Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
File:                     sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft (raw, json)
Hash identifier:          epUKtYquuzqOk+bCzIvna04fVaorFDsh1yk3kG34qJA=
Subject key identifier:   0C:40:D5:3A:38:9F:82:95:AB:12:D2:E5:D2:91:FB:96:35:82:D5:31
Authority key identifier: B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4
Certificate issuer:       /CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
Certificate serial:       019FADBFA1AA9077C61897D207F3EE258B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
Manifest number:          191B
Signing time:             Wed 29 Jul 2026 12:00:44 +0000
Manifest this update:     Wed 29 Jul 2026 12:00:44 +0000
Manifest next update:     Thu 30 Jul 2026 12:00:44 +0000
Files and hashes:         1: 5KOoriFpYDWNQa_aIXxLJE8pBHY.roa (hash: 9iEGmIKb7O59KI7QS/sDIkqkU0kq2Alr+CCrXsTWZJ4=)
                          2: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl (hash: rwXrJ6DrI2ceBYSlhtA+/1JseIn+OIS//d/t1qlyF0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:bf:a1:aa:90:77:c6:18:97:d2:07:f3:ee:25:8b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
        Validity
            Not Before: Jul 29 12:00:44 2026 GMT
            Not After : Jul 30 12:00:44 2026 GMT
        Subject: CN=0c40d53a389f8295ab12d2e5d291fb963582d531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:10:00:9b:2a:cc:f7:47:54:bd:02:d5:fd:
                    b3:b9:04:57:58:c3:01:91:5d:55:15:22:79:70:40:
                    9c:27:b5:3a:30:1d:18:7e:a0:ed:fc:07:26:a2:3e:
                    b5:5f:ac:3f:30:ed:6c:3e:87:de:1d:74:60:6c:71:
                    9c:89:00:86:45:a4:cf:5b:22:54:dd:61:bf:06:3b:
                    57:0b:98:77:b0:f5:6d:ad:00:80:ae:59:40:82:8d:
                    e3:af:3e:2e:1c:ef:96:2c:95:91:a9:2d:44:42:c4:
                    28:11:00:65:78:54:b3:b4:08:ac:f5:17:60:88:f0:
                    24:d8:03:9b:fa:16:96:31:7b:95:28:7f:9a:24:7e:
                    e3:8d:37:1e:ae:88:1a:43:55:9f:9c:2b:c5:d5:90:
                    a9:91:39:9e:ab:87:a6:9b:a2:3f:fb:91:b1:8e:cc:
                    a7:30:26:f8:cc:e1:d7:4b:4c:dd:63:00:0c:54:49:
                    97:a8:df:7b:7e:62:2d:cf:b3:d0:32:de:ad:cf:1c:
                    6c:8c:3e:7c:f1:86:ef:ff:0e:59:79:30:e1:6f:81:
                    d3:bc:fb:df:63:67:be:d4:66:9b:34:8d:89:c3:cd:
                    22:a4:4a:4b:c0:e1:56:eb:c4:53:22:12:f1:89:62:
                    9b:15:22:7a:79:e5:8d:11:c2:3c:ac:bd:54:f2:d8:
                    7c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:40:D5:3A:38:9F:82:95:AB:12:D2:E5:D2:91:FB:96:35:82:D5:31
            X509v3 Authority Key Identifier:
                keyid:B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:49:36:34:6a:59:7c:07:fe:88:19:2f:b4:81:b9:24:65:4d:
         98:5a:06:04:bb:24:f2:76:2a:98:ba:56:5a:3b:90:7f:de:14:
         b9:5f:3b:9f:e4:f7:5c:39:a5:20:2f:04:3c:77:b1:94:4d:24:
         d0:80:94:84:d0:1a:b0:74:ea:ff:07:30:2e:08:e2:47:de:98:
         28:30:64:f1:f7:99:d7:ab:a6:6e:66:43:14:58:af:43:c3:28:
         12:e2:90:a6:48:ab:83:9d:10:85:63:ab:30:f0:39:48:55:ad:
         5b:d3:d8:17:36:8f:3b:55:8e:f8:28:0f:d1:d0:9c:4c:1e:a6:
         d5:14:fb:63:a6:84:2e:a4:17:76:0c:0a:78:2a:41:a7:77:66:
         a1:d8:71:bf:e2:ec:48:81:23:df:13:bf:f2:86:1f:25:ac:05:
         77:4e:15:8f:dc:73:ce:de:49:2f:5c:04:49:cc:09:22:86:75:
         ff:b1:9b:cd:cc:16:cf:8e:d1:dc:fc:47:10:0a:ec:cf:6d:b0:
         d7:08:c1:ec:52:0f:b8:c3:4d:c2:69:88:52:a9:4b:09:ff:9e:
         92:3d:6d:3b:1a:2e:ad:91:70:05:71:66:fc:f2:01:52:b8:c7:
         b7:f7:a2:cd:2b:7f:d8:f7:81:b7:98:79:23:7c:8c:61:4b:77:
         96:f0:90:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:09:59 2026 by rpki-client