Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File:                     IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier:          8Be+kt36lP9UecUWebu8XVgvbT7F2xGC0SfyEJ2dqZQ=
Subject key identifier:   D1:8E:FB:D4:C7:5A:6F:73:25:3B:CA:42:CB:E2:0C:5D:0F:25:E8:BF
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer:       /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial:       019F924911E702C8F2211F62FBBE9A21CD5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 04:01:30 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:30 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:30 +0000
Files and hashes:         1: 4Yk_IaIMOFlSvQlmWzU3D7V9Ww0.roa (hash: 95l63lLqTUI0fetfFavGHFZZGMfnTIwSEKulFFxrxpc=)
                          2: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: gaCbzLo2i3p9EQWQIc96JPD4bJjWEtLu11Y2aOgsrOw=)
                          3: XuKWpFnXaJB0gtal7fqUS1fMEg8.roa (hash: fZ0gDaNy7iCopngCMQx3WGFJao02SoThGdAJ/JuVVp4=)
                          4: YkLn8tz3hbcMIIBgz23I2SUwFt0.roa (hash: 7e3Ahg7cLmv6KRLYOyXJchFQCZ5bapXqbWjili8cMRY=)
                          5: i2ip3ClaBDk8K-xOqpebdwt1qZk.roa (hash: n9wEOC6qCVKNONqpdVLm6uWq7MOOkRaDBcCMVsbbO38=)
                          6: ogEjhX2zW6tgVtz_pOmSPCqvyBk.roa (hash: dF9i4unUQNdYa+sgOQav50pelR9XCvdYshIMM/dzsiM=)
                          7: sD8yyKxgqD60hgzKcX-gPGQxeh4.roa (hash: //5uDqVbcxyKWzTpZS8757S/2Ry/Wbbw/UQbM8VY0LM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:49:11:e7:02:c8:f2:21:1f:62:fb:be:9a:21:cd:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
        Validity
            Not Before: Jul 24 04:01:30 2026 GMT
            Not After : Jul 25 04:01:30 2026 GMT
        Subject: CN=d18efbd4c75a6f73253bca42cbe20c5d0f25e8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:18:7c:51:0c:e9:47:97:a6:c5:f1:d4:d9:
                    81:bd:61:ab:79:b6:93:70:f0:79:da:01:67:9b:48:
                    0e:32:ab:6b:f1:44:b3:71:54:b4:46:d1:f9:3d:82:
                    54:82:4e:fc:10:9f:74:a4:db:63:6d:1b:43:ff:8c:
                    43:e2:ef:c6:a1:ba:89:ba:0e:eb:f0:9f:5a:66:0d:
                    1d:6f:98:3d:aa:0d:8b:54:da:5a:a3:1a:2e:a9:8d:
                    e6:77:67:64:72:cd:5c:97:c4:9e:c0:6d:1b:ef:bc:
                    ea:2f:08:b5:76:cf:64:9d:35:05:bc:72:6d:82:a4:
                    e1:e0:19:98:23:be:f0:17:c4:7f:6a:7a:ab:ad:79:
                    80:7c:2b:95:43:66:da:59:16:4d:05:2e:36:3b:dc:
                    18:c5:6d:51:f3:6b:a9:45:3e:00:7b:13:9b:1e:03:
                    4c:15:68:33:b6:36:4b:91:c8:86:b1:be:f4:94:c2:
                    14:fb:e9:b5:8c:96:94:0b:f8:bd:55:a8:b1:7a:ed:
                    20:03:4f:11:02:55:ed:87:c5:3d:db:6b:aa:63:e2:
                    ef:5c:b8:c5:2d:65:db:53:66:27:2a:1e:87:03:b0:
                    1c:aa:74:77:97:9f:42:13:a8:ec:3a:53:d7:cf:da:
                    bb:3f:44:91:b5:3b:96:19:2e:11:d0:3b:0b:8a:25:
                    0c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8E:FB:D4:C7:5A:6F:73:25:3B:CA:42:CB:E2:0C:5D:0F:25:E8:BF
            X509v3 Authority Key Identifier:
                keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e7:7d:31:ae:8a:04:ea:6d:e5:36:b3:f0:83:54:31:99:e1:
         22:f4:81:a3:f5:f7:b7:32:80:3b:12:47:16:ba:63:aa:92:da:
         85:f1:76:e9:0d:98:ed:1c:b4:5a:d8:32:20:5d:91:1a:dd:f1:
         bd:48:fd:28:8f:8c:2b:45:2d:2c:94:7c:8f:2f:1b:ef:64:35:
         c3:1f:39:55:8f:9a:7f:14:49:88:cc:13:d5:90:a9:8f:e3:78:
         f7:cf:f3:a4:07:34:ec:25:54:7a:77:ba:ab:a9:2a:b1:9a:0e:
         d6:a8:69:db:ba:c5:15:1d:5a:e3:71:7c:da:b5:d4:02:80:44:
         25:7b:95:ff:85:fc:42:7c:f0:94:15:c6:2c:11:50:5f:18:3d:
         68:75:dd:5d:1b:d4:16:6c:04:6c:79:2f:3b:05:2f:d9:05:b4:
         2b:c9:7b:fc:48:19:49:ac:c9:1e:33:12:c6:78:d4:24:92:ac:
         af:a1:3d:31:e7:81:6f:6c:bb:d5:3d:cb:3b:c9:e0:6e:70:34:
         e6:04:53:b7:73:be:d6:d2:5c:66:97:78:5a:fe:8f:47:60:f2:
         8a:49:b5:99:d1:69:02:7f:e5:ad:4b:54:bf:7f:33:d1:6e:e3:
         7f:3e:3e:c1:f0:b7:90:2c:ae:62:14:93:bb:63:90:83:87:ed:
         0f:1b:a7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:35 2026 by rpki-client