Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
File:                     tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft (raw, json)
Hash identifier:          x+U/lSayNrWoIQKOvfKJJOcFAxeh9c0AMmEcO4DRwLA=
Subject key identifier:   01:19:CF:10:AE:C3:32:D6:6E:4F:89:35:2F:A2:95:41:98:2F:D5:28
Authority key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
Certificate issuer:       /CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Certificate serial:       019F96C9D227ADD4EE25C781AE3ECE227F5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
Manifest number:          1572
Signing time:             Sat 25 Jul 2026 01:00:36 +0000
Manifest this update:     Sat 25 Jul 2026 01:00:36 +0000
Manifest next update:     Sun 26 Jul 2026 01:00:36 +0000
Files and hashes:         1: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl (hash: gbwAUc90xOKFkiqbieZ+t5fmFcqvVaga59Qjz3jw/TQ=)
                          2: xqMEiaPGgAlIQo3TzS_5VB2M2OQ.roa (hash: Y2eUYtTDjf9bWENJZhOD8HXOBzywjtXZMecCETD0P0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:c9:d2:27:ad:d4:ee:25:c7:81:ae:3e:ce:22:7f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
        Validity
            Not Before: Jul 25 01:00:36 2026 GMT
            Not After : Jul 26 01:00:36 2026 GMT
        Subject: CN=0119cf10aec332d66e4f89352fa29541982fd528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:a4:ce:f9:be:29:28:83:8c:81:b4:37:aa:
                    6f:1e:a9:dd:fe:0f:b9:4c:dc:58:33:17:4a:9c:f4:
                    6d:19:69:31:44:6c:f9:a8:e1:dc:d6:fe:bd:5f:ed:
                    78:3b:f9:26:7d:ca:bb:91:40:55:24:00:a8:84:dc:
                    1f:ce:5c:dc:34:3b:bd:fa:b6:4f:0b:e1:05:fa:e1:
                    61:a5:a6:5c:2f:ed:a7:30:88:be:98:a1:ca:90:dc:
                    b1:f7:51:8f:0e:45:f5:a4:28:cb:b8:8d:f7:e9:46:
                    5a:8d:5d:61:b5:27:fc:ab:8a:21:08:2f:37:08:4d:
                    64:eb:d4:0f:e5:cd:b4:ff:d2:5c:b1:69:cd:23:75:
                    40:4b:ba:89:f7:48:56:54:7e:fc:2d:09:91:37:4a:
                    b1:15:71:e4:21:76:01:f1:0d:bf:b3:04:38:5a:20:
                    7f:c8:ce:3f:0a:1a:30:9b:a7:67:b6:96:8b:74:fa:
                    30:f3:31:6c:12:bb:ba:75:85:51:04:b4:32:14:66:
                    e3:93:49:25:8a:f6:cb:22:f4:aa:28:94:3a:89:19:
                    17:de:e4:f7:99:30:f3:47:e7:c8:9d:69:aa:e5:92:
                    1e:30:12:a9:11:9f:5f:8c:c6:c3:53:8c:74:6d:f2:
                    ed:0c:db:53:b9:a7:d5:ca:7a:ce:9f:fe:95:6e:d2:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:19:CF:10:AE:C3:32:D6:6E:4F:89:35:2F:A2:95:41:98:2F:D5:28
            X509v3 Authority Key Identifier:
                keyid:B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:92:54:21:1e:38:b9:38:eb:70:d3:ac:52:2a:52:e9:7c:5f:
         48:42:05:6a:fd:cc:18:59:24:d2:ef:15:1e:a2:12:63:05:a0:
         98:8a:9c:40:cc:0b:ed:03:6d:e7:a3:40:89:5c:b5:f9:74:a8:
         b5:bf:13:2d:63:81:8f:f2:db:9c:17:60:e9:cb:e2:e7:4a:62:
         76:38:ea:a0:8b:59:4d:7a:df:e4:ad:7d:0d:c3:05:e2:e5:ed:
         de:0a:88:69:50:15:fe:f9:f9:61:2a:e4:61:40:8f:c2:07:27:
         e0:9f:14:2f:07:d6:a2:3f:bc:d3:b9:d7:5a:19:7d:14:27:eb:
         a3:f7:e3:89:49:d6:b9:7a:d0:f3:33:b4:94:43:7e:d5:6b:7d:
         71:50:c3:13:34:dd:0d:08:8d:72:c8:65:73:ea:da:de:f3:1f:
         0d:7c:d5:40:4a:95:ea:2b:80:b8:81:80:58:88:5c:d6:7f:14:
         3f:c2:62:f1:92:42:d1:ae:96:98:f2:dc:9b:c1:ab:4a:91:7b:
         cb:b1:2d:f0:90:7b:dc:4f:c4:b0:d5:cf:2a:99:3f:ff:78:ba:
         ca:75:c4:bf:0f:0f:f5:a2:b5:85:8a:08:92:27:02:05:53:56:
         f4:a8:f8:85:4b:3d:3d:81:bb:29:51:75:e2:72:fc:e9:bb:42:
         38:e7:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:58:21 2026 by rpki-client