Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File:                     v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier:          rC/sQAlqpP2krIVV70y7WfIHUhOCJH8o8uAAIyRas4E=
Subject key identifier:   36:66:33:50:17:2F:A2:BC:7C:48:1A:F6:24:AA:6A:80:67:F4:C9:14
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer:       /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial:       019FACE40DA2E62E2C5EEE2CC31B321B9E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 08:00:54 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:54 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:54 +0000
Files and hashes:         1: 33KpGlS_VtYMS4VxaCOKuIoKRIU.roa (hash: PycRk9WWt2oF1w6VPqOesZM2Iyc5sLWnv91I0/vqfTA=)
                          2: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: SMtNfAWqji8fKY7NOxLLOAbLYRxmRFq+o9rT+G9hfJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:0d:a2:e6:2e:2c:5e:ee:2c:c3:1b:32:1b:9e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
        Validity
            Not Before: Jul 29 08:00:54 2026 GMT
            Not After : Jul 30 08:00:54 2026 GMT
        Subject: CN=36663350172fa2bc7c481af624aa6a8067f4c914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:36:07:b3:d1:14:a8:f8:e6:86:80:ce:2e:5d:
                    43:7a:f6:ca:a6:38:b5:2d:5d:22:28:4a:64:bc:b3:
                    9b:7b:c1:06:15:c3:6d:93:50:5c:40:e7:8f:1d:35:
                    c8:db:9b:3d:ea:06:65:d9:b7:50:8c:a2:11:07:55:
                    3c:64:6f:6f:25:0d:dc:5d:2a:a1:83:7e:7e:16:67:
                    e8:24:64:af:c3:bc:bb:98:16:81:7b:88:9b:b6:5f:
                    ee:3b:9e:7c:e0:85:92:50:1f:65:c6:99:5f:10:fa:
                    1c:d6:ce:bf:c9:f1:50:74:e2:ca:c1:33:47:85:68:
                    c8:06:c2:b0:8e:84:ec:3e:cf:8e:8e:7f:37:a0:93:
                    7f:a7:45:e8:04:07:3f:70:1b:02:49:4d:e7:11:a9:
                    b7:f2:46:4e:79:b3:5b:90:a8:ed:a2:65:f7:09:ea:
                    af:ea:ef:6b:e5:f1:33:be:d6:60:46:8a:28:d3:1c:
                    28:5f:31:22:89:21:45:4d:06:d2:4e:e8:4c:fc:e9:
                    d3:b9:44:5f:13:7a:1c:e5:18:a3:35:f3:eb:15:00:
                    b5:e9:fa:d6:c2:c3:74:11:42:ac:54:6c:b9:7c:dc:
                    23:d5:79:64:1e:bf:b0:3f:7b:a6:93:7a:65:6c:c9:
                    2c:f9:d3:89:bf:50:8d:37:e7:a2:74:68:26:d6:fd:
                    f5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:66:33:50:17:2F:A2:BC:7C:48:1A:F6:24:AA:6A:80:67:F4:C9:14
            X509v3 Authority Key Identifier:
                keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:14:8f:af:15:88:1d:00:ce:30:14:52:6a:9a:f6:74:30:5f:
         f9:96:40:a4:ad:36:58:88:18:84:aa:9d:59:38:60:82:0f:f2:
         cc:9b:7f:bb:41:fb:d8:cf:af:bc:de:8a:99:6e:f0:93:24:35:
         26:bd:a9:60:7e:c6:3b:b2:4f:01:e1:20:b3:b2:50:65:ef:70:
         12:76:73:50:31:22:e0:e7:56:ee:5e:00:29:af:de:74:34:77:
         64:26:5d:83:3a:8e:29:40:f9:0c:ab:f7:69:73:75:1d:f0:76:
         42:ec:26:da:87:80:27:98:32:1c:87:ca:cc:7c:fd:1e:f8:40:
         f0:91:3b:1f:91:17:dd:62:b7:21:42:62:3b:ab:bb:c1:8d:3d:
         73:c0:1e:7e:2a:77:00:41:0c:a3:c5:f7:c6:99:95:16:88:ab:
         9c:1a:a0:b2:dc:40:b5:48:db:89:61:6d:4e:55:61:3c:d2:16:
         b2:a5:ce:06:aa:db:2a:e0:fd:5f:b8:67:79:80:4e:81:39:25:
         ec:a4:9a:60:16:ca:97:67:4f:90:e5:8b:52:d1:a1:52:8c:fc:
         39:0e:3d:ba:a4:28:27:5e:f2:3d:71:73:78:9d:c2:af:9a:41:
         37:5f:1b:97:8a:d3:eb:2c:af:4f:36:de:6f:d9:8e:92:ee:a1:
         3a:c3:49:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:29:39 2026 by rpki-client