Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File:                     1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier:          nVyLGOvjKByqAEd+aoS0ZVZDONHF8fcg7Isems6D8p4=
Subject key identifier:   94:8A:A2:50:77:0E:90:CF:C7:06:35:D7:47:A5:E7:B4:CB:5C:CF:7C
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer:       /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial:       019FA93DA6A5D2A999F10FACD7139D4BEAF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number:          04FB
Signing time:             Tue 28 Jul 2026 15:00:17 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:17 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:17 +0000
Files and hashes:         1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: j2WqIkk0HjnQCeoSUo6t+Aj9DImupUX3n5xf7T7jMJs=)
                          2: 5Qv7t_ADQOb6Y00SIFPxywPS8ro.roa (hash: OvUzcgXdun7e7rJvnWGXK1KokOo+inejKBUGCGEtOjc=)
                          3: 8pXCuBWrEvdy2wZTlEp32tqPYW8.roa (hash: uGUL/if0f5ws0TqXiUCRr04ljVZ6Fve+sjfhpDCgGM4=)
                          4: Hl64XGbhjDhXSK_RP_lVJRGK17Q.roa (hash: jQK1etd719NMqRMk4bSxLL+vsw1/OQyKrvCRPSvnFfI=)
                          5: UC4tZ5hkJUOpAnwxabpTgyQ2EE8.roa (hash: kjmvN7g9NCX/FlWfDB0I3iBUPCm9EjnhIQSPXHhQftQ=)
                          6: j6znYu0bJRReLpFKGjBQS3zUf5Q.roa (hash: zeH1/5DXXLfFyvTDI3wxcCj9S7ygGASJokuM/q7Nwsg=)
                          7: nHHN0WPLlHYApdgpFpnFyF7FXNo.roa (hash: xucnQbWZYtMeJ0bkGPwNcpkM2rdQLkCGv8+6HH3/d1M=)
                          8: pKmHj_UwSowJL7JtZ3ZsbqaOaAw.roa (hash: sJJU0c0HzgrlO4mmoDliyfZm6hgydL4GUuwlpgThsI4=)
                          9: vL_rZ0kxCVmOArntssY4utMxZsk.roa (hash: BUFLbB2x++rtrBoQkTVqPWO2lnQoSGX2nctQt+hzHc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:a6:a5:d2:a9:99:f1:0f:ac:d7:13:9d:4b:ea:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
        Validity
            Not Before: Jul 28 15:00:17 2026 GMT
            Not After : Jul 29 15:00:17 2026 GMT
        Subject: CN=948aa250770e90cfc70635d747a5e7b4cb5ccf7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:a8:52:68:0f:2b:3e:62:a9:98:ee:af:95:
                    01:b3:dc:d0:0d:79:ff:03:27:2e:46:67:bc:d5:53:
                    67:d4:da:49:65:75:60:f1:90:cd:f2:28:43:26:43:
                    9a:29:bb:1d:f3:ee:36:3c:7a:e6:e4:52:fe:7c:f5:
                    db:dd:d0:ef:24:09:88:c7:39:17:6f:04:c8:57:94:
                    03:d0:68:eb:d7:90:27:3a:b2:ae:0b:9a:dd:56:54:
                    63:9e:a0:c1:09:0b:60:4c:af:2b:6e:bd:c3:53:e5:
                    e8:3c:d3:d8:6d:4d:14:b9:ff:36:0f:92:30:75:a7:
                    48:ad:1f:1a:9a:89:51:e6:8a:aa:32:99:43:aa:48:
                    94:2f:d1:86:6b:63:e7:67:05:9c:12:c8:fe:fd:18:
                    34:b5:eb:54:47:c7:76:e5:f1:56:e1:7c:82:9d:3b:
                    e9:7c:88:3b:43:1b:83:75:7c:02:67:13:15:f1:30:
                    2f:0c:14:10:d0:28:30:3b:94:50:54:e1:d0:26:5a:
                    22:ec:71:b7:64:63:45:aa:af:ad:fe:38:ba:51:12:
                    44:6e:57:ff:bf:7b:d7:09:e3:f0:4b:a0:4b:de:aa:
                    bb:7e:b6:7f:0d:1b:bb:5a:c7:f4:e3:71:41:f7:74:
                    95:51:d4:18:9b:0c:d5:fa:0d:b8:3e:66:57:72:ea:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8A:A2:50:77:0E:90:CF:C7:06:35:D7:47:A5:E7:B4:CB:5C:CF:7C
            X509v3 Authority Key Identifier:
                keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:35:72:49:5b:43:2e:f9:41:cf:6f:76:56:b4:9a:bb:33:46:
         98:c2:4d:23:f1:da:39:99:23:cd:c4:3b:e8:29:0d:fc:3a:d2:
         23:a5:e4:47:ee:28:6c:49:0c:4b:79:6a:25:da:44:cf:66:7a:
         7b:ee:40:7e:70:12:de:d2:da:08:c0:b2:12:bb:8e:7e:6e:df:
         fa:3b:7b:24:2f:5c:de:3b:78:4d:a2:bb:ec:4d:de:0d:7c:58:
         5e:67:97:b3:15:06:89:f2:54:a3:37:55:c6:71:a9:ae:51:c7:
         d2:73:28:e8:50:38:16:99:99:05:b3:cd:fa:2e:bf:29:32:ac:
         4e:11:e5:91:93:a0:96:2d:eb:f4:f3:9c:28:55:0d:ae:b0:c6:
         84:13:2d:9a:c8:3e:23:a1:07:3c:b0:3c:03:dc:91:e2:c3:9e:
         de:35:af:d6:09:a0:07:58:75:b7:bc:70:14:c1:cd:6d:c2:b1:
         76:e7:9c:92:ab:15:58:ca:e3:57:d1:b8:ac:93:0d:86:03:71:
         b0:a5:6b:c8:b4:50:79:83:35:1f:7c:fd:92:c3:7a:d1:b3:26:
         c5:53:dd:0d:00:bb:41:d6:da:75:b0:44:c5:5c:2c:48:81:a4:
         48:e2:fe:95:95:d2:96:80:29:b5:31:47:3e:56:9e:7a:3c:cd:
         a3:3d:07:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:03 2026 by rpki-client