Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
File:                     iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json)
Hash identifier:          RPs7QvzgCkdlvWs8REvyPEkBH4P1fTwn9wf8R2Z76j0=
Subject key identifier:   D0:A9:26:5B:1E:33:3A:1F:DC:09:42:B4:58:5C:0D:A0:7C:02:DF:2C
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Certificate issuer:       /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial:       019FA975CF1E049079B2A8BA6FADBE3AF586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 16:01:37 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:37 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:37 +0000
Files and hashes:         1: 1PQLqhoScjfBFsnVHNm0k3bCNFk.roa (hash: Vk0i8JggRVRyN9gNhJOmPHfRFdxGWfDcvajCmQ4/kDs=)
                          2: TWbCTwDnys208grtWi4L9d1lq6s.roa (hash: +ftR3wfvVv49VPzjWv+X3HJTgQfHYyU1PAP5N6+M9DY=)
                          3: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: sCh+SfXUH+/8jyrBooskfqeer0T3YgOrc4653ItiNyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:cf:1e:04:90:79:b2:a8:ba:6f:ad:be:3a:f5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
        Validity
            Not Before: Jul 28 16:01:37 2026 GMT
            Not After : Jul 29 16:01:37 2026 GMT
        Subject: CN=d0a9265b1e333a1fdc0942b4585c0da07c02df2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:5d:17:ea:2b:23:ba:25:8b:82:0e:0c:39:
                    d1:c9:64:bf:cd:fb:7a:46:5a:8b:02:c2:ee:f0:be:
                    53:b9:d5:bc:3e:f6:6c:3c:9b:3f:96:1a:c2:b8:28:
                    31:47:2f:de:bf:21:17:9a:24:12:47:ea:45:e2:e2:
                    36:1a:5b:a6:96:c6:e0:6b:29:a2:eb:13:fe:c3:40:
                    fb:75:1a:b3:ed:06:41:5f:be:d0:22:36:2e:6d:c7:
                    05:b5:d0:7d:fe:20:54:25:aa:65:1d:bc:69:8d:6c:
                    dc:11:de:dd:13:28:5d:05:9c:75:c9:6c:af:05:40:
                    7c:5e:7f:aa:b7:27:6d:b9:d3:4a:5b:f9:a7:9a:89:
                    54:fe:ce:6e:fb:68:9d:5c:2a:70:df:86:d5:60:bc:
                    51:07:1f:68:7c:66:35:f3:62:cf:f2:d2:58:74:fe:
                    78:47:db:c7:f1:28:9b:bc:6c:a6:77:50:be:76:0a:
                    c8:30:e1:c9:9a:5a:15:36:17:0f:f6:f1:28:74:f6:
                    88:e5:dc:d7:7e:b4:15:b3:06:02:51:c9:4b:89:c2:
                    22:af:c1:06:09:97:49:e3:f7:d9:ec:3e:41:5c:32:
                    27:ea:88:00:d4:e4:e4:57:16:09:d7:64:48:82:3c:
                    e9:79:c2:5b:f5:ee:c9:0b:c6:d4:02:20:c8:55:ed:
                    21:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A9:26:5B:1E:33:3A:1F:DC:09:42:B4:58:5C:0D:A0:7C:02:DF:2C
            X509v3 Authority Key Identifier:
                keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f8:43:fc:ab:76:e3:90:ff:7a:01:2d:d4:8b:46:ef:31:b9:
         1e:20:2b:08:6f:6a:2f:fa:5e:ff:d0:57:02:49:55:a8:e1:26:
         e3:a9:da:b3:ef:78:a8:ab:64:36:7d:79:59:96:93:58:c4:c2:
         45:59:58:cc:e0:8e:a4:15:68:da:dc:fa:23:56:64:10:f0:5c:
         27:b2:cc:85:48:30:c4:7b:ce:23:24:63:6e:bf:10:59:7c:02:
         29:e8:01:79:af:37:74:fd:a6:3f:f0:79:20:5b:2f:71:6b:30:
         e7:93:b4:13:6b:0a:c0:f0:a8:93:fc:27:7e:70:12:8f:ae:dc:
         ea:27:f6:16:9f:40:6c:1d:8d:be:2e:42:03:05:d5:a1:4e:01:
         98:0a:22:df:0d:f0:f2:df:0c:b3:1a:b9:ec:6d:5f:5b:2e:95:
         fb:d2:61:c5:25:e9:ac:34:9f:3e:66:ea:b2:df:15:7e:62:7b:
         48:b3:51:a3:25:7d:5e:c2:18:49:40:64:4c:f4:1b:ee:dd:dc:
         36:dd:2d:07:8f:60:43:04:57:97:09:a6:a4:40:a6:7a:ee:00:
         24:f5:fb:19:19:fe:74:6c:96:76:10:4c:23:66:d5:f0:e0:e4:
         f9:d7:7a:f0:cf:81:37:ee:3e:e2:8a:87:d6:91:4d:3b:cc:72:
         83:f9:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:51 2026 by rpki-client