Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File:                     G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier:          SaFRuKZY9hp1EvCa0qfHvcl8Yptgwc7vhwW2HhiEWng=
Subject key identifier:   64:AD:2D:6A:98:44:24:CF:5C:51:D1:10:B2:E1:E2:33:10:BD:DD:6B
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer:       /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial:       019FAD1AF2205262043A6F76163C497C761C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number:          16EF
Signing time:             Wed 29 Jul 2026 09:00:51 +0000
Manifest this update:     Wed 29 Jul 2026 09:00:51 +0000
Manifest next update:     Thu 30 Jul 2026 09:00:51 +0000
Files and hashes:         1: 1-6iaGXxnmZAQPnrgq_8F_icO1g4.roa (hash: 0E9/yZaAdb1/Mv9Vi0wA6mVdKYXwLD+kDlf9BylOAkE=)
                          2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: H7hVevaresngWdXg7pp/tuQXh1gVuJDO0EscXmN2wQM=)
                          3: I9pkAH906nZBLjkKMj0A3qvNerA.roa (hash: kK+otvNovNpDkMGHU7hKnjBkL3H8kP1EQF/+FtQ9xQo=)
                          4: cDH3zRFxxa5MCdHGhfO_X-DrZiY.roa (hash: XO1nhE/daEhAYwuXZgOrEgjLVoR1QTpbhv4y3qZNEo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:1a:f2:20:52:62:04:3a:6f:76:16:3c:49:7c:76:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
        Validity
            Not Before: Jul 29 09:00:51 2026 GMT
            Not After : Jul 30 09:00:51 2026 GMT
        Subject: CN=64ad2d6a984424cf5c51d110b2e1e23310bddd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c7:bd:66:2a:60:72:23:20:ce:b7:93:c4:56:
                    bb:fc:9b:d2:85:31:1d:a8:78:2e:8c:76:d9:5d:11:
                    f3:5e:2a:b3:b5:04:ca:13:93:97:bf:77:4f:70:38:
                    db:ae:fb:e7:21:f1:50:df:5c:7c:49:1a:f2:0f:ce:
                    cc:10:d7:5a:d3:8d:c3:6b:62:e5:ea:5e:d1:8e:d6:
                    4b:ff:e5:f3:df:2d:d3:3e:ba:7f:a2:e6:c7:81:34:
                    9c:5a:10:89:8b:74:d4:98:27:7a:c0:0d:13:98:ac:
                    7c:19:79:5f:ed:07:46:e2:70:e7:15:d2:d7:2b:fd:
                    df:fb:c1:f7:70:06:ef:0d:af:19:35:2e:6e:a8:40:
                    bd:a1:7b:7f:b5:cc:e0:ee:71:03:9c:3d:9f:62:2c:
                    45:88:de:56:29:dc:44:0d:3b:aa:dc:54:ad:fa:51:
                    7f:12:4a:11:40:ca:2e:9e:b6:3f:05:6d:00:c1:4c:
                    ab:93:ea:82:23:54:9a:0c:7d:2c:2f:27:ee:11:cc:
                    b7:ee:53:ae:f9:9a:e4:e8:67:b5:c1:0b:16:2e:75:
                    b6:0f:ba:82:2e:bb:93:ad:c9:a6:7e:69:0a:bd:1b:
                    38:34:c1:22:e1:c6:a4:23:c2:86:2c:40:ec:39:2d:
                    4d:78:0c:51:09:56:1c:7f:81:27:26:a4:cb:b5:4c:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AD:2D:6A:98:44:24:CF:5C:51:D1:10:B2:E1:E2:33:10:BD:DD:6B
            X509v3 Authority Key Identifier:
                keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4a:2b:9d:1c:9d:fa:f3:97:02:16:27:1a:88:61:c7:aa:dd:
         59:6c:c6:00:bd:12:d1:dd:2a:a6:4e:4d:e5:91:e6:07:64:af:
         a4:81:48:03:30:4a:b0:e6:df:fa:6b:61:f0:0f:55:78:49:0b:
         6a:d5:a8:61:60:46:66:2a:b5:28:db:8c:33:71:bc:c1:9d:4d:
         e0:a8:24:e7:25:ea:f6:81:a9:87:94:cc:8f:a5:82:01:2c:2c:
         24:f0:f8:d0:a1:09:b9:ae:a1:ad:9a:5f:00:ca:c9:08:bd:82:
         72:40:d1:1e:3e:ee:c7:55:c4:f7:3f:b1:a8:8f:17:be:85:ed:
         f8:db:48:dc:c6:6b:12:31:d3:fb:b7:cd:49:6d:a3:24:2a:87:
         9d:e7:f7:8b:fe:c9:41:1a:49:5b:0d:61:5c:ec:88:a6:2b:ae:
         23:03:67:64:f1:d0:93:70:43:15:04:20:c0:fd:2c:43:7e:3c:
         e6:20:0f:fa:e7:2d:c3:e6:f3:75:2c:8a:c0:3a:26:55:75:21:
         27:3b:10:b9:ba:f1:4f:cd:4b:0d:4b:ab:bc:1b:58:19:f0:2c:
         3c:1e:92:37:fb:2a:da:12:bc:dd:37:33:f2:a2:a5:62:7f:f7:
         55:f7:aa:f1:b0:2c:2d:be:b5:e8:6e:25:fa:63:26:6e:21:aa:
         41:9f:b1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:20 2026 by rpki-client