Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File:                     h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier:          zXzfmbfzb8E+DqSZ7zaajWHlrtzzAg+FZpjSMqSb+wA=
Subject key identifier:   B3:0E:44:62:67:06:44:B3:74:B2:0B:00:1F:61:E7:8D:4A:12:16:15
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer:       /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial:       019FAB99DD88BC668A6AF1C38142632C4B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number:          10C8
Signing time:             Wed 29 Jul 2026 02:00:15 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:15 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:15 +0000
Files and hashes:         1: K3q7rDAAcTkhLcTgXHyQCl5GQuI.roa (hash: XY2CV23nGfpFfkmgGkboOd40b6zMjm8v5H58JjAU0/Y=)
                          2: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: CjOVTXfhbiLWqVtz1rUy5jGCRJRhyAn/qI0RHDZyInw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:99:dd:88:bc:66:8a:6a:f1:c3:81:42:63:2c:4b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
        Validity
            Not Before: Jul 29 02:00:15 2026 GMT
            Not After : Jul 30 02:00:15 2026 GMT
        Subject: CN=b30e4462670644b374b20b001f61e78d4a121615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:c5:74:22:e2:50:fc:a3:83:f2:db:c6:ce:
                    b6:51:cb:d9:11:22:03:b7:67:11:dc:46:cf:17:54:
                    97:d1:9b:4f:10:85:de:a8:6d:c7:e8:2b:e7:86:90:
                    47:3d:ae:2e:34:cd:30:a5:e0:b5:f9:f0:b6:07:d5:
                    f6:4c:fe:f7:fd:19:85:c2:f3:5e:31:fb:c6:3c:99:
                    87:f9:f3:96:97:78:a3:7c:26:0c:6e:15:cd:99:fb:
                    e3:3b:39:b1:54:6f:0d:76:4a:62:79:62:f3:fa:c4:
                    fc:28:b7:17:e7:70:0d:ca:e3:bc:3b:47:c7:74:de:
                    06:ea:f5:78:55:29:e7:ad:98:51:cb:0c:3d:3f:75:
                    a4:3c:eb:ac:5f:6f:61:c4:7e:a3:d8:7d:2a:d8:a8:
                    e1:2f:b3:98:2e:e5:3a:a5:7e:7a:24:08:a5:15:e6:
                    ac:71:ea:22:0f:03:a6:2d:ba:48:cc:6a:e3:7c:ec:
                    a5:87:e2:d4:d6:95:f6:34:b2:c0:cd:50:e5:b4:55:
                    34:9a:48:38:d7:4a:92:46:2f:cf:11:aa:bf:57:2f:
                    7d:9f:c7:74:3f:f9:17:ed:90:89:c8:5c:cc:f1:2b:
                    d3:df:ef:36:83:af:30:a6:5b:7f:32:ab:83:30:f2:
                    5b:62:1d:d2:f3:80:37:65:0a:03:44:27:bb:de:40:
                    03:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0E:44:62:67:06:44:B3:74:B2:0B:00:1F:61:E7:8D:4A:12:16:15
            X509v3 Authority Key Identifier:
                keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:e1:ac:b5:01:3f:cc:cd:c2:93:0e:62:39:4d:b8:00:43:
         18:60:72:51:c0:04:65:0c:3b:a1:4d:30:e5:e7:df:9c:b0:65:
         3a:e3:84:2f:a0:1e:8e:cd:91:9c:35:4a:d9:43:e3:d4:54:0c:
         d6:71:0d:3c:95:60:6b:a5:08:05:d7:d2:d6:fb:ed:83:9e:d5:
         48:52:13:45:af:83:aa:15:ae:1c:ee:96:65:5d:dc:1f:19:f5:
         52:b0:5b:4c:b3:98:9f:38:8b:8c:71:4e:ab:c0:1b:3b:9a:9a:
         e4:7b:c1:d8:fd:6a:90:91:b0:d3:43:37:60:df:8a:16:78:2d:
         e3:7b:19:9d:af:4a:09:91:bc:f6:85:36:13:78:56:ef:21:1e:
         c5:f9:b5:63:9f:77:6e:69:44:cd:ab:02:aa:a8:0f:8d:74:c9:
         03:4a:6d:f2:9e:93:bc:44:cd:65:fd:37:5b:75:1d:d9:a4:a5:
         4a:86:90:84:b8:dd:a8:b8:57:92:f6:4c:77:0d:ea:c6:04:b8:
         27:cd:f5:24:99:05:ec:e0:9b:ce:7a:dc:e4:a7:a5:d0:8b:f9:
         51:56:14:c2:ec:1d:1d:d1:43:e6:12:6a:5c:ce:f7:0f:6c:b9:
         81:d8:58:03:1f:0a:15:2f:ff:23:28:d7:62:a0:46:52:f5:9e:
         d3:0d:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:34 2026 by rpki-client