Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File:                     v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier:          Hsxwyi/W6cQvgnt2Mo3ZBoLN3XhW701jjfiQ9AkRot8=
Subject key identifier:   08:7E:CC:35:5C:64:EE:7B:02:D0:80:70:1F:DC:45:A3:38:C6:B2:B8
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer:       /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial:       019F9549C33ECDA45EEFCCB600ED48199A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number:          0A61
Signing time:             Fri 24 Jul 2026 18:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:06 +0000
Files and hashes:         1: bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa (hash: Y3ICHbrh8hnLCQzZOKLQPyzkmRXdU5pC06Mn07MxiU0=)
                          2: lfMrkwLp7hAwWVEeABAkFyae20g.roa (hash: /+dZbciWTAdNljkvx7xP06l/dJfOWpz054ogX8e4mqs=)
                          3: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: df9IAe7y2qXFwiVG57ZQP+2Dj6JkTmWvMLfLsy3o7C8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:c3:3e:cd:a4:5e:ef:cc:b6:00:ed:48:19:9a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
        Validity
            Not Before: Jul 24 18:01:06 2026 GMT
            Not After : Jul 25 18:01:06 2026 GMT
        Subject: CN=087ecc355c64ee7b02d080701fdc45a338c6b2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:e6:8e:0e:eb:62:6f:e0:1b:a4:28:85:f3:
                    bf:3c:76:e9:f3:2b:09:81:95:d1:1c:7a:ec:bb:41:
                    cb:b8:1a:a0:9e:4d:23:a3:44:f1:e5:fd:8a:57:71:
                    ee:da:ef:ff:37:c3:a0:b7:1b:0a:63:8e:14:a4:be:
                    ab:9d:37:a7:e9:4c:26:bc:11:ea:bc:98:36:1c:ae:
                    c4:0d:03:cf:cf:28:96:ef:e0:dc:60:79:1c:34:c6:
                    07:dd:cc:8e:24:e3:cf:41:ff:10:b1:80:40:9e:4a:
                    00:90:c6:ad:b7:30:ec:68:d0:69:ce:5d:8b:d9:25:
                    30:d9:76:b3:2b:80:b5:f7:51:e7:b5:89:df:d2:0f:
                    32:b3:5d:b0:57:e3:0e:29:12:cf:81:b9:f2:05:d2:
                    b0:03:d3:70:ba:c8:24:81:3d:94:d9:16:04:d5:3a:
                    c2:38:e4:57:99:e3:92:e1:03:b9:93:a4:b2:07:ca:
                    f3:b5:c7:68:c7:c0:bd:b8:79:49:51:ad:c4:86:2f:
                    3f:90:4b:ac:4f:eb:e4:dd:f2:19:04:cf:a7:2f:2d:
                    cd:95:dc:7b:0c:70:2c:71:40:0f:61:86:73:31:97:
                    87:0a:0c:b2:a5:3c:b2:f7:2b:9b:f2:60:ce:01:a2:
                    a0:59:17:5c:66:61:86:a1:ff:8d:b5:2f:1e:b1:dd:
                    d0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7E:CC:35:5C:64:EE:7B:02:D0:80:70:1F:DC:45:A3:38:C6:B2:B8
            X509v3 Authority Key Identifier:
                keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:22:cd:ee:50:fa:41:0c:d2:63:72:ca:ce:e6:d6:dd:d9:47:
         24:cf:af:aa:b3:9b:28:c3:57:cc:28:e8:6f:4e:37:b9:38:72:
         0f:80:5b:f7:25:3b:22:f6:10:f8:df:d5:2b:f9:fc:b4:c5:dd:
         ad:2c:3c:16:26:89:9e:39:ca:82:84:03:1c:88:f2:b3:e9:0a:
         25:24:63:4a:97:28:97:e6:6e:87:8e:33:fb:41:98:93:1b:3b:
         30:fc:0c:bc:9e:53:71:93:f3:6b:77:6b:71:0d:37:17:00:e3:
         c5:4c:4d:07:23:16:5e:ed:b6:18:4b:05:f4:d9:48:58:3f:b1:
         f4:8f:b9:00:5c:60:4b:92:16:03:5b:32:1c:a8:e0:5d:96:71:
         42:46:96:ab:20:3d:51:0d:ab:94:b4:59:7a:73:ee:2b:0a:3b:
         bf:1b:10:d1:83:90:88:14:29:c1:34:a1:1d:34:c8:0d:7d:4d:
         17:44:9f:cf:d7:8f:50:9b:26:7a:22:c0:64:6e:57:3f:72:b5:
         c6:15:53:8e:8d:7d:33:65:c3:06:15:4e:80:0d:33:54:9f:6d:
         6d:a9:aa:15:e6:3e:db:b2:50:e6:70:55:8c:dd:5c:3f:8e:95:
         cf:55:98:f0:0d:fd:db:2e:b7:da:d5:ca:fd:12:c4:9c:18:20:
         e2:44:a4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:23 2026 by rpki-client