Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File:                     d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier:          bNM39hdwuwKjHHksAyvQf6T8evzosyTdx+yY39a9ixM=
Subject key identifier:   7A:ED:44:10:99:0A:A2:17:F0:A8:E3:AB:B1:5A:54:65:FA:57:EA:80
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer:       /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial:       019F927F200B6A64FE19DB74354C84A0250F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number:          1287
Signing time:             Fri 24 Jul 2026 05:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:32 +0000
Files and hashes:         1: VxfD5b_ylAB_MTnBIwWLQed3wsQ.roa (hash: dPV7nvv66J/N7qMIMaqxbPZi7u5SK+lm/oBP/6Z99x8=)
                          2: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: WlAnLM25//MeWUAqHhqPiLs5tdgCRFJME44v5L4NF4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:20:0b:6a:64:fe:19:db:74:35:4c:84:a0:25:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
        Validity
            Not Before: Jul 24 05:00:32 2026 GMT
            Not After : Jul 25 05:00:32 2026 GMT
        Subject: CN=7aed4410990aa217f0a8e3abb15a5465fa57ea80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:4a:35:2a:86:0b:d8:4e:db:21:20:26:69:
                    35:ad:e4:89:5f:6c:b2:46:2b:27:ee:47:ed:ea:4a:
                    25:f1:80:ce:78:44:37:fa:a9:b4:f5:9a:bc:5f:a9:
                    3e:99:9b:dc:74:4a:80:7c:08:30:65:b9:48:b9:b3:
                    be:13:a2:4d:d7:88:c6:df:66:40:e5:7b:c6:b3:eb:
                    ea:0d:d2:e2:26:8d:24:6c:a5:f9:35:a8:d9:f0:ba:
                    26:a2:5d:33:24:40:ce:00:55:6e:c6:1f:80:35:db:
                    82:34:ad:78:f4:5f:da:a0:01:c4:08:8d:13:0e:0c:
                    ba:2e:9b:08:ed:fd:13:07:06:17:f8:67:aa:27:94:
                    e3:5b:05:03:7c:25:be:62:c4:da:a0:59:e6:93:2b:
                    5b:03:69:0f:a8:55:8b:c9:0d:05:56:6a:85:cd:c1:
                    dd:2f:e0:6e:db:7d:e0:a3:5f:dd:96:3e:98:dc:87:
                    58:f9:5a:d1:ec:63:45:b7:20:f3:87:ce:40:17:c5:
                    15:44:e0:ac:04:56:a4:a8:1e:6c:75:b9:a6:f7:db:
                    4c:ca:74:46:34:28:fb:0e:b5:22:e8:a2:3b:82:a1:
                    7a:67:60:d8:66:1a:ad:81:cc:de:42:fb:60:39:ce:
                    02:5c:43:1f:88:7b:89:7b:f5:fd:aa:b1:59:67:3d:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:ED:44:10:99:0A:A2:17:F0:A8:E3:AB:B1:5A:54:65:FA:57:EA:80
            X509v3 Authority Key Identifier:
                keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4d:84:24:76:7f:4d:83:b5:30:a8:4e:09:f8:88:63:a6:18:
         ca:72:55:07:b0:eb:3d:4f:7e:29:80:0b:3c:f0:ed:8d:44:04:
         38:db:3e:31:cb:c0:33:25:0f:20:fe:be:22:3b:f1:a6:bf:5b:
         48:59:db:86:66:ff:3f:a0:bb:40:af:1c:09:1b:a2:32:61:a4:
         d4:8b:5f:9e:af:7e:a1:02:e4:6d:9a:23:04:7f:be:54:77:81:
         19:c2:24:6f:6e:f4:98:d6:d1:08:30:4f:9e:ed:4d:71:37:d9:
         d1:21:0e:e9:f8:b3:d9:26:59:06:3e:f4:77:3e:66:83:8c:d3:
         80:bb:0b:82:80:cb:6d:82:24:45:31:1f:96:60:6d:e6:51:bf:
         7e:fb:b0:c3:a1:39:b9:cf:12:50:82:2d:39:e1:72:60:a9:22:
         b8:7f:54:ae:98:ec:04:75:5a:f3:1a:ba:9b:a3:ff:d3:44:1a:
         7d:96:ba:43:3b:b6:e3:ce:4e:d6:0f:32:c6:a4:15:32:eb:5c:
         86:39:52:fc:e2:4c:d9:89:57:63:5c:8a:fc:ae:3b:e6:13:da:
         cd:54:50:0b:da:3d:78:a6:e5:a1:4b:06:46:37:7f:68:68:6e:
         ca:91:9e:b1:cf:bf:42:c4:77:9b:cc:02:11:49:1f:07:f0:af:
         3b:0f:21:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:05 2026 by rpki-client