Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
File:                     95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json)
Hash identifier:          XS+sr9wOP4l/g6ouvrREUIClSnI2PKu6aS6gSd95RJ0=
Subject key identifier:   B6:C8:60:30:01:2E:81:E2:E0:C8:15:3A:0D:7C:CF:1D:EA:A2:A3:F5
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Certificate issuer:       /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial:       019FA8D09A5D5686C56CB9C7580F794F28E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
Manifest number:          05CB
Signing time:             Tue 28 Jul 2026 13:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:10 +0000
Files and hashes:         1: 12ZQ62nPJwBHdDipttw3dUMZnqY.roa (hash: mj44+gLUBC8dy/BsSB97lGlEqLGL0epooCBx2VlfKb0=)
                          2: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: JxjfT1RqgHcDBrTpuOLSfRrKTi2qZ10A2GCQwBbQp8A=)
                          3: Jv0u9cMD564Ime5yTEWdumsR3O0.roa (hash: y04ea8/vqCOfvH/IiN/FLgzOzYxMmv/5aeY5o3QGFD0=)
                          4: MGt5BnBc1caHCVlOZifA8hYKUFM.asa (hash: Z3wsIN7VXFqQgyEQhPtCMDIavrFmtm5IXKY4ICw229o=)
                          5: gxePdXWHsul0oNwQhQ3aS2MQ6ME.roa (hash: iRowxiL68qvO5oDgW7hTqSRfTbL0D0sk6Kkkv12eMRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:9a:5d:56:86:c5:6c:b9:c7:58:0f:79:4f:28:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
        Validity
            Not Before: Jul 28 13:01:10 2026 GMT
            Not After : Jul 29 13:01:10 2026 GMT
        Subject: CN=b6c86030012e81e2e0c8153a0d7ccf1deaa2a3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:33:da:af:e9:5a:28:3a:f8:f9:63:29:60:
                    ff:c1:5d:7f:f4:a8:2f:82:61:b4:2e:3d:77:4c:de:
                    dc:22:8e:68:b2:67:97:02:eb:10:e8:4a:88:1a:74:
                    fd:ff:ee:af:45:62:42:d3:7a:7c:e0:9b:49:31:38:
                    44:19:05:a1:2b:09:41:0e:f8:6e:2b:ce:64:74:30:
                    83:ab:05:4d:f4:2c:03:7e:2c:cb:1a:55:08:e8:d0:
                    74:23:90:5c:90:9d:b6:23:6b:21:60:30:27:76:8d:
                    07:d1:5f:ff:5d:0a:aa:17:b0:70:38:76:1f:04:48:
                    98:8e:94:39:f2:25:4a:9d:ad:d0:cd:a5:4a:a5:3d:
                    e9:c2:a2:6a:3c:19:ba:f4:f1:62:c4:a2:6a:aa:d4:
                    5f:ad:1c:f8:e8:1c:8b:58:b0:12:0f:e3:4b:d7:64:
                    ee:8b:d3:f5:b6:82:34:e5:38:d6:9b:cf:e8:4a:5d:
                    b4:7e:c6:7c:32:61:5d:6a:bc:dd:27:30:b1:30:fa:
                    ac:61:54:22:6e:c4:b5:62:44:77:c0:19:89:25:e3:
                    3e:c8:d9:7f:be:bf:72:0e:c1:61:81:5f:c9:39:45:
                    4b:ee:ed:aa:7d:2c:8a:7d:3b:99:ae:d3:39:83:69:
                    b7:5e:3c:ef:ab:2f:47:28:99:a2:cf:78:a0:43:88:
                    13:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C8:60:30:01:2E:81:E2:E0:C8:15:3A:0D:7C:CF:1D:EA:A2:A3:F5
            X509v3 Authority Key Identifier:
                keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:30:e8:38:7c:7c:7a:2f:f7:fb:cf:e0:f5:a7:1d:a5:3c:c5:
         b8:84:8d:e0:3a:e6:3b:47:a3:85:49:b0:bb:ac:ec:27:b0:4a:
         3e:00:44:44:f8:c0:9a:4f:c9:70:f3:11:95:f8:ba:ea:a8:d1:
         60:1b:c7:8d:8f:7f:49:5a:46:bd:c0:3d:f7:93:1e:3d:a0:4e:
         ef:e1:a5:64:df:d3:5c:06:93:09:f8:41:c5:58:9b:e3:b6:84:
         29:95:2d:77:89:4c:c7:40:b1:12:37:fe:d9:88:87:bf:48:b6:
         7e:f6:46:02:f3:6c:01:68:88:2b:be:25:b8:80:e1:70:a6:b7:
         b9:ed:80:7c:c3:7e:b9:58:9a:e4:5e:85:c7:9c:0b:ff:c3:98:
         c9:d4:04:fb:75:43:45:b2:b2:1e:00:48:75:c5:34:60:74:65:
         61:8a:00:1c:5c:ff:2f:de:e1:fa:8d:52:5d:46:b0:43:00:8a:
         15:c3:ef:b0:d1:66:de:1f:98:bd:c0:42:eb:35:ef:82:6d:8b:
         12:86:d8:5b:0f:fa:17:9a:cb:9c:8d:b0:4c:1d:96:43:b5:29:
         eb:23:da:fe:82:b4:65:ce:16:7b:00:dd:ce:e5:49:67:2d:1a:
         f8:98:cb:11:07:44:ec:6a:7d:12:fb:b1:98:46:54:f8:8e:95:
         2a:67:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:17:38 2026 by rpki-client