Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File:                     x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier:          YrG5asBExNTybjoyHBsOh1wjtakxyOUO2qjo9rmDQGU=
Subject key identifier:   7C:4E:A9:69:52:1E:09:A5:80:2B:49:CB:E5:38:EA:12:DB:B0:89:26
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer:       /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial:       019FAA888F3BD086E11A5E695A122A476757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number:          16E6
Signing time:             Tue 28 Jul 2026 21:01:43 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:43 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:43 +0000
Files and hashes:         1: INecSgDNWHvp6sU-WpJihfiFh4s.roa (hash: PMEEstkE23N+oMl4zNZYpTJcYs3rPhZEK/XuV630Gno=)
                          2: f25A04rpXtD2_br_jQIVVfQ8etM.roa (hash: iSZljQkRURevE7K28zcSzw6RdndhY9rvXLjgdmSdTqY=)
                          3: ggUa6LfIuLLVR5P1Qr24VmoyZso.roa (hash: rdmuXEokTMYqrj4xUmy2EZVO5gA++Wv14CxkDlRPOSQ=)
                          4: gnB4DwAgCjyQcWFzJEdE7GWr73o.roa (hash: HW/BGej/dJUcVDYCwLRVJHa3/FSej9vAGH4VzbSF+To=)
                          5: tmpjXkdMeErzXzSF-Knv6lEK4MM.roa (hash: 59w580G8bYKyMW9mWYISKVPkaSir7aOf2hHeB7WsN6s=)
                          6: w_ptOPR66g-2hUDEWzrs74clcAE.roa (hash: 6vuuqzAxRKqIgwnNrTyFV+eVf/OZTeXgi5JQBVeXXCI=)
                          7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: 0WBphtjPMnVhoYfQk55hDb+KaLS/SAhEt0fTbgRrV4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:8f:3b:d0:86:e1:1a:5e:69:5a:12:2a:47:67:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
        Validity
            Not Before: Jul 28 21:01:43 2026 GMT
            Not After : Jul 29 21:01:43 2026 GMT
        Subject: CN=7c4ea969521e09a5802b49cbe538ea12dbb08926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:4e:0b:ea:95:65:ba:3e:b3:20:8a:f6:27:
                    c7:35:ec:21:19:fa:13:62:67:52:ed:91:4f:6b:7a:
                    69:40:07:73:12:34:7f:e6:e7:7c:7c:04:b2:79:03:
                    b3:cf:ef:34:41:0e:45:99:11:0d:17:1f:ca:2d:19:
                    2a:09:76:d8:2a:24:0d:59:ca:94:b4:01:73:b7:b8:
                    34:b0:72:64:fd:ee:77:b4:22:f9:a4:bd:e3:c6:d9:
                    2e:03:ff:97:d5:7c:e8:8a:78:e1:6f:05:4f:2b:ac:
                    11:3f:e6:e9:ba:82:d9:43:1f:1e:09:ff:0d:81:31:
                    7c:e0:56:9a:79:14:51:d7:66:1e:38:c5:8b:78:8c:
                    f6:50:3c:64:6b:8b:c3:00:e9:06:b8:9c:4c:20:97:
                    39:29:27:17:56:fe:9d:44:1a:72:e0:44:c5:65:d0:
                    a4:d9:42:0b:82:8c:56:b9:dc:2f:ee:4c:a4:db:4a:
                    21:28:88:6b:b3:4b:46:3f:6a:15:d5:a3:18:f4:22:
                    af:8a:7b:fb:ac:c6:6a:30:9e:71:4f:ed:d5:2b:b2:
                    ab:4b:65:92:25:91:b3:99:b4:8b:99:80:20:a1:4c:
                    3f:ab:69:19:3d:72:8f:69:de:58:fb:31:7e:2e:4a:
                    91:50:84:42:49:23:84:03:95:7d:ac:9e:e9:2d:3d:
                    fe:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4E:A9:69:52:1E:09:A5:80:2B:49:CB:E5:38:EA:12:DB:B0:89:26
            X509v3 Authority Key Identifier:
                keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2b:1a:36:70:62:18:f6:a9:ef:da:12:72:66:03:a3:9d:bf:
         16:9c:70:1c:1b:2e:12:8a:9f:5f:26:6e:ff:b3:41:b9:33:b9:
         e5:96:8f:1e:ed:47:01:45:74:44:70:ef:a5:1c:0c:a3:eb:c7:
         f0:0f:d6:d5:d8:0d:ba:1f:dc:db:97:32:5f:04:d3:4d:b2:a0:
         7a:b5:7f:de:59:ec:b1:ac:6e:bd:5a:72:48:a8:65:58:19:fa:
         2d:4d:3a:27:70:eb:93:59:91:65:6b:ef:f8:ec:48:7e:11:2c:
         40:01:04:6b:08:4f:05:41:92:a6:6a:d8:16:3c:76:68:23:5f:
         5b:40:32:a6:6e:70:9f:c6:0a:e8:9f:e1:ee:d8:bf:bd:8a:be:
         64:07:9c:39:01:19:1c:6c:12:59:f1:de:ad:24:95:c5:47:58:
         e9:2c:b2:ad:fa:11:35:a1:24:a4:d1:1d:7e:40:05:bb:c0:6a:
         ff:42:92:80:53:a6:5c:d8:0e:a4:4c:39:9a:cb:08:51:99:84:
         57:3a:b6:7e:47:f5:92:9b:8a:b8:20:8b:28:57:4a:f8:e4:94:
         8a:b3:9d:2b:ca:ce:38:3d:92:0c:3e:f4:9f:3e:0b:23:44:20:
         11:bf:5e:4e:a7:f0:83:69:f0:fc:23:f8:d3:df:dd:96:93:24:
         82:3c:6c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:15:10 2026 by rpki-client