Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
File:                     SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json)
Hash identifier:          ro/JPzOB9Oj9lENE8wke/D6nARNsLBeONRJuW0dw20Y=
Subject key identifier:   A9:CE:F9:2C:AF:BF:ED:51:1A:95:14:3E:29:DF:00:71:BC:B6:8C:CA
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Certificate issuer:       /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial:       019F91DA8FF642ECA71DFEE78365759A8E4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
Manifest number:          171D
Signing time:             Fri 24 Jul 2026 02:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:47 +0000
Files and hashes:         1: 1y38PR10Vv3q34i9joY2RmqK9ws.roa (hash: WeX7D0CbRCituwqc2ZHAm4HR95Ee3JW1/xIonHquU3w=)
                          2: Py-y3i4hM_niS2FAlbK-g-CG53U.roa (hash: XmwAKXCN1UVsid2Ow64xLKVGJOuuu5RfqZ+9WMGZctw=)
                          3: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: DzuHmmZEslDVeKK38+jUvAB4KE+nVCmCc2phZESZLis=)
                          4: yXa8XbTaH683GFEjkOW8VCRIjpE.roa (hash: l5nJIcq0a2VDJfhrhqSb9wFUsKAsvOaRuHeId15ZhA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:8f:f6:42:ec:a7:1d:fe:e7:83:65:75:9a:8e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
        Validity
            Not Before: Jul 24 02:00:47 2026 GMT
            Not After : Jul 25 02:00:47 2026 GMT
        Subject: CN=a9cef92cafbfed511a95143e29df0071bcb68cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:39:51:53:7f:87:fa:67:f9:76:b5:58:04:
                    8c:84:e8:da:05:74:cc:b0:23:b9:c3:e8:0e:fd:e0:
                    9b:40:5c:f5:78:dc:7e:68:f8:63:96:f7:8d:cf:e4:
                    ac:64:71:d7:30:e4:6b:0a:48:7f:65:96:05:c2:31:
                    7c:78:3d:ec:61:11:e1:38:02:57:21:6c:15:c0:21:
                    cb:a0:e4:5f:c6:7f:44:88:7a:8f:7d:b1:83:90:67:
                    ed:d4:ad:8c:50:60:e3:04:36:7f:bd:4e:e6:8d:57:
                    d0:78:50:48:f4:41:ce:77:19:b1:47:74:da:c6:c2:
                    42:b5:c1:b4:c2:55:c6:06:64:09:0e:92:5d:22:1e:
                    59:d1:a9:5b:61:c3:35:45:c9:c1:ca:c9:b1:2d:1f:
                    a1:42:53:17:ce:32:cb:cd:5c:27:24:c8:50:68:c6:
                    a3:8a:62:6e:26:c0:c8:33:c9:94:69:bd:3c:88:a5:
                    a5:2a:79:76:84:37:30:e2:bd:c8:ed:2a:b5:1a:34:
                    65:d3:a2:21:33:26:46:78:c9:4b:77:48:7e:27:cf:
                    1f:da:b0:52:4b:f8:eb:83:00:10:9c:4f:6b:97:78:
                    5a:71:f3:f3:14:da:48:44:90:a9:7d:f7:bb:c0:98:
                    bd:4f:bc:75:f0:40:5f:73:49:01:21:03:f4:ff:9c:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CE:F9:2C:AF:BF:ED:51:1A:95:14:3E:29:DF:00:71:BC:B6:8C:CA
            X509v3 Authority Key Identifier:
                keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:87:d6:de:f4:6e:aa:d4:47:07:58:c7:53:9a:95:41:d2:dc:
         a9:63:00:cd:1f:f0:0d:26:17:ce:28:32:70:59:07:0d:0a:4d:
         f5:46:6b:0d:36:ff:95:a9:a9:d8:c7:3d:20:de:ae:83:d4:b5:
         a2:eb:34:d4:4a:07:15:55:62:83:ab:88:b3:10:07:ef:5c:34:
         e9:6b:07:ee:19:27:26:89:06:21:e8:82:92:ad:ca:f8:bf:fe:
         3f:42:8e:68:9f:43:dd:b6:2f:03:68:75:67:49:67:4a:46:a4:
         9c:f0:80:94:4c:6c:be:a9:8e:4f:b8:88:2d:5b:bc:b7:a0:d5:
         27:9a:a3:d4:a2:2c:74:b9:22:6d:28:74:af:60:7b:a2:9b:ab:
         b3:75:64:14:3a:b6:7c:3e:3f:2c:f9:ab:1f:8c:51:f3:ee:15:
         ff:58:37:6e:e6:51:ee:7e:04:d7:de:f2:c8:34:9b:f0:b0:39:
         c7:be:1e:c4:95:d4:7e:b1:df:a2:3d:71:7a:53:45:8d:f2:d2:
         f9:15:4d:9e:cd:c7:11:77:c4:07:35:e8:1d:a4:b4:0e:e7:27:
         15:fa:3f:27:a5:54:62:54:02:f7:6b:0b:a6:1a:37:57:14:af:
         7f:64:c5:75:86:6d:3c:41:87:c7:e8:e6:3f:87:e4:8f:00:38:
         7a:d3:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:06 2026 by rpki-client