Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File:                     1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier:          B6g5wtepTOpCDq65mD/qoqxEyP9010nvgdjGbo2yLSA=
Subject key identifier:   BC:56:9D:7A:BB:E7:E6:2D:2C:D4:34:F7:31:DA:72:1E:4D:55:35:3F
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer:       /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial:       019FAAF54AA848C60950B43F306A50339000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number:          08B2
Signing time:             Tue 28 Jul 2026 23:00:29 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:29 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:29 +0000
Files and hashes:         1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: kW93QPyoUHcQ2F2Qk3y0hETLG2iO7to8N34Fo4zB07E=)
                          2: JpIB4nkPEhTLh9OLsKFtaIBTfLs.roa (hash: pRfl+oPO95G6GyCTV4Tx86Y6/zpSH8wEr4yMBAKE3Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:4a:a8:48:c6:09:50:b4:3f:30:6a:50:33:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
        Validity
            Not Before: Jul 28 23:00:29 2026 GMT
            Not After : Jul 29 23:00:29 2026 GMT
        Subject: CN=bc569d7abbe7e62d2cd434f731da721e4d55353f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:93:31:5e:46:0e:6c:96:04:d6:7c:e3:b3:
                    5a:21:38:05:5a:2c:b0:4f:75:83:c6:f9:88:ca:56:
                    c3:aa:21:b4:20:13:63:57:2f:b5:ab:c5:b9:80:0a:
                    7d:dd:19:bf:df:ad:01:2f:cd:dc:dc:58:20:b5:21:
                    9c:b4:0f:6f:14:5b:e8:23:cd:4b:85:f7:a3:06:10:
                    63:41:b1:56:20:21:81:ac:ab:3b:4a:b2:16:d4:a1:
                    d3:e9:0f:83:31:89:95:eb:2e:ab:a9:6d:c6:a6:7d:
                    42:5e:db:54:35:d2:17:2c:f1:78:77:2e:58:94:5e:
                    69:e8:55:5a:b6:ec:95:9e:cb:5f:87:7e:d0:68:4b:
                    a0:db:ee:ca:51:76:b6:bb:a0:9b:cb:8b:e7:f3:70:
                    69:6c:9a:f7:b8:52:7d:62:44:76:64:a2:c3:b7:80:
                    bf:c0:7d:7e:43:d9:96:e9:4a:82:ea:6e:60:8d:32:
                    36:e7:86:4a:a9:fb:94:2d:02:b1:21:29:e6:f1:b9:
                    54:9f:70:b1:f8:34:be:7a:d9:b7:49:a0:00:12:8c:
                    36:d6:4b:1a:bc:59:2e:18:5e:0d:d2:21:ca:75:3c:
                    9b:36:0c:00:24:28:91:e3:d8:37:45:2b:13:7d:c3:
                    f7:c6:0f:40:77:8d:b9:ac:11:46:56:33:c8:44:4f:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:56:9D:7A:BB:E7:E6:2D:2C:D4:34:F7:31:DA:72:1E:4D:55:35:3F
            X509v3 Authority Key Identifier:
                keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:52:23:44:c4:5c:5e:d5:c1:40:2d:1d:36:79:e2:8f:65:91:
         6c:32:3d:a2:4a:dc:1b:92:29:b2:e3:07:44:54:f9:8b:de:33:
         f1:e5:21:39:48:0b:7d:d6:06:50:2a:33:8d:77:0c:af:c9:5a:
         00:df:d8:66:2a:bb:ba:3f:2b:15:67:e8:32:0c:98:bb:a4:89:
         c7:19:ed:8d:78:17:02:ca:fd:ea:4e:d0:f5:49:c4:7e:26:39:
         e0:d4:63:f7:31:e4:24:c8:4d:d0:af:07:87:71:b6:5c:e2:1e:
         13:84:a7:e4:fc:8c:b4:a8:16:47:b2:35:c7:f4:5b:ad:03:b6:
         40:68:8a:07:be:6a:50:b3:b8:8c:80:94:09:8f:ac:88:f9:b4:
         05:20:c5:43:ae:c7:3a:80:9f:8c:1f:e9:e5:3f:41:48:b8:b4:
         eb:c4:42:c7:66:8c:ae:39:10:44:29:d4:57:9c:b4:1d:a8:64:
         53:d4:57:08:73:1a:a3:54:f9:27:cc:66:3b:4e:af:b8:de:a4:
         01:eb:6f:db:8b:38:ce:d5:ce:73:f8:30:a5:49:84:55:3d:16:
         ad:84:26:a4:f7:1b:31:71:70:b6:9f:10:10:11:99:df:77:25:
         32:72:6f:b9:47:5e:36:c2:da:07:60:92:db:4c:91:21:80:2a:
         e4:34:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:28 2026 by rpki-client