Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
File:                     FivG9rrBQqA6uxp62RaQaD8DpNw.mft (raw, json)
Hash identifier:          KYI6LCogSQH/mWEhshkO3dL3Kbe8g4ckE2zA+o3Qups=
Subject key identifier:   B0:2C:EC:63:A2:9E:0F:06:90:9C:88:7D:69:96:DA:6A:BC:CB:12:03
Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Certificate issuer:       /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Certificate serial:       019FAC07E23DD75DA96091C8FC3600012DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
Manifest number:          1405
Signing time:             Wed 29 Jul 2026 04:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:25 +0000
Files and hashes:         1: FivG9rrBQqA6uxp62RaQaD8DpNw.crl (hash: k2ApeVVqsdk3oVzX6r9VQTbveZvY0NZNHMVrYoX+oPg=)
                          2: OdjD6-jie1gU1V0cRR0FziitCAg.roa (hash: MfGipVuvx0N4+V17kShStGKfSKXkomrNYWFKpDB6GCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:e2:3d:d7:5d:a9:60:91:c8:fc:36:00:01:2d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
        Validity
            Not Before: Jul 29 04:00:25 2026 GMT
            Not After : Jul 30 04:00:25 2026 GMT
        Subject: CN=b02cec63a29e0f06909c887d6996da6abccb1203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:62:e3:29:9d:84:5e:a4:c6:40:3c:2e:2a:
                    8a:06:69:fe:4b:0a:8e:ee:c9:49:74:d2:65:a0:a6:
                    39:6f:7c:5a:e1:dd:ac:b9:d8:62:24:f4:83:18:8d:
                    e7:4e:99:08:60:0a:a3:3f:4d:fc:b8:93:c6:09:50:
                    45:77:57:4f:33:b7:3b:df:6c:83:ab:73:04:9c:bf:
                    e1:e5:c5:bd:34:94:ab:8c:c1:04:fa:ec:3b:ce:a3:
                    46:ab:ad:bc:73:48:a8:8b:5e:fa:4a:0e:32:09:1b:
                    b5:c6:99:ff:23:15:3d:77:fb:48:61:90:5d:df:2c:
                    07:a3:7a:d8:09:a5:ed:7b:0e:ca:51:1c:88:c7:6d:
                    a7:39:14:18:05:d0:8b:bf:8d:d1:79:e7:e5:b8:c2:
                    4a:1f:06:3d:b8:30:8c:f9:6f:3b:41:a1:b3:fe:65:
                    a2:42:fe:c8:db:4f:80:2d:05:fc:34:37:76:70:5d:
                    d6:43:50:3b:c9:bd:3f:27:02:b7:c0:3a:56:8f:ab:
                    4e:75:27:91:31:b6:f9:07:55:7d:fb:43:71:85:9b:
                    38:3c:a4:6a:e6:e3:09:7a:04:0a:76:1e:d1:c5:e7:
                    e5:9a:aa:59:b1:6e:cb:fc:e4:bf:33:48:e8:6a:80:
                    b7:d1:3f:12:5a:9b:19:7b:9b:ae:2f:08:87:52:ec:
                    9a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2C:EC:63:A2:9E:0F:06:90:9C:88:7D:69:96:DA:6A:BC:CB:12:03
            X509v3 Authority Key Identifier:
                keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b7:69:7c:a4:90:3e:d0:d4:b5:44:24:06:0d:54:0c:9f:ee:
         42:b9:3f:ea:cd:f8:76:81:73:8e:a1:12:7a:fc:36:64:5f:f3:
         c9:2c:f6:f1:da:73:68:45:78:b0:32:31:86:c2:e9:a4:61:1e:
         2c:91:03:fe:60:b7:0b:4b:a7:25:10:d9:b2:f5:13:e7:0d:30:
         aa:46:82:c2:f5:10:ec:61:6c:c9:4d:a4:16:be:2d:b8:5d:f2:
         a5:1a:31:e6:6b:52:50:89:ca:29:d8:73:b8:9b:be:f3:be:a1:
         1f:84:28:39:e9:1e:a8:f2:f8:59:76:54:aa:c3:d2:3a:b8:45:
         93:ee:6b:68:99:d9:64:7d:03:9c:53:b6:e7:88:6b:0a:7a:f7:
         63:0f:2e:09:d3:7e:0e:59:4c:07:aa:ba:78:93:97:cf:38:f7:
         63:21:1c:cb:93:37:71:15:32:4f:31:f1:a4:5e:de:e9:83:89:
         62:2f:8e:5b:eb:9b:6a:e7:c0:32:fb:06:64:32:51:26:d6:21:
         a3:4b:7f:24:eb:21:58:ce:0a:d3:2f:36:ae:d0:22:8c:d7:66:
         42:dc:02:87:c9:56:22:ab:b6:04:b2:cb:38:c4:17:03:ee:6b:
         8a:4e:ef:ae:8a:90:f2:03:48:21:7e:b9:96:66:98:23:a7:60:
         c2:7d:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:29:09 2026 by rpki-client