Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
File:                     Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json)
Hash identifier:          k5tB8MszBn6KY7FPoml8XqZM4xupeUfXnf/Y/I1Rrjk=
Subject key identifier:   C9:E5:99:50:26:F9:A5:87:DD:EF:D1:01:D7:3B:87:2E:2A:C3:44:FC
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       019FAABEA3060E94987FC3CBB677487AC03C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
Manifest number:          1159
Signing time:             Tue 28 Jul 2026 22:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:48 +0000
Files and hashes:         1: 1jOzSXBij5_0E-f2suF9FA2ns6E.roa (hash: Nc0F7T+rokFZEGPWl4wCwZ72VzEoKQta+d5LVxuMNuk=)
                          2: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: olVT2XyHvERuakVra/gRAS5HbaDq/45L8oLZ2d1LFPc=)
                          3: VJzsM7xLy0BvWv62rRogwgx0xmY.roa (hash: r5eVuV7raUZo7rWfONsinf2tvmGiQxP2qwK0CFC96cA=)
                          4: Y1T4r7Fs3xLnU467yBjXxVxADek.roa (hash: 2REreg0NGysFv7m8SRA6AFjBorpvVS4eSFiK4h3b/NE=)
                          5: axPxdnGXgCRwQaSqTXZuNt_ZeRQ.roa (hash: 19+634b7ERlCmGPvTLiIQL850moJR3rSQ5I/u031cHQ=)
                          6: bQ8c-7koeiWAMWWzaWJffyBBvZc.roa (hash: hLJwj4Ja3tdG52rHBUCVD/JD4mLF045qQKob1dFnaXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:a3:06:0e:94:98:7f:c3:cb:b6:77:48:7a:c0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Jul 28 22:00:48 2026 GMT
            Not After : Jul 29 22:00:48 2026 GMT
        Subject: CN=c9e5995026f9a587ddefd101d73b872e2ac344fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:53:75:1b:dd:70:df:03:40:c6:01:3e:86:88:
                    7a:d6:67:9d:2f:09:07:93:56:2f:67:38:21:c1:19:
                    3a:58:df:c1:68:3f:b4:97:70:a2:f8:86:69:14:6f:
                    51:20:07:36:6a:54:42:ef:0c:22:09:30:66:9a:15:
                    71:3c:dd:02:8c:e5:eb:3f:75:d6:a9:43:3d:be:eb:
                    3e:5a:d1:37:bf:3c:46:38:83:2d:5a:f6:4d:59:c3:
                    3a:cd:6a:38:39:b8:95:fb:23:5e:0d:b6:0e:75:7c:
                    6c:30:79:cd:b5:9f:0b:a2:51:4e:57:85:c0:ea:87:
                    87:3c:d0:cd:a0:c8:0e:65:37:6a:d9:9b:72:27:31:
                    b1:a2:b4:ff:be:c3:d9:35:1e:8c:83:8d:1c:07:fe:
                    66:62:1e:8a:ba:c5:fb:c7:7a:f9:eb:d1:50:0a:e7:
                    12:ea:fc:c9:23:2e:06:4a:ac:45:6e:9a:01:1f:32:
                    a8:71:c9:81:bf:80:dc:a0:09:c2:68:12:f7:d9:51:
                    2a:48:f1:6f:80:15:6b:88:dc:e1:0f:c6:fd:f6:64:
                    a1:6e:00:1b:46:48:08:bf:06:67:e5:9c:c0:ba:99:
                    8c:41:bb:9b:e1:3a:c1:36:38:31:f2:0e:3e:b8:81:
                    6d:54:c6:1a:59:62:5b:3b:71:7c:a7:bd:ed:87:be:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E5:99:50:26:F9:A5:87:DD:EF:D1:01:D7:3B:87:2E:2A:C3:44:FC
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:68:73:0d:ec:a8:f3:07:31:0d:39:64:f4:99:86:da:88:70:
         b1:7c:36:72:94:29:69:4d:dc:e6:eb:2b:6f:40:67:9b:c3:f8:
         1b:4e:01:df:a0:b9:98:1a:62:b8:66:e0:0f:22:de:d6:3d:f2:
         2f:be:2c:fc:1d:93:e6:17:9c:c8:7e:5c:7c:10:b4:6a:e0:d3:
         c8:65:94:65:5d:f4:4b:d5:bd:1c:2a:47:ab:5a:89:3d:75:78:
         3f:ed:65:50:64:51:64:b4:c6:0e:22:38:b8:72:dc:67:35:31:
         e4:b3:00:9d:65:af:e2:83:44:dc:c7:44:6a:ac:3e:dd:7d:0b:
         bb:00:80:69:dc:af:0a:b2:f7:65:f6:5e:c3:21:8c:10:2d:ab:
         b1:8e:b6:f8:54:a5:30:c0:8d:0c:ee:16:60:88:d7:71:20:c2:
         e8:8e:3b:e5:4f:54:3f:49:be:df:74:4f:12:b7:52:1d:59:6c:
         7a:04:f3:fd:ea:d6:f1:62:ff:a5:1a:02:30:d2:bd:1c:06:10:
         0d:ed:ac:6f:31:de:1d:76:92:ae:1b:69:da:47:db:1a:d9:eb:
         33:d2:ef:80:05:c5:0a:3e:38:e9:93:0b:c3:64:da:ee:c3:cf:
         98:5e:ef:b2:79:b1:ae:48:83:07:8a:b3:da:bf:6b:8e:51:b2:
         67:ce:72:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:38 2026 by rpki-client