Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File:                     0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier:          g+7i65E7LVNSXp2n2sjtE8p7m4OoVy/sVdlZhYzjy3o=
Subject key identifier:   A2:65:53:7C:FD:B5:D0:D8:80:6C:7A:97:C8:B3:99:B2:82:A3:74:6E
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer:       /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial:       019FA8CFBEAAB903DA04087BAF63BF6CBAE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number:          0B8E
Signing time:             Tue 28 Jul 2026 13:00:14 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:14 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:14 +0000
Files and hashes:         1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: ONIIWvuiV3CxtzOrslLyi4C1M1AsrckyChbCwpZHG2A=)
                          2: 6jB2jMiHx3sCwDqQfo8bHL7xj1o.roa (hash: c6SeZtcLZoq1VVZbkWGju8/PVQHZ1NT6ScCfBSc3zdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:be:aa:b9:03:da:04:08:7b:af:63:bf:6c:ba:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
        Validity
            Not Before: Jul 28 13:00:14 2026 GMT
            Not After : Jul 29 13:00:14 2026 GMT
        Subject: CN=a265537cfdb5d0d8806c7a97c8b399b282a3746e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:d9:38:18:64:4c:84:7b:29:62:e0:03:70:
                    d5:cc:a2:a9:1e:02:56:2d:c5:ff:95:e0:0e:84:9b:
                    38:14:ad:28:1d:0e:af:99:19:fc:04:89:86:d7:ce:
                    ab:16:b1:bc:32:25:08:31:5e:6b:30:b8:65:a1:10:
                    f4:99:3f:b2:e5:84:70:b5:ff:1c:5c:cb:75:73:6e:
                    6c:2b:12:b7:c0:bc:e9:4f:e7:f1:a5:12:a4:0c:a3:
                    09:73:ad:3a:19:dc:dd:c5:91:a0:ff:e5:b3:f2:6e:
                    28:6c:82:e2:1e:6d:41:ee:8b:f3:1c:7d:96:9a:fb:
                    fa:90:2a:9c:33:3e:d9:03:84:79:53:58:a9:14:94:
                    aa:65:b8:47:11:73:e6:e0:4c:52:1e:c3:06:1e:03:
                    61:b2:b5:0a:7b:00:14:03:2b:a6:a8:3e:0a:4f:7e:
                    db:08:d2:87:27:37:d6:88:af:fc:5b:ee:77:00:f1:
                    d8:70:0c:5c:9f:5c:14:bf:80:af:7a:35:05:de:81:
                    ef:ff:53:d0:00:e8:9a:f7:bf:ac:35:3d:cd:83:55:
                    3c:b2:90:05:b3:68:f2:c3:a8:8c:20:59:8e:19:06:
                    be:78:a2:71:9a:18:16:3f:8d:13:85:1d:93:50:f3:
                    47:91:44:8e:75:b0:cc:1b:f7:44:03:88:8c:fa:f1:
                    88:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:65:53:7C:FD:B5:D0:D8:80:6C:7A:97:C8:B3:99:B2:82:A3:74:6E
            X509v3 Authority Key Identifier:
                keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:a0:52:e9:14:77:4e:c2:2a:97:b6:c6:14:5b:55:cb:33:
         76:88:39:fb:24:62:c3:66:49:13:69:3f:07:d8:d0:1c:86:cc:
         99:50:d9:8f:59:99:83:51:1d:88:8c:1b:43:87:a8:0a:79:a6:
         af:47:85:da:40:a0:25:07:5e:4c:75:13:ad:81:fd:be:4d:98:
         27:6d:9c:40:80:41:5f:85:d0:32:95:1d:9e:c7:89:27:2e:0d:
         17:4b:eb:22:af:96:7c:da:b1:bd:1c:6c:49:18:45:a5:53:50:
         9c:f4:fc:e9:ec:3f:33:76:29:0d:37:3b:58:8e:8d:a4:15:13:
         b3:f5:9c:39:b7:ba:22:89:d5:e6:d0:fb:19:ff:8c:af:3e:b3:
         41:26:d5:a4:c4:ed:fe:37:ba:1f:6e:95:36:af:92:af:b2:5a:
         0f:27:7a:8c:bc:20:10:6b:54:b8:9a:0f:6a:bf:e2:69:da:90:
         cd:f0:19:f8:95:ce:1a:33:98:53:98:06:82:af:24:c3:89:ad:
         08:66:a0:48:b4:33:df:d1:0f:ea:5e:63:ed:d7:f6:70:6a:6a:
         b0:96:18:1c:2a:08:d7:63:1a:40:0a:f7:b5:35:5a:83:65:3a:
         c2:5a:f0:b5:ef:9a:6b:fb:76:9d:38:85:35:64:fb:91:df:a7:
         e4:6f:da:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:47 2026 by rpki-client