Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File:                     rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier:          mIbU2Cig9LIbLaTjiyXmKKa8PNHkWKndH2XKwgoHbNU=
Subject key identifier:   26:D4:7D:EE:2A:18:80:04:B1:13:DC:43:E5:56:22:CE:22:50:58:5E
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer:       /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial:       019F93FF6949BA83482F4FF928E108FB1D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number:          16DF
Signing time:             Fri 24 Jul 2026 12:00:17 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:17 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:17 +0000
Files and hashes:         1: CnBLfp0K-MwzN1OvimzKQhhQRz8.roa (hash: etl29j67/XA8KfqoSc4LuDr3rcwYsJQPUU+kY7GMI8s=)
                          2: Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa (hash: LdwPVlJ5KEW/4BpxrtP9UJQIli3Ut19hqpjKvaQuhlI=)
                          3: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: WuUEMGrdKtbX0DfUdhoHokg3fFWBAz5AjDSwG3pTIPM=)
                          4: zf2OWk_RcBoM6jajwmrPp0mhHEM.roa (hash: 7qEv+OmptmvjMEg/3MLv8VXpUtOOdS45r94EszitJCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:69:49:ba:83:48:2f:4f:f9:28:e1:08:fb:1d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
        Validity
            Not Before: Jul 24 12:00:17 2026 GMT
            Not After : Jul 25 12:00:17 2026 GMT
        Subject: CN=26d47dee2a188004b113dc43e55622ce2250585e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e3:7f:1b:08:78:ba:26:51:f3:12:f3:0e:c7:
                    b0:3f:74:22:72:2c:c0:53:9d:0a:15:ae:c4:ec:2a:
                    91:e9:9d:e8:fe:56:71:70:8b:e8:d9:09:fe:d3:40:
                    6a:21:a0:3a:bd:11:da:c7:e5:a2:d2:48:5b:76:a9:
                    3f:25:71:82:43:70:69:59:0e:5c:fb:34:11:42:89:
                    18:83:00:a2:70:82:2e:8b:96:d8:0b:79:72:85:d9:
                    a0:c9:e9:5c:43:d2:fc:67:93:13:67:68:bf:ab:09:
                    8a:cd:44:39:60:9f:60:e1:c2:05:7c:cd:f8:4f:8b:
                    65:33:3c:39:fa:fa:f6:d9:76:43:1b:a8:ee:d3:fa:
                    9f:a3:0c:de:67:62:3e:0e:a8:a1:43:9a:9b:8a:87:
                    29:a9:39:09:b6:e5:6b:28:1f:a5:1f:17:88:f0:e4:
                    d0:1c:73:e1:d2:21:9a:76:f0:e9:d6:e1:71:63:44:
                    1e:f9:87:bc:b8:12:5e:e3:5a:dd:bf:e0:1e:ca:8b:
                    c4:69:62:1a:ca:23:39:cd:c7:41:e1:69:1a:c6:1a:
                    f1:72:28:e8:0f:0e:e9:e5:a3:41:35:94:90:97:09:
                    b7:37:9d:ee:92:e1:a1:87:f3:fe:79:95:10:f6:6b:
                    13:16:e5:7f:7d:58:b8:95:6d:f4:13:5a:d5:70:40:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D4:7D:EE:2A:18:80:04:B1:13:DC:43:E5:56:22:CE:22:50:58:5E
            X509v3 Authority Key Identifier:
                keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:3b:e4:71:05:f6:35:e2:1d:27:07:00:bd:87:98:2b:4d:
         5c:c1:d0:a6:41:50:3c:62:ba:56:84:6b:4f:52:01:54:4c:1b:
         b3:6b:fa:93:96:4a:5c:ec:3f:cf:75:75:02:5e:85:be:aa:16:
         75:ab:4f:54:08:16:90:47:c0:0c:0b:45:13:4d:d1:3d:e2:51:
         d8:51:42:00:3f:29:b7:ce:46:63:e3:b1:bb:80:95:2a:c4:14:
         0d:c2:b4:83:32:89:57:ef:17:2b:82:b7:e4:4f:6b:c0:71:70:
         44:9f:e0:9d:c3:23:a7:df:a0:67:b5:46:47:14:8a:52:2f:56:
         2c:cd:2a:86:f9:f2:c9:5e:9a:6d:e2:58:d8:f8:0c:22:32:3a:
         ce:e9:6a:55:f1:a3:a5:6e:9f:da:20:61:68:ee:2a:3e:49:6f:
         18:21:33:9c:dc:ec:40:85:3e:ae:d0:c3:2c:66:ad:20:e5:c3:
         8b:e6:48:d2:0b:a4:69:91:e1:af:a5:6a:69:43:5b:31:23:5f:
         9e:df:e5:05:b1:58:c1:a0:d3:1a:f1:aa:fe:cb:38:f5:72:3b:
         7d:96:73:d7:41:67:30:13:53:b7:33:2f:e1:5c:4f:dc:67:a5:
         a7:fa:e3:3c:71:71:83:1c:5f:df:cc:60:85:ff:72:46:e9:01:
         a0:19:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:54:53 2026 by rpki-client