Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File:                     SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier:          BvS3HJ6EAXF5n1VUFeEWw3GTeJ6hoM7q71Oq7BnLIPw=
Subject key identifier:   4F:B0:9B:F0:73:43:52:64:B8:EC:9B:73:0F:BC:72:E0:E0:FD:4B:93
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer:       /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial:       019FA899563ECCA596C68D40F5032892F7A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number:          16EB
Signing time:             Tue 28 Jul 2026 12:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:48 +0000
Files and hashes:         1: 32Nopwa7iDrMzQvWR2AiGUXyxqI.roa (hash: UhsqgA9BDo8hjf2FELCXlR0HFZ2+BdgenG+by3xwFz8=)
                          2: LjPmzvpwanEzWC7YwFcmuEsNkws.roa (hash: MIJ/J6I5pbMxfY/A5H3VycZbhKC12p0Tut4YaO1yZlQ=)
                          3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: kj8s1eyYpEbqhyAt4xk9kYzqP5rRn8XtfKb4OmnSM+E=)
                          4: U032uAEUZ0b4mkUs5GY7tAVTTzU.roa (hash: DED8ognEIVQikRQX7YkZQcK+eDMVkhFnX19M3oaeQrw=)
                          5: UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa (hash: RrnGAk5DcSVwnr4K/OnsZ4KSQkqSg7XT17ThtWs4Qzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:56:3e:cc:a5:96:c6:8d:40:f5:03:28:92:f7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494d7873416510a2fb2346ef342280155522713b
        Validity
            Not Before: Jul 28 12:00:48 2026 GMT
            Not After : Jul 29 12:00:48 2026 GMT
        Subject: CN=4fb09bf073435264b8ec9b730fbc72e0e0fd4b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ac:12:98:65:bf:a3:43:00:05:dc:7d:e9:63:
                    f7:5f:60:a6:63:25:82:c8:c1:a7:26:43:a6:96:a2:
                    66:01:17:ef:33:83:ca:ce:e1:6f:a2:db:44:ec:ab:
                    86:d9:46:d3:27:2f:58:05:d2:db:6d:c2:5e:9d:1a:
                    b4:6b:ae:46:0f:54:9b:26:32:a7:2f:66:96:bf:4e:
                    56:67:9f:6a:42:a6:9e:45:d2:a3:fe:3b:3a:04:90:
                    e3:30:33:75:04:32:ce:cc:c8:9c:3b:33:ce:66:7d:
                    8b:d8:ca:34:8a:b0:65:6b:39:4f:bb:64:e7:2d:3d:
                    79:bc:23:1c:00:14:c1:6b:0e:51:a0:5e:00:ee:d8:
                    91:80:7c:6d:aa:c2:c3:bd:a8:fb:ba:20:b6:aa:85:
                    3d:7d:ff:1e:5f:93:3f:de:44:17:08:b8:89:26:03:
                    d5:3e:7e:c6:f1:dc:10:25:d5:96:fd:5e:d0:de:6d:
                    c9:00:8d:b5:f2:b3:a7:3a:6a:54:08:6d:e5:b9:a3:
                    6b:6e:6a:eb:bf:5f:5b:67:a9:ff:64:54:20:2f:14:
                    e7:d1:9c:5d:cd:8f:15:ea:a0:c6:d3:ca:7e:a6:ef:
                    f7:c0:70:be:a7:13:7e:93:a1:41:ab:12:bd:28:d5:
                    9e:d0:82:c6:46:f0:48:1f:3b:9b:1b:c9:a1:87:1c:
                    bd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B0:9B:F0:73:43:52:64:B8:EC:9B:73:0F:BC:72:E0:E0:FD:4B:93
            X509v3 Authority Key Identifier:
                keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f3:b5:42:41:b6:ff:16:e1:61:8c:f7:08:d9:00:9b:94:ec:
         31:36:a9:65:ea:15:67:fb:1e:c8:ea:ad:4e:15:30:4c:f4:29:
         14:4c:d3:2e:bf:6f:ef:19:26:e8:7c:8f:98:32:22:68:d5:07:
         84:3c:6c:bc:c1:b0:bb:ef:cc:ec:90:2f:23:fc:8c:32:2b:69:
         bc:a8:d1:dc:a3:e9:8f:72:ea:bc:58:2d:e7:a0:8c:ce:f0:a6:
         85:f7:13:f6:87:aa:ea:c1:3c:b2:ec:88:dd:ab:1c:18:c9:b2:
         ea:c3:f7:6c:4d:65:15:e1:f0:bf:b4:53:36:b7:c1:36:58:b3:
         ce:84:a2:fc:32:91:eb:57:1d:86:c2:2e:e3:ea:27:38:55:16:
         3f:73:c7:50:3f:69:6a:04:df:94:40:1e:ca:53:43:bf:88:f0:
         97:f6:a0:c5:c4:bc:f0:e2:66:fd:55:46:1e:07:cc:1e:07:a2:
         93:04:0d:9c:a2:cb:c8:ed:67:52:63:3c:56:7e:ba:9c:a7:3f:
         7e:54:5e:4a:64:c7:28:5e:09:2c:fd:13:e1:b7:94:3a:ef:6e:
         ae:67:3c:f9:cb:42:7d:9c:a7:81:df:3e:54:fb:ec:8e:33:c9:
         a9:40:d4:b9:45:07:6c:0a:13:f8:6b:9e:e6:30:54:4b:fe:9c:
         e6:f9:fc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:43 2026 by rpki-client