Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File:                     sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier:          O6mjiHcQSQ+Xp/wzU7eWrlDo9T/ff+xqbaasmsWvxNs=
Subject key identifier:   F0:B8:6A:4C:25:1A:7E:69:8A:33:77:E7:6A:9C:05:DF:68:66:4F:2E
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer:       /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial:       019FACAC8D7C30F74786BBFC6C7D5AFC4F20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number:          0CF5
Signing time:             Wed 29 Jul 2026 07:00:17 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:17 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:17 +0000
Files and hashes:         1: 6tRNFOHlYPyCYFIHgatSgb5gCeA.roa (hash: E6/vpznSWjmg4YEWxQ9xApX1IggzL3noXqAm0pLp65E=)
                          2: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: dwaOmdXFKQJO8bIsUno/mrcSXTXSyKkKswVojBJbTn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:8d:7c:30:f7:47:86:bb:fc:6c:7d:5a:fc:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
        Validity
            Not Before: Jul 29 07:00:17 2026 GMT
            Not After : Jul 30 07:00:17 2026 GMT
        Subject: CN=f0b86a4c251a7e698a3377e76a9c05df68664f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5c:57:e5:d9:a5:a3:e2:f0:ad:fa:a8:d4:46:
                    c1:a7:b0:7b:bb:7d:41:93:0a:37:07:c6:c9:3d:24:
                    b1:cc:c9:0b:a5:fa:b1:c0:0c:82:ed:41:b4:75:ef:
                    23:0a:36:70:f2:e8:a8:9d:d5:e0:5b:20:82:c7:12:
                    22:63:2b:bd:f8:ac:32:e3:47:f2:e4:54:1b:35:3e:
                    41:c1:8a:af:ad:a1:31:06:81:21:87:da:d8:35:f2:
                    59:64:02:8c:a2:a4:66:2d:ac:c7:c4:9e:79:dd:de:
                    63:65:9e:7d:ad:cf:1c:0e:cb:8e:de:4e:56:92:b4:
                    de:6e:f3:51:16:4a:e9:e8:13:ed:54:77:04:cc:8a:
                    57:26:2b:cb:f2:5c:cc:dd:38:2b:4b:76:3a:cc:b9:
                    f5:e2:2a:79:33:9f:83:4a:c3:61:85:d9:21:a7:48:
                    dc:a5:6c:5c:89:af:19:15:4c:86:68:30:31:37:1a:
                    40:ce:ff:02:6f:1d:3d:9b:0c:5a:b8:7c:23:d8:c5:
                    dc:f2:64:22:18:17:2c:2b:5d:74:37:a1:7c:2c:5a:
                    61:80:72:7d:98:f9:24:85:c9:85:9c:bb:b9:55:a5:
                    88:b7:35:52:96:63:24:f5:20:2f:4d:74:cc:d5:b9:
                    08:22:68:36:9e:20:a2:52:be:cb:74:a9:a4:6a:17:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B8:6A:4C:25:1A:7E:69:8A:33:77:E7:6A:9C:05:DF:68:66:4F:2E
            X509v3 Authority Key Identifier:
                keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b6:2b:b6:26:0c:0d:af:c7:0e:5c:ff:aa:3b:8f:c7:56:7c:
         9d:3c:77:23:36:b6:80:ac:85:22:25:fa:d1:60:fa:21:e3:94:
         5e:a8:3f:48:a4:17:1e:29:92:31:7e:b0:a2:26:68:3b:94:bd:
         c4:76:a2:90:86:4e:1e:34:f1:d9:92:fa:e4:6c:37:01:8e:70:
         5b:33:27:f9:5a:26:15:49:b9:f3:1b:8a:8b:5d:07:ee:40:2e:
         1f:4a:99:1c:37:23:70:ab:0a:f9:a5:3a:db:79:c1:56:ed:67:
         05:cd:ba:01:5a:b7:bc:14:4b:3b:17:00:58:98:f1:ad:1f:40:
         3e:13:bf:e7:ff:51:6a:c4:57:03:5e:60:d4:f3:3a:a5:de:d1:
         fd:05:17:00:bc:9e:8b:89:72:c1:39:bd:16:5c:8f:f3:a3:8a:
         e7:63:97:40:9c:84:2f:9d:88:42:8a:25:04:0b:8e:25:e2:8f:
         6a:a8:da:76:06:9e:75:f0:32:a8:b8:c5:bb:cb:76:8a:90:4e:
         eb:a1:e1:7f:a8:bd:91:c9:99:75:db:5a:64:74:ad:23:13:51:
         0c:ed:98:b7:6c:17:f2:18:72:7e:fb:1b:1a:86:62:e6:7a:90:
         da:87:87:6b:9e:dd:63:4f:a5:bd:77:76:21:0b:d7:a4:b0:1c:
         f6:d6:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:47 2026 by rpki-client