Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File:                     e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier:          ro9Y/23Q95QwtuAZIIurmlDwtkfkOedLXKE1a9Ojrj0=
Subject key identifier:   BF:3F:DF:4B:FC:4A:FB:A3:E0:DE:79:64:66:43:0C:2B:C9:7E:B2:C6
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer:       /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial:       019F91A3706C970DBC02E5958989A53D1DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number:          0D4A
Signing time:             Fri 24 Jul 2026 01:00:35 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:35 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:35 +0000
Files and hashes:         1: V9PWKj4xB85axZ-pPoY3y8jfmGI.roa (hash: IXWd/a+RKpFfjxBBgClFTno9TLNCTt1rJRxcU8qS3Bw=)
                          2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: VX/6KqpD81oqNIBQqe2yMtQaM3w0nYwTVm4pcf4tAoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:70:6c:97:0d:bc:02:e5:95:89:89:a5:3d:1d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
        Validity
            Not Before: Jul 24 01:00:35 2026 GMT
            Not After : Jul 25 01:00:35 2026 GMT
        Subject: CN=bf3fdf4bfc4afba3e0de796466430c2bc97eb2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:dc:14:47:37:89:f7:e5:11:b4:3d:c7:e7:
                    ab:b7:c9:39:e6:a0:4c:03:df:bd:9d:3e:0b:1e:2c:
                    a1:ce:1a:56:b8:2b:1c:ec:0c:0b:e3:e3:bb:aa:ca:
                    77:28:3a:5b:03:61:55:67:af:3d:04:c7:c2:e8:17:
                    e3:dc:49:0d:65:d8:35:f1:83:b1:0a:3d:91:94:d8:
                    92:c7:b3:67:0b:58:41:1a:32:bb:1c:e7:68:79:1d:
                    dd:c0:ee:24:43:e0:9b:2b:3f:40:9f:c8:f0:c2:c4:
                    4c:df:e0:a1:13:61:60:e7:b1:f4:02:1a:67:d6:89:
                    86:5c:e7:ee:b3:0d:e8:1f:cd:2d:d6:00:bb:86:65:
                    7e:da:6c:08:6e:35:25:8e:03:dd:d9:5d:f7:2e:e1:
                    d9:23:e8:83:0f:a1:87:39:bf:f6:5f:4e:b7:2b:69:
                    7e:db:bf:3d:ed:89:a7:3a:5c:0f:25:b0:9c:38:b5:
                    d5:62:4a:01:28:43:19:c8:21:67:49:af:23:a5:76:
                    1e:b8:d2:e9:22:17:00:c6:a6:3d:32:41:2e:3c:6d:
                    a6:74:21:0c:4e:32:34:32:fe:a7:be:97:0d:77:14:
                    e8:07:e2:77:a5:dc:3e:11:4b:61:6b:0b:7e:69:5c:
                    56:eb:f0:12:66:f2:ad:e7:aa:b0:bd:0c:3f:dd:6e:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3F:DF:4B:FC:4A:FB:A3:E0:DE:79:64:66:43:0C:2B:C9:7E:B2:C6
            X509v3 Authority Key Identifier:
                keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:70:00:76:49:88:45:ae:5e:79:77:e1:81:04:e7:df:1f:a9:
         15:0d:af:6a:78:48:02:66:12:60:51:da:d9:73:6f:30:c4:b0:
         70:08:cc:67:b4:68:84:43:d3:15:d9:99:ba:5c:7a:3a:cb:12:
         ac:3a:4b:90:48:85:7c:26:c8:0e:a2:42:de:a0:2c:2a:88:a7:
         82:53:36:e8:ca:b6:ce:c6:62:ba:37:a3:e0:fe:2e:2d:82:43:
         23:66:26:33:2d:4f:35:42:f1:d2:89:48:a3:f2:6a:2c:e5:b7:
         1c:07:14:28:da:d9:d5:9c:07:ed:70:ac:9c:d3:7b:ba:4f:27:
         14:41:9d:b8:51:3f:44:98:ac:3a:71:28:8c:5c:7a:e5:38:32:
         c7:99:8b:e3:73:6d:f2:9f:7f:52:8a:44:56:96:8a:02:92:0c:
         12:fa:00:0c:c2:e6:6c:1b:88:52:59:c5:e4:9f:81:30:a6:1c:
         c5:2d:6a:77:fd:29:05:e1:f5:26:37:64:a4:87:91:a7:5d:87:
         12:ed:6c:49:2b:09:f7:3b:7b:33:42:22:78:de:c5:46:b4:f1:
         b9:a9:e9:80:9d:44:9f:ef:5b:0d:90:f2:3c:50:c8:01:aa:6c:
         01:45:6f:78:9a:39:a0:bc:9d:36:8f:4c:97:68:e2:ad:85:cf:
         7f:a5:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:29 2026 by rpki-client