Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File:                     gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier:          t2K6/zDCCRXyb+p0w6bG0gTI8Z5MCGd8qwfQZEOBNFM=
Subject key identifier:   C1:2C:D7:2C:F8:42:40:94:A1:F8:67:5F:EE:C6:AC:2E:6D:94:D7:85
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer:       /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial:       019F927FA6146613BFD348144472891E1A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number:          1687
Signing time:             Fri 24 Jul 2026 05:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:06 +0000
Files and hashes:         1: CiIrcBM9yA3ZewdtgV4N1CH8GZY.roa (hash: /RFq6SqUsBxBmefl/oJJgPlTdelQAi+UQdtXbYFfKHs=)
                          2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: CL6EseuYhioKlrwW7IZggPcndQICtc4kxbjJoUvf3jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:a6:14:66:13:bf:d3:48:14:44:72:89:1e:1a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
        Validity
            Not Before: Jul 24 05:01:06 2026 GMT
            Not After : Jul 25 05:01:06 2026 GMT
        Subject: CN=c12cd72cf8424094a1f8675feec6ac2e6d94d785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:68:a7:eb:e6:05:4f:d6:5f:74:e7:fc:f6:
                    df:79:90:40:c6:1a:77:f5:3e:f5:be:b0:30:4c:89:
                    3a:9a:ed:df:37:f8:33:6b:b3:4c:90:3f:94:d3:05:
                    d1:58:1b:fd:3b:33:2a:be:80:e4:33:6e:d6:7e:d8:
                    f1:07:87:b7:1b:02:c6:02:84:60:5a:ac:1b:2e:7f:
                    e4:98:6b:72:91:47:fc:5e:64:74:a9:b4:46:5e:f0:
                    d5:b3:bd:49:99:58:ca:5b:ae:47:d7:39:93:df:c6:
                    a0:c9:d4:e5:2d:82:f9:fb:56:db:a1:38:4f:3d:42:
                    f4:52:8a:31:6e:6e:af:45:b0:57:a7:6a:01:82:4e:
                    13:a4:a6:a9:17:57:27:05:f9:32:a2:da:46:b6:37:
                    7f:55:67:ea:dc:1f:f3:36:1f:d8:2e:29:8a:84:52:
                    63:35:43:c1:f7:97:2a:76:01:c4:16:69:90:74:89:
                    d6:d7:11:b5:7b:7c:d6:89:bd:78:74:1a:be:d4:1e:
                    2b:37:92:00:5b:6e:9c:b1:0e:1b:b5:82:24:d9:a7:
                    ba:2a:64:d6:5a:3f:e1:fd:d4:0d:f0:5a:f6:74:9d:
                    3e:c5:f8:a1:82:02:f6:bd:d8:fb:5c:7c:47:ce:6f:
                    bb:7a:00:64:9c:d8:86:fb:f5:93:4b:3b:de:aa:5e:
                    9e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2C:D7:2C:F8:42:40:94:A1:F8:67:5F:EE:C6:AC:2E:6D:94:D7:85
            X509v3 Authority Key Identifier:
                keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3c:8d:6d:2a:99:40:a9:8d:8e:61:ac:62:f9:3d:be:9e:6f:
         d3:71:1a:2d:86:77:28:e9:ae:83:02:36:c9:ea:da:9d:a7:c3:
         e6:51:89:59:13:e5:0a:e9:cf:cc:15:5b:d6:6d:61:7e:91:0f:
         da:0d:ba:60:2c:b3:f8:b5:d9:0f:9f:28:4b:7c:96:f6:bd:11:
         5d:49:1c:62:6c:83:c8:b8:de:05:ef:aa:10:f9:ca:c7:34:f7:
         a3:77:fe:d6:88:54:2b:6d:c1:d2:f2:b2:a2:f5:33:de:f6:2f:
         06:9c:dd:43:3a:5a:a6:29:97:17:16:8f:9f:db:d1:e3:db:a3:
         8f:15:20:3d:40:61:4b:f4:74:20:68:91:a5:0c:c2:f6:77:b4:
         57:54:e7:37:80:30:c4:50:a1:22:9d:62:1c:d7:04:3c:0f:e0:
         81:c5:d4:33:4d:c5:01:74:f9:84:4f:b7:5b:4a:8f:b1:41:7f:
         75:7b:75:39:aa:15:a3:0a:23:12:8e:ed:60:cd:f4:25:d7:92:
         45:c0:46:83:99:d4:8d:fb:29:f2:87:cd:9f:d0:5a:2e:89:27:
         df:7d:c2:a0:e3:41:28:ce:2f:60:6f:05:cc:3f:b9:f0:91:ae:
         dc:73:c3:1c:b1:f4:5e:7e:5f:20:3c:e9:e0:08:32:ff:06:54:
         71:f3:12:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:51:52 2026 by rpki-client