Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
File:                     ahRjzDw0FHZhFRif2a-ORMXblBI.mft (raw, json)
Hash identifier:          Lp39g7ff+BRIKqW76xk0TP76mhm2alqhqL8KNYGh7nY=
Subject key identifier:   25:DB:42:AC:94:4A:3C:F6:CB:47:60:92:B7:BC:8D:A0:30:58:29:46
Authority key identifier: 6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12
Certificate issuer:       /CN=6a1463cc3c3414766115189fd9af8e44c5db9412
Certificate serial:       019F9059CD5C0F35B2D222385D1EE7CB7915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
Manifest number:          B3
Signing time:             Thu 23 Jul 2026 19:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:32 +0000
Files and hashes:         1: 7A5Mo_HCT5tIYge5BK9JUhMg5Hw.roa (hash: Ep+Z/ryezb/UZFnKTPmt1RNdUI3JuXr1O0msLtfQ0TA=)
                          2: ahRjzDw0FHZhFRif2a-ORMXblBI.crl (hash: K0hfmgh8CiCbyKVQWVSZFe1qwFRfWmKtI0DQvRoKoJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:cd:5c:0f:35:b2:d2:22:38:5d:1e:e7:cb:79:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a1463cc3c3414766115189fd9af8e44c5db9412
        Validity
            Not Before: Jul 23 19:00:32 2026 GMT
            Not After : Jul 24 19:00:32 2026 GMT
        Subject: CN=25db42ac944a3cf6cb476092b7bc8da030582946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:ea:85:24:0c:2a:d3:aa:da:43:19:99:27:
                    09:41:c8:be:35:98:c3:a6:f4:cf:fa:58:fa:5b:f0:
                    88:78:db:9e:f4:78:b6:41:8b:24:04:32:f4:80:96:
                    9a:e1:be:fb:ed:a2:09:30:d7:bd:67:0f:1b:a1:0a:
                    10:15:4f:fc:9a:96:f1:08:41:2e:5c:84:0e:2e:23:
                    8a:e7:53:ee:d9:e1:ef:24:2b:c6:f6:a9:a1:47:37:
                    cf:3a:4e:17:9d:e7:a8:e9:b6:28:78:5f:8a:d1:48:
                    a9:f7:c9:5e:ef:4e:0a:e5:ab:5a:0c:f4:fb:3d:c1:
                    43:8a:1d:20:fc:c6:68:40:bf:4b:7a:1c:ed:06:f1:
                    f4:8e:ae:7d:be:55:5a:23:98:17:e6:83:5a:39:73:
                    c7:20:9e:99:33:bb:5b:cb:42:97:5c:77:c4:6d:70:
                    09:5a:0e:03:fe:d7:a0:b7:70:0c:ba:d0:b8:44:be:
                    40:d4:c0:09:27:ed:8a:ef:47:5f:20:28:88:b8:6b:
                    8e:8b:1c:c5:93:1a:d6:ae:29:55:9b:dd:0c:64:8f:
                    8c:10:4e:89:99:1a:cd:ce:f3:c3:48:9e:eb:f4:73:
                    eb:6e:55:62:78:48:ee:6f:77:ad:5b:b1:e6:19:42:
                    44:5e:9c:c8:c8:2d:dc:b2:00:df:fc:65:f8:5e:7d:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DB:42:AC:94:4A:3C:F6:CB:47:60:92:B7:BC:8D:A0:30:58:29:46
            X509v3 Authority Key Identifier:
                keyid:6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:61:b7:33:d6:2a:ba:a8:4a:71:15:eb:db:5c:75:3d:ee:
         63:ab:76:88:20:7c:75:a1:83:d8:38:56:ec:9c:2c:f7:c7:29:
         82:b0:d2:cb:7c:6e:d9:3b:51:34:d3:0b:11:86:c9:22:45:1b:
         43:35:f9:7e:9a:52:38:d3:eb:0c:94:1e:e1:8c:57:51:1b:0c:
         ce:8b:f8:18:4b:f6:7c:29:63:08:c6:18:1c:59:32:82:0c:d8:
         39:b2:e8:41:bb:1d:fd:95:2d:26:d5:f4:3a:51:4e:73:91:17:
         92:d4:92:78:b3:05:5c:5b:d6:3b:48:62:b5:d2:45:07:b0:9c:
         8a:79:c0:6b:22:3d:cf:01:34:56:78:14:9c:74:96:59:1d:3c:
         f9:18:bd:01:15:c8:e3:06:22:28:57:42:7f:85:2f:b7:dc:bf:
         4c:0a:22:58:6c:ea:05:7e:7a:fb:10:62:31:0e:84:91:2e:ce:
         59:de:0c:96:d5:bb:1b:c8:84:80:ef:4e:0a:5d:64:00:ea:31:
         05:9a:3e:70:92:a8:4f:8f:d4:45:f4:67:21:12:50:3a:d1:25:
         4f:8c:1f:3c:7b:39:55:77:7e:43:5e:dc:11:da:07:cc:ff:dc:
         fd:42:80:24:ba:fb:7c:ce:70:96:99:7f:9d:22:c0:d6:26:7b:
         f1:06:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:34 2026 by rpki-client