Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File:                     9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier:          ef5SP6vSZsNtyhphELNWRGd32J80dvLrnUMrAfZ/SLo=
Subject key identifier:   D6:0B:9A:29:DE:59:E5:A1:30:43:62:F5:8D:38:17:D9:CA:07:B8:D7
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer:       /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial:       019F8FB4BD31DC866C7210E8AF504A04084D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number:          0620
Signing time:             Thu 23 Jul 2026 16:00:14 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:14 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:14 +0000
Files and hashes:         1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: PznyBmw89yILrjkBb+6Uw2MfebV6dRUJrzZQEI/X4rY=)
                          2: X6eUtYG6Iu_KBouxuW8oA117wgI.roa (hash: PKWNZ6kf/JMcC2o+SX3jrDdlq7cx8CizTYBt74X74JE=)
                          3: YOoAFvb-hpFF9iLyWp19Bt8q4hI.asa (hash: UisOBblx7P2PqVDUk/EETXB1Szxocz0uaBU0SXtiiuA=)
                          4: Zi-ZCMc7U8Y-da92tU5kvn9Xd-8.asa (hash: nXYqjC+Hi2nKeloly1ptUDmdW625318NTGYnF0/9v94=)
                          5: eN33JrW4uE9WYv1qiKiEHTbpfbQ.roa (hash: jV/nUDEGGfrnT9JmJTuWFyFTtbm4P5emFu/rnjcrOOg=)
                          6: xJZbzQfr9Oxhm2_FMaPpOD_JF6o.roa (hash: ipqQ2yYK11hQH4GRmmAyAseGYznlNeYFRLVlXv3h3aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:bd:31:dc:86:6c:72:10:e8:af:50:4a:04:08:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
        Validity
            Not Before: Jul 23 16:00:14 2026 GMT
            Not After : Jul 24 16:00:14 2026 GMT
        Subject: CN=d60b9a29de59e5a1304362f58d3817d9ca07b8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:25:7f:bf:09:2c:24:b2:fe:fa:4b:8c:7b:
                    3a:f6:e9:ea:de:ec:4f:56:9f:a0:76:cc:9f:d6:12:
                    7f:97:d5:46:f2:d6:54:b6:d9:66:84:c8:4f:42:9a:
                    b6:e9:84:03:0f:47:45:35:c2:09:ed:60:ef:a0:36:
                    da:5e:86:a7:11:dd:e7:f3:32:42:1a:8f:15:b5:dc:
                    2d:8f:01:46:32:74:65:73:7b:87:f7:ea:59:c7:ef:
                    4a:7c:98:a8:ac:dd:e5:9d:40:10:a2:2e:6a:14:d3:
                    da:2c:fe:c2:84:ac:1d:9c:ea:87:e1:61:3e:b8:d2:
                    d0:0c:bd:36:c3:cd:2d:88:05:4e:55:cc:27:fe:1e:
                    ac:6e:c5:e1:bc:f8:bd:44:11:a8:f6:82:af:4d:fa:
                    e3:7f:d4:91:e4:8d:29:b5:a6:35:3c:e1:35:25:de:
                    a2:4e:03:28:7a:c5:8c:b6:2d:d3:b9:44:9d:06:4a:
                    77:01:74:e8:f5:94:56:16:4f:8d:19:18:74:a9:c4:
                    b1:e9:88:e4:74:ed:6a:27:a2:0b:28:b1:2d:7f:eb:
                    e6:10:bf:a7:f0:09:91:42:79:e4:0a:dc:60:4a:bb:
                    49:f5:e6:90:c4:01:80:21:e9:4a:9e:c4:5f:3b:1c:
                    2b:2b:24:4d:b6:5e:09:5c:d8:18:34:d4:2d:d7:9a:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0B:9A:29:DE:59:E5:A1:30:43:62:F5:8D:38:17:D9:CA:07:B8:D7
            X509v3 Authority Key Identifier:
                keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c1:ec:2a:e1:42:f3:c3:04:d7:4d:02:84:3a:b6:83:d5:d2:
         bd:d4:45:d1:48:4f:a6:50:c5:ad:b6:c4:08:ec:0a:83:45:1e:
         3d:fd:8e:35:71:1a:53:34:61:0b:89:07:5e:9a:97:e8:d7:d3:
         7a:47:41:64:5c:6c:7f:82:c3:08:bf:00:aa:ca:60:b3:73:b6:
         3f:64:b5:41:95:cf:a1:76:e9:10:f7:78:b6:a8:05:e2:b3:5f:
         5a:49:ad:e2:97:bc:20:f6:87:f0:3e:62:d2:44:ee:81:ae:e2:
         e9:d5:8f:aa:aa:c0:11:ef:05:2f:b8:7d:31:d0:28:1b:2f:9a:
         6c:28:ec:5a:d0:ab:e2:61:f3:b9:ab:72:51:c3:a0:a9:e3:37:
         a5:15:93:71:66:e8:69:6e:70:98:c6:2d:b4:ff:44:a7:63:ff:
         df:b0:e1:fc:17:79:3a:e8:40:a2:73:b7:87:01:74:61:56:29:
         eb:9d:06:a2:2a:20:52:66:69:79:12:7c:a9:54:28:4c:8f:c8:
         e4:ca:60:46:9e:43:4d:ea:b3:be:8c:1d:29:65:84:ee:e9:00:
         a1:f9:22:85:df:91:83:ac:45:93:ef:ac:a6:00:ad:fb:f3:63:
         a2:e5:83:d5:1f:e5:85:8d:24:53:f1:63:94:0c:ca:63:a1:cb:
         6f:78:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:20 2026 by rpki-client