Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File:                     9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier:          T/76pLisBwCMnHAU9rK9Q2gpNvEbf4WGaJUEzAhdJbs=
Subject key identifier:   82:2A:81:47:3A:49:1C:E2:4C:44:0A:AC:32:51:CE:C3:CA:12:D1:26
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer:       /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial:       019F8F7E1733D5F5C66A42A4C2B3BBFD285A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number:          0BB5
Signing time:             Thu 23 Jul 2026 15:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:33 +0000
Files and hashes:         1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: /JvhXD0x06mWAcYpoBjEP2BK5J7zIa8dHGZ6KugPx7k=)
                          2: DASQ8NU1yHanG6tnp7TCLgdJSB8.roa (hash: W/n6G98Zq5gjZZSilKHseC4jqvetgfkl6TxxF14gb54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:17:33:d5:f5:c6:6a:42:a4:c2:b3:bb:fd:28:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
        Validity
            Not Before: Jul 23 15:00:33 2026 GMT
            Not After : Jul 24 15:00:33 2026 GMT
        Subject: CN=822a81473a491ce24c440aac3251cec3ca12d126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:24:1b:f7:39:9e:88:2f:4d:51:40:fa:98:d5:
                    93:e5:aa:96:62:f2:f3:bd:08:15:5f:a4:02:7e:98:
                    dd:e8:17:f3:a9:ec:f9:85:8d:44:99:d5:b8:0b:f9:
                    a4:68:fb:b0:8f:81:1b:db:b1:08:75:20:31:fc:5c:
                    1c:b8:0d:66:de:ae:58:91:bf:be:e3:2e:23:30:ea:
                    2c:1f:ba:15:8e:f1:59:e3:f4:29:19:61:d8:36:ab:
                    c3:93:5e:57:bc:87:ab:e3:1f:ce:fc:0d:1c:1d:0f:
                    5b:99:27:d1:42:79:75:22:dd:e3:58:e2:4d:09:54:
                    ab:79:62:7d:a5:0f:68:df:07:96:2f:7f:4e:aa:26:
                    85:a8:19:b8:dd:27:1d:5f:06:76:28:0d:0c:8a:29:
                    4a:50:b2:c9:85:c2:cb:ce:d6:ce:19:dc:89:82:e1:
                    66:98:84:b9:55:b2:f0:3a:d3:a3:fe:5d:a0:ba:5e:
                    a0:d1:22:d9:44:65:a8:dc:c2:36:67:d4:ae:db:eb:
                    e2:a7:e5:9b:b4:dd:d5:d3:73:ef:60:8b:a8:13:b0:
                    d3:cc:6c:03:4f:59:ae:f4:16:f4:74:f6:34:82:6c:
                    6a:76:1c:a5:52:54:5a:a4:e4:93:9b:d8:44:c1:7f:
                    99:e1:85:8c:8b:b0:48:55:bd:16:dd:a3:b1:22:ba:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2A:81:47:3A:49:1C:E2:4C:44:0A:AC:32:51:CE:C3:CA:12:D1:26
            X509v3 Authority Key Identifier:
                keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d0:1f:2a:fd:ba:0e:e2:39:6d:9b:4f:0b:e2:47:1f:6d:db:
         28:d4:d7:db:e8:3c:11:7b:30:f5:a6:0f:a2:7b:f6:17:99:de:
         7c:a3:2d:d8:43:37:bb:a7:58:b9:cc:a3:29:6e:69:7a:cd:03:
         29:47:23:70:ee:7c:b7:a2:ba:56:4e:38:89:8e:f3:06:5f:ee:
         05:a9:8c:34:11:87:13:b7:e5:75:9b:d1:d8:95:d7:d4:94:86:
         b2:dd:02:bd:c6:1c:d2:19:08:50:4e:40:ab:41:49:48:19:d8:
         74:89:51:a7:60:b1:20:a2:ad:37:e8:1f:b5:9d:8f:61:66:76:
         89:44:61:ea:f9:4e:a0:ce:c1:da:41:2a:49:d3:e2:54:3b:47:
         d7:4e:56:f1:c1:df:7e:15:98:53:ce:26:bd:4f:48:bb:28:74:
         f1:c4:fb:9d:dd:db:34:bf:9b:8a:38:fc:14:56:70:e5:eb:72:
         5d:1e:21:ec:c2:c4:35:e8:f2:e0:e3:a5:6c:26:34:53:24:ce:
         2a:cf:24:c8:d0:d9:da:98:42:f2:79:7c:4b:ee:77:ba:61:de:
         fc:af:c6:6e:cc:fb:1e:28:a0:d2:e2:1a:53:6c:f2:f9:d1:9e:
         30:0d:76:68:b4:7e:d4:d6:ab:19:25:ce:01:ea:b0:fa:fa:ba:
         ac:59:67:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:16 2026 by rpki-client