Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
File:                     g76BmaF8rKps1S15QSNtpuVuG-o.mft (raw, json)
Hash identifier:          TIAnP74cM7HRdZSQym/mgVN41RXoiUvqV1Ygd1FfbYk=
Subject key identifier:   55:08:9E:E6:04:30:C5:A1:0D:73:40:35:BB:65:3F:2B:FA:EA:21:83
Authority key identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
Certificate issuer:       /CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Certificate serial:       019F8F7F271425D51DCD44205855EFB56DB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
Manifest number:          0D4A
Signing time:             Thu 23 Jul 2026 15:01:42 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:42 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:42 +0000
Files and hashes:         1: 6Wov37AwFcepue1WbA70fxV-s8I.asa (hash: kdFzn0uMLw4OiGMPXx8ZYbjqBGAjU05EQ4I1clqD91o=)
                          2: g76BmaF8rKps1S15QSNtpuVuG-o.crl (hash: s63XGoBfwZG/TEGP12Bz74Cw1daBC/+hbVB6FZZgSbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:27:14:25:d5:1d:cd:44:20:58:55:ef:b5:6d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
        Validity
            Not Before: Jul 23 15:01:42 2026 GMT
            Not After : Jul 24 15:01:42 2026 GMT
        Subject: CN=55089ee60430c5a10d734035bb653f2bfaea2183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:b3:d1:69:58:1a:1f:20:f3:5f:9f:af:4f:
                    3c:a6:b1:02:a8:23:0e:6d:47:eb:46:75:78:70:47:
                    79:d5:87:84:bc:5c:e1:d4:3f:4e:2d:87:a1:2c:42:
                    fa:d5:49:2c:59:4e:71:cc:8c:cb:73:50:ca:88:a2:
                    b7:9b:4b:e8:45:80:58:0f:62:17:66:3f:b8:c1:ce:
                    c1:e5:70:15:0f:15:5a:15:eb:03:68:82:86:94:38:
                    1d:66:e5:e4:c3:82:1d:b7:c7:d9:89:02:5c:96:58:
                    8e:a3:47:34:93:c2:41:00:70:b9:17:a1:7f:58:4a:
                    d3:53:96:93:be:96:f5:23:8a:0b:71:87:2a:e5:25:
                    47:bd:c0:9a:ca:8e:31:68:33:30:69:74:65:b9:f7:
                    b4:e6:42:80:ed:58:6b:54:15:91:b2:73:ad:c2:be:
                    40:94:fc:9e:13:a8:91:ca:08:21:28:9f:56:88:46:
                    c3:f2:fd:5b:72:9b:86:0e:83:71:e5:2b:84:b2:cb:
                    2a:7c:47:7b:31:91:fe:cf:5e:e1:b5:51:d7:1d:f6:
                    44:15:47:6c:0f:7d:96:1b:6a:50:fc:9a:48:82:ac:
                    57:b0:a8:c5:ac:20:1c:be:c2:a9:e9:c0:34:4f:b6:
                    66:5f:42:5a:40:f2:22:11:e3:05:00:0a:00:70:70:
                    08:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:08:9E:E6:04:30:C5:A1:0D:73:40:35:BB:65:3F:2B:FA:EA:21:83
            X509v3 Authority Key Identifier:
                keyid:83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c5:18:28:f7:1c:8c:d2:a0:ba:7a:e3:1f:f4:7b:d7:80:ae:
         64:dd:04:88:17:7a:7d:6c:f5:bf:7c:4e:43:4c:7a:77:09:62:
         05:df:e4:c1:46:b8:e7:69:59:9b:9a:93:3f:de:f8:6a:3d:9e:
         2c:85:1e:34:1a:72:8d:3f:c1:1d:a0:aa:a7:48:fb:c9:e3:74:
         14:c6:51:10:25:03:cb:54:02:65:7d:53:a6:e8:ed:18:ee:4f:
         4b:d6:8d:69:2c:98:f7:c5:68:cf:76:36:4e:d0:b7:73:05:18:
         cb:51:c3:12:83:f2:e8:24:29:b9:1d:25:b9:c7:2c:80:4f:91:
         28:7d:3b:df:e9:79:5b:bb:32:41:ab:6b:d5:32:a3:00:cc:7a:
         0e:00:a2:9d:ac:03:79:16:25:72:5b:dd:ae:da:f2:b4:0b:5b:
         13:9c:76:b2:84:ee:55:d0:b4:d0:52:32:8c:68:34:1c:e4:77:
         bf:25:b2:0c:f7:84:d1:70:39:06:4f:f9:0c:5b:b6:c8:cd:07:
         d7:09:94:f0:2d:2b:05:2b:f3:b5:76:30:e3:1d:16:c7:75:3e:
         7d:d5:d7:96:2e:18:cb:5d:55:b2:a1:b1:99:f2:99:34:61:ce:
         2c:d5:92:24:e2:57:24:68:95:53:b0:76:44:c7:30:8a:55:9b:
         10:cf:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:11 2026 by rpki-client