Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File:                     ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier:          /Mzq/+EGxEJ2wbqcCwRqhU8dtwIJuE9H9iB+sVHXHWo=
Subject key identifier:   A0:6C:A7:F6:D0:9B:AA:4D:E5:64:FA:0D:E0:AC:06:74:43:B5:2C:3C
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       019FAC3ED0F7647CE76A2A27A42B18BD6600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number:          1344
Signing time:             Wed 29 Jul 2026 05:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:25 +0000
Files and hashes:         1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
                          2: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (hash: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=)
                          3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
                          4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: Ccmy5kewNCwDGA6mD9p9oI6FnV5K+szoBF1hGcCkeV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:d0:f7:64:7c:e7:6a:2a:27:a4:2b:18:bd:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Jul 29 05:00:25 2026 GMT
            Not After : Jul 30 05:00:25 2026 GMT
        Subject: CN=a06ca7f6d09baa4de564fa0de0ac067443b52c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:e9:12:79:5b:73:5b:34:ec:d0:3a:02:fb:
                    15:77:41:af:70:03:c5:69:f1:ff:0f:f2:da:c5:09:
                    2d:06:5d:35:60:a9:a3:71:08:19:6a:40:52:0a:1b:
                    75:b7:ed:e2:01:87:59:a1:69:a8:c5:33:75:4b:44:
                    ce:7c:7f:33:35:11:b1:89:e5:23:aa:42:3c:36:7d:
                    31:07:49:99:fa:c3:56:25:65:3d:ba:dd:b1:53:72:
                    a8:cd:9e:9a:a2:62:ee:f8:76:c6:b3:e9:e1:23:00:
                    f9:ee:6f:6d:8c:91:6f:f2:e2:ff:bc:88:07:27:62:
                    1b:fd:a5:bb:9b:18:7c:14:33:4f:60:dc:fa:c2:d2:
                    da:28:96:51:ae:e1:e2:e1:1e:0c:58:f7:07:30:0f:
                    53:41:78:40:24:99:28:0a:ec:13:67:0a:92:fd:99:
                    0b:79:a2:5e:c8:d5:60:7a:87:af:67:82:04:b1:99:
                    bc:89:eb:0e:7c:f4:62:7f:47:0a:c7:8e:c1:4a:a8:
                    49:11:13:22:05:4d:4c:78:6a:00:eb:c8:70:08:e3:
                    38:ed:bb:06:3c:99:77:55:49:80:dd:05:c1:2e:37:
                    dd:51:03:d8:8b:5c:8b:dc:6a:a3:a4:cd:c1:5d:75:
                    dc:ba:1d:13:78:d7:98:aa:32:7e:de:d1:76:6b:e3:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6C:A7:F6:D0:9B:AA:4D:E5:64:FA:0D:E0:AC:06:74:43:B5:2C:3C
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:cc:9b:3f:54:c5:19:dc:ab:4e:7a:e6:38:cf:0f:bb:0e:1f:
         dc:4f:ca:24:39:46:e7:39:73:ed:2f:d7:91:1b:cb:73:7c:9a:
         38:35:17:ec:62:75:d7:1c:84:fd:36:98:3d:e2:00:35:fb:5d:
         96:71:41:26:23:13:79:3b:a9:4f:73:14:b7:38:1b:96:38:42:
         5a:65:64:68:f3:04:31:84:b7:3a:5c:30:98:a7:59:a4:bb:95:
         0e:56:98:f6:4a:35:9f:d1:05:aa:f3:8d:d7:94:51:78:92:d5:
         e8:f9:be:86:24:57:61:43:7c:7b:ef:60:06:28:aa:c7:19:50:
         07:5e:69:fb:cc:ab:1a:86:7e:bc:10:83:d5:c4:aa:c8:aa:f5:
         93:9f:77:cf:00:d4:40:6b:65:62:03:e5:75:aa:d3:2d:8e:b5:
         c0:eb:e8:b3:d5:b0:7e:89:4d:f0:aa:77:c1:5b:e5:10:3c:fe:
         35:db:22:9c:7f:72:d9:05:54:37:68:91:46:40:fd:66:4e:a7:
         44:c8:7b:3c:20:9c:35:0c:b4:2b:aa:88:c5:cd:65:a4:6c:66:
         af:74:70:3a:a1:a8:86:a0:30:16:43:ef:46:ce:81:65:76:7f:
         83:46:a0:4f:ea:bc:70:cc:76:b8:da:b9:e5:89:cd:21:2c:76:
         a0:60:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:33 2026 by rpki-client