Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File:                     dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier:          X54Vh1TgVF2GPKfoC4b9uNh7KXBiKFzoC8exfWRw3iI=
Subject key identifier:   94:15:07:83:50:F5:86:46:8B:E8:F5:6E:68:3B:98:77:FC:70:FA:48
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer:       /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial:       019FAABEB0F2433FF7316C4C5913125631BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number:          0FD4
Signing time:             Tue 28 Jul 2026 22:00:51 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:51 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:51 +0000
Files and hashes:         1: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: wUT3hQ+xyv/g8b2i8gXnVEygpnV0q6w0/zq+93Mx1o8=)
                          2: vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa (hash: j/Kb2HDxy8LEtTBE0A03kW5/ZkhjPjh8YBluaGzICqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:b0:f2:43:3f:f7:31:6c:4c:59:13:12:56:31:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
        Validity
            Not Before: Jul 28 22:00:51 2026 GMT
            Not After : Jul 29 22:00:51 2026 GMT
        Subject: CN=9415078350f586468be8f56e683b9877fc70fa48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:14:44:28:dc:9a:07:20:b8:89:74:0a:6e:
                    31:1e:60:b0:95:20:3f:df:ac:7b:76:12:53:b8:8d:
                    4c:4f:ca:0e:4e:de:ff:32:8c:1c:b4:da:a5:3b:6a:
                    3c:29:a9:cd:c6:59:9d:c8:c7:a2:f5:78:00:e3:7e:
                    29:2e:47:02:c4:1d:64:e0:fb:3e:5a:a9:24:3d:ab:
                    11:94:dd:a0:93:d6:7d:fe:aa:fd:02:59:5f:a9:85:
                    69:68:16:f8:0c:44:23:97:36:b3:4f:a8:4b:cc:63:
                    c6:c1:25:81:e3:fd:78:10:b6:e0:35:9e:4e:9e:9a:
                    b4:4d:8b:aa:cb:5b:94:65:3e:32:c6:10:b4:25:ee:
                    5f:64:bd:67:29:86:b8:51:0c:d5:ba:49:a2:85:75:
                    82:12:05:02:82:fb:d5:bd:3b:ca:3c:de:7e:5a:c8:
                    33:45:1b:67:c5:8a:26:e3:81:92:8e:26:5d:8d:c6:
                    6f:f8:3e:42:8b:c8:cd:ca:00:da:df:38:79:34:b7:
                    ad:8f:77:3a:1a:88:5e:5d:02:d1:ef:65:d9:57:77:
                    37:e2:00:9b:b7:0b:36:a1:14:70:da:91:a9:27:de:
                    38:ac:a5:41:59:42:c9:0e:e8:e3:c0:08:09:8d:88:
                    26:8c:8e:6a:ad:72:25:72:81:9f:3a:10:db:52:f5:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:15:07:83:50:F5:86:46:8B:E8:F5:6E:68:3B:98:77:FC:70:FA:48
            X509v3 Authority Key Identifier:
                keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e4:14:75:b8:4a:dd:5d:75:92:8d:3e:7c:e9:ba:5a:e8:15:
         72:a9:0c:a4:0a:58:09:89:c4:8b:39:70:d8:a6:b6:22:33:61:
         51:87:47:23:56:56:1a:c6:dc:b8:fa:e6:e6:df:5b:a5:15:84:
         5d:07:81:7c:9f:bb:48:b7:5a:a8:40:51:a6:bd:69:e2:36:4b:
         f8:ef:c3:e9:bc:ff:1f:c0:28:90:9e:e5:92:71:55:e9:db:82:
         bc:f8:87:08:f2:f4:40:67:05:58:44:d8:f8:ad:08:12:29:fe:
         c7:1d:05:78:f5:8f:b2:4c:8f:71:0a:97:d6:c6:87:6e:3c:9d:
         40:f7:e0:3e:fc:89:70:1d:b0:b0:d0:f3:3f:2a:41:ac:5e:09:
         2a:70:72:46:fe:2d:58:d1:63:8d:93:da:e7:39:cb:22:19:18:
         43:41:83:70:9a:86:a9:76:a7:45:6d:dc:32:de:9a:be:d9:63:
         94:e8:8c:cf:01:27:e8:5b:17:fc:c2:a3:d3:b8:7b:6c:3c:e8:
         69:9a:87:69:c9:88:83:6d:7b:e4:25:27:02:a2:02:d9:b6:2d:
         e6:b1:5d:57:b9:0d:25:4e:67:53:80:15:20:3a:6a:d9:c8:92:
         90:53:79:31:3e:7d:bf:33:2e:7c:a6:6f:87:ad:f3:db:37:dc:
         5d:5e:74:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:46:51 2026 by rpki-client