Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File:                     mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier:          A+CXScUSPOfFERoQdcIwGXxgskOyjs/uVInWXmXUD80=
Subject key identifier:   F5:19:3A:A1:A2:1A:73:D2:8E:D2:1D:81:9C:3B:B0:41:60:D7:08:CC
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer:       /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial:       019FAAF54C13A16FCEBDFEEC91EF72A79A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number:          185D
Signing time:             Tue 28 Jul 2026 23:00:30 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:30 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:30 +0000
Files and hashes:         1: KEyhGh3u-Ad2U98qs53aKdB_GJc.roa (hash: jZXKizyeTSKszZt9XLRCfNj1B4xBpIyE3AIW1lpSBsI=)
                          2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: 4KJFLQmaOJ9S2NM4X2gdvvwC8vkiWHAjpJr/xtwmHGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:4c:13:a1:6f:ce:bd:fe:ec:91:ef:72:a7:9a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
        Validity
            Not Before: Jul 28 23:00:30 2026 GMT
            Not After : Jul 29 23:00:30 2026 GMT
        Subject: CN=f5193aa1a21a73d28ed21d819c3bb04160d708cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:cb:e4:54:e1:34:1c:20:fa:36:8e:6d:13:
                    84:99:42:6a:94:7c:b0:85:8a:03:2f:e6:ec:a5:e0:
                    5a:05:ea:70:af:dd:04:a3:d0:94:39:8a:97:e4:40:
                    68:57:12:69:71:68:2b:7a:31:9d:4f:2d:44:ef:e4:
                    81:5d:98:52:ea:3e:3e:b8:81:7f:28:ed:f6:65:1a:
                    78:f2:ec:01:57:c8:6d:29:6c:07:c9:d7:0a:bc:cc:
                    a5:9b:ff:fa:3a:e6:35:7e:8a:50:fb:39:76:57:2e:
                    52:ec:a4:e6:5b:e2:49:37:93:51:fa:fa:65:77:b1:
                    90:51:f7:e1:45:7e:4a:bc:75:5b:33:a1:b0:3c:fd:
                    3d:39:4c:36:b1:22:15:03:ba:21:da:90:f4:a7:a8:
                    5a:36:ff:96:38:fc:dd:b9:56:97:66:52:2d:91:d7:
                    ec:16:ea:61:0d:a8:bc:28:cb:c4:bd:32:3e:e0:8b:
                    39:dc:c9:b2:cc:39:80:eb:80:7b:ea:c3:58:ad:dc:
                    24:b8:ec:28:31:d8:98:72:92:1a:86:cb:f4:c1:5a:
                    48:88:41:f2:de:4a:b7:7d:b3:16:53:7b:f8:7e:92:
                    51:cc:b7:11:74:79:89:0d:6e:3a:b6:05:b4:c4:4a:
                    c6:b7:75:e7:2f:e5:a2:62:79:44:02:68:bc:0c:35:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:19:3A:A1:A2:1A:73:D2:8E:D2:1D:81:9C:3B:B0:41:60:D7:08:CC
            X509v3 Authority Key Identifier:
                keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0e:f7:8a:83:f4:f6:b6:d1:68:1b:2c:87:c4:a6:ba:bf:f0:
         c1:e9:99:86:b5:bb:61:d5:56:b2:42:09:a3:8e:d1:1e:cc:df:
         46:95:c7:d7:1b:f0:7d:bd:f6:be:ef:78:71:bd:b2:79:6a:db:
         96:ac:ad:13:ec:a2:43:8b:3a:ec:7b:5e:8f:e8:e7:cc:28:d7:
         6c:ca:2d:c9:ac:97:80:1a:e4:69:d2:ac:db:d6:bc:4e:af:cb:
         90:a5:41:63:e3:59:52:7d:20:c5:e8:a2:c6:9c:19:76:5f:2f:
         ea:bb:52:4a:6b:81:51:15:dd:d8:c9:0a:84:e2:d7:de:21:d5:
         6a:a4:84:32:fd:3c:21:39:29:ea:83:70:26:db:d2:a4:14:0c:
         f6:2d:72:39:94:65:a4:df:f1:dd:91:14:88:38:35:34:e2:b7:
         7e:4a:53:63:f0:6b:1a:ed:59:6d:8e:64:67:da:a5:2d:47:70:
         a6:eb:22:99:07:56:f2:84:9d:cb:a5:66:dd:25:2e:1d:74:a7:
         66:7a:f7:cf:f1:1f:4a:a5:02:f6:f4:a4:7d:39:1e:08:7a:09:
         e0:35:3f:eb:85:80:a1:48:60:f1:bf:b1:58:29:cb:9f:28:48:
         6b:17:1d:e0:c4:da:cc:d8:16:0d:22:64:3d:e5:a3:13:15:52:
         e3:12:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:21 2026 by rpki-client