Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
File:                     94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json)
Hash identifier:          jzCa4k3O2O/gxtMNTI5LWxY7HD89GWwZEioX+AARUY8=
Subject key identifier:   DE:FA:92:6B:AE:DD:64:7C:AC:BD:A9:14:7C:68:30:B3:3C:7F:0F:21
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Certificate issuer:       /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial:       019FACE3BC18E34C3E23FC48AD001C010195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
Manifest number:          12BD
Signing time:             Wed 29 Jul 2026 08:00:33 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:33 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:33 +0000
Files and hashes:         1: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: 9kCLSi44qdPZWuImrj/U9GKbJ7uv2oKupo7zcUZx5X4=)
                          2: hKeFeFo6493_38OQ9i00adzif9I.roa (hash: 53uE5bZj+EC0/O49ny+JkcCWuYcfpKEUEDdPY2U5sKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:bc:18:e3:4c:3e:23:fc:48:ad:00:1c:01:01:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
        Validity
            Not Before: Jul 29 08:00:33 2026 GMT
            Not After : Jul 30 08:00:33 2026 GMT
        Subject: CN=defa926baedd647cacbda9147c6830b33c7f0f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:03:ed:91:29:06:25:ed:28:22:86:4b:55:
                    5f:46:7d:7a:69:60:cc:b3:de:5d:11:30:94:bb:d6:
                    a2:f5:a4:2c:80:1a:27:ce:c4:71:5c:26:09:e7:91:
                    7d:73:92:6e:a3:2c:34:8a:6f:82:5b:c8:d7:02:74:
                    81:68:70:68:27:89:09:23:4c:68:2f:d7:bc:0d:e1:
                    dc:ad:b0:ac:48:9d:34:49:00:ae:d4:e7:5a:62:3d:
                    b6:c7:23:07:1f:fa:1d:4d:50:6c:fa:70:90:0f:c9:
                    ca:82:0d:2c:17:fc:36:90:7c:64:66:56:c3:f0:ad:
                    6f:76:86:9a:87:69:37:c9:1b:b7:6b:69:54:13:18:
                    a6:2b:e8:d6:e5:36:66:a4:22:84:0c:26:f5:b5:a6:
                    76:6b:48:29:0a:cc:bb:10:5a:f2:01:21:e7:b4:c2:
                    e2:55:3a:3a:77:ce:a3:05:d1:53:12:0a:40:9c:df:
                    5d:0e:cc:28:d1:6d:14:ce:be:47:de:1f:45:58:82:
                    67:a2:38:e6:98:e0:28:cb:e0:b3:c4:ab:e1:cb:53:
                    22:bb:87:f7:11:04:0d:c5:a9:68:35:f3:dd:0e:33:
                    0b:85:e5:a8:45:cc:b4:de:ee:a5:be:6e:04:ec:a2:
                    fc:a3:dd:e1:0c:14:6d:2c:4d:1e:87:63:d8:4e:c9:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FA:92:6B:AE:DD:64:7C:AC:BD:A9:14:7C:68:30:B3:3C:7F:0F:21
            X509v3 Authority Key Identifier:
                keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:11:73:93:34:a5:75:98:9f:04:23:fc:48:b3:e9:e0:58:b4:
         74:59:9e:87:60:a2:43:72:e2:59:5c:84:53:7a:c3:c8:2c:f3:
         0f:23:fa:d5:b6:ed:5c:f4:f3:eb:24:50:fb:e1:10:41:4a:34:
         d9:63:66:8e:08:33:3f:cf:2f:43:54:61:96:87:b6:fa:b9:7e:
         5f:74:dd:4d:06:1f:2a:dc:a1:c2:d2:46:8c:bf:0e:45:d4:37:
         a3:58:5a:02:b1:29:40:b7:32:9a:04:79:7a:37:8c:2b:ab:c3:
         e0:f9:b8:37:c0:a7:82:bc:70:c0:82:6d:1e:76:83:70:ae:53:
         d1:91:81:91:51:c6:a8:98:9c:2e:58:91:da:19:26:c8:e9:de:
         b6:99:7a:47:a5:56:f9:07:fc:b4:e6:4a:86:83:c3:ec:ea:a5:
         f1:e2:0d:3c:aa:23:93:d7:7e:84:80:e4:d0:f6:b2:cb:8e:29:
         70:75:5c:b1:22:2c:a6:97:98:62:f5:9c:86:48:ea:ba:00:43:
         e1:e2:2e:8f:e8:1e:81:fc:c1:57:ae:c5:03:79:a3:a0:9e:ad:
         8a:c9:ab:00:3b:ec:d4:73:4e:cb:3d:0f:3d:c4:91:b2:ba:a5:
         c0:01:a1:5a:71:df:14:ea:d5:91:a8:54:bb:26:0b:fe:85:49:
         5f:2c:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:23:49 2026 by rpki-client