Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File:                     dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier:          t46otvv61MclAbIEz/cUJpf8rUeqN/zOCFc+BEnrK9A=
Subject key identifier:   58:57:49:65:1D:8E:FB:E9:62:E3:4E:6F:2A:05:2F:D6:72:46:28:B5
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer:       /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial:       019FAAF58539BBEB99459CCD8837B6F3A483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number:          1477
Signing time:             Tue 28 Jul 2026 23:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:44 +0000
Files and hashes:         1: 2snz2cHxMIqDrmWpyQdj5PDHUMA.roa (hash: PDvyyYGhi1AmhDsFwKXgGPleS0592sAJ/29+42mhJtU=)
                          2: ck9fph3pnGBfD51d6ySumkAZbWw.roa (hash: cePM5hzSAL7gxgiyzP8i8tA4JspwG2EEsvqQZVUTIU0=)
                          3: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: aXEfr3xiwENq3rl+GWlX3fhRiMTIlGAD1wjPTO1l4Ss=)
                          4: zsYC7eTs7CKxZQzMiKBYtW02NU4.roa (hash: zfsiqu/7VESSfUyUGFpkJ4f5HeLFmZSKqmckIw2soSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:85:39:bb:eb:99:45:9c:cd:88:37:b6:f3:a4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
        Validity
            Not Before: Jul 28 23:00:44 2026 GMT
            Not After : Jul 29 23:00:44 2026 GMT
        Subject: CN=585749651d8efbe962e34e6f2a052fd6724628b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:d1:41:cf:48:7e:a4:50:87:47:c6:fe:3b:
                    15:86:37:de:5a:6b:2b:7a:05:70:29:14:fd:a1:27:
                    06:8f:53:59:29:fb:d8:96:25:db:a2:42:10:f7:07:
                    1e:71:79:61:1a:22:42:7e:21:22:ac:ee:be:21:33:
                    6e:fc:9a:46:e0:72:ab:9c:e3:06:86:d2:9f:de:e4:
                    a1:c6:53:5a:c8:13:d3:ef:4b:74:83:18:05:1d:31:
                    15:4d:d0:08:6e:21:ed:67:74:5c:02:94:02:fb:fc:
                    f7:38:38:37:5a:1a:8a:92:c1:b6:60:c5:21:86:eb:
                    5c:ff:15:62:fe:c8:73:c8:c6:d1:3d:88:bf:9b:02:
                    a1:e5:38:49:58:8f:71:1e:b0:2e:e2:f3:d0:6d:be:
                    6d:69:c7:3b:00:a6:d5:fb:da:bd:91:28:ee:0c:ea:
                    61:51:3f:a2:b0:02:42:57:08:e5:62:4e:cb:d4:7a:
                    4c:1b:6c:ca:d2:ec:16:41:06:6e:e4:18:ce:c6:f0:
                    cf:64:0c:38:51:73:73:94:cb:6a:b2:db:d1:ce:99:
                    ea:3d:98:ed:d1:d0:28:1a:d2:ea:d0:56:b7:46:d2:
                    a4:1e:a4:eb:65:65:0d:30:19:60:e4:07:47:bd:81:
                    90:2c:f9:24:db:cd:20:5d:c1:a2:37:79:72:72:46:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:57:49:65:1D:8E:FB:E9:62:E3:4E:6F:2A:05:2F:D6:72:46:28:B5
            X509v3 Authority Key Identifier:
                keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:36:70:f5:cc:bf:b8:67:13:00:45:d3:0a:c4:6d:9b:6c:62:
         fd:a9:1e:87:b9:78:8c:50:75:8b:72:2d:df:b3:1f:cb:24:0d:
         75:29:af:fb:6b:83:d8:35:a9:74:98:0a:34:72:f2:2c:1e:e2:
         2c:a5:15:e4:95:8e:84:e6:68:ac:1c:9f:c3:58:c1:68:88:0e:
         a2:07:e6:17:67:38:b7:01:5b:c5:d4:ee:58:83:af:fa:b3:2a:
         a5:90:5e:3d:38:62:4c:b2:98:b9:01:ae:ec:77:71:32:50:fd:
         63:7b:5c:e4:6e:60:e5:27:80:4e:93:f6:4c:cd:e3:ac:1e:4c:
         83:20:fe:ca:f5:cf:1d:0f:68:34:78:6d:00:16:89:7c:eb:38:
         71:95:17:80:d8:76:11:da:a4:4b:a6:69:d3:45:b1:26:e6:f5:
         65:3f:b0:85:e8:09:1c:c7:24:fe:10:e7:00:70:c0:f7:6c:48:
         bf:6a:ac:59:b8:9d:da:10:b7:bb:6b:7c:43:8e:e7:2e:ff:d3:
         15:37:67:5a:77:37:91:45:1e:74:75:84:ee:61:84:51:c7:9c:
         0f:bd:28:2c:d1:51:7e:ff:1a:05:22:11:80:8c:bc:37:61:36:
         26:bf:c9:c5:32:2a:c6:71:43:07:79:52:c2:2a:3b:38:73:78:
         73:2a:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:04 2026 by rpki-client