c4:c1:c9:73:85:bb:b5:8d:5e:9f:7e:e1:81:78:24:59:
         53:fa:3a:5e:ea:27:62:14:a1:31:20:3b:47:e4:af:3b:de:b1:
         39:02:fa:c7:dd:89:13:ca:c7:b0:e9:b0:68:71:8a:8a:d4:8f:
         22:35:55:35:16:a0:ee:4a:c1:49:b2:73:f5:be:ef:5a:ab:4b:
         f4:ff:40:07:49:cb:6e:a9:45:c3:06:d8:ee:1d:6a:77:d7:2d:
         23:e8:28:6a:d6:b3:32:45:11:f1:b5:18:cc:2f:ac:aa:3a:af:
         f8:b9:e0:c4:12:8b:77:cc:58:f0:c1:cd:71:e4:12:ff:de:f2:
         13:b2:af:57:ce:bc:17:6b:2f:15:68:11:15:8b:69:dd:c9:5d:
         f2:00:77:90:3e:fa:cf:c6:70:bc:2b:ff:b9:09:b6:1e:17:69:
         20:0b:7b:98:77:45:3a:cb:c6:93:90:f3:c5:77:80:b7:d9:09:
         55:f3:bd:09:a7:02:6c:2d:cd:ce:aa:32:e6:e2:30:02:c3:ea:
         84:0b:fc:2d:41:99:d5:67:e4:59:7c:99:bd:90:be:82:b0:ec:
         7a:65:36:6b:8d:34:dd:dd:12:dc:6e:e1:5d:3f:46:34:c3:e7:
         fe:b3:31:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:56 2026 by rpki-client