Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File:                     9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier:          O9BDvSVTLNwJE0raFtutzjDjo0UpSmvmUpbbdVtV/4g=
Subject key identifier:   77:A2:F4:78:A2:0B:9F:D6:1F:8D:B1:10:4C:97:E5:18:3A:C9:E2:A7
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer:       /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial:       019FABD117AACC933780BA37052B55C14E11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number:          1493
Signing time:             Wed 29 Jul 2026 03:00:34 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:34 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:34 +0000
Files and hashes:         1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: Gbgp++6mpm30Iscay15J6XLE9TVHK6LqA0Op3x261Sw=)
                          2: bvCBuuEdxAUjZ43AaqObXsCRP24.roa (hash: +knVgbiUviDOgcpEQ9q1n1I2+704D2tY8YWzgF0kEqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:17:aa:cc:93:37:80:ba:37:05:2b:55:c1:4e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
        Validity
            Not Before: Jul 29 03:00:34 2026 GMT
            Not After : Jul 30 03:00:34 2026 GMT
        Subject: CN=77a2f478a20b9fd61f8db1104c97e5183ac9e2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b8:e3:49:92:68:8a:9e:d8:db:da:7a:4e:5f:
                    f6:14:17:e2:03:9a:4d:5e:8d:b5:1c:57:04:ce:9d:
                    60:59:02:99:6d:b1:0a:34:e3:0b:19:be:e2:c4:50:
                    b0:b7:99:e4:37:26:a8:ee:d5:d4:00:ad:f6:85:a9:
                    d0:89:09:15:1e:a1:f3:34:cc:30:b4:75:27:14:78:
                    d9:53:d7:7b:8d:8e:42:43:f3:f1:64:a5:db:54:d5:
                    4b:7e:69:76:0f:c5:e3:6b:23:17:87:df:3b:78:e4:
                    f1:f8:90:64:bf:3b:d4:38:4e:3d:96:af:47:d9:02:
                    54:2a:61:32:cc:83:a0:59:49:ca:2a:9b:dd:ce:75:
                    69:de:00:3e:40:a1:09:b7:3e:ec:0b:bb:f8:21:25:
                    74:97:c4:bc:18:a5:eb:34:bc:32:99:00:7a:1a:fa:
                    30:12:c5:02:a5:f6:7a:72:9f:9d:46:7c:3b:5f:67:
                    c7:8b:e9:73:6c:77:e9:7d:d7:db:6a:5b:6f:b3:31:
                    15:d1:3d:7c:ed:eb:af:3c:24:84:26:77:de:ca:2f:
                    26:85:bb:47:e3:af:b4:2d:93:c4:6c:ae:21:de:41:
                    b9:a3:12:4f:45:4d:c3:60:95:c2:12:cc:13:b0:94:
                    96:9c:32:3d:ef:0a:2c:f9:7c:d5:a8:dd:0d:19:bc:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A2:F4:78:A2:0B:9F:D6:1F:8D:B1:10:4C:97:E5:18:3A:C9:E2:A7
            X509v3 Authority Key Identifier:
                keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:01:48:8c:52:50:95:75:47:c5:4c:cf:81:0c:4e:f8:d9:8c:
         bd:ad:09:f9:aa:27:71:83:22:29:33:1c:d0:c1:0f:5e:81:58:
         67:40:b6:cf:d0:de:16:b1:09:db:d2:49:c3:ef:90:0f:0e:47:
         d4:83:e4:c7:10:30:72:ab:0f:57:95:0d:01:87:81:91:80:e5:
         ef:28:77:55:92:f3:55:0e:cf:5e:65:10:46:94:ed:61:2f:81:
         e9:53:d4:6b:6b:fa:21:ce:b6:9d:59:4b:85:d7:f8:bb:62:1e:
         a8:79:1a:e5:bd:44:e3:1f:be:9c:b5:be:ae:3b:a6:f9:6a:28:
         2c:84:9a:99:f7:db:09:a9:20:e4:54:70:fc:97:d5:39:ca:a3:
         d0:a2:78:3c:53:70:73:c3:2b:c5:2e:8a:7a:bc:ef:76:30:c5:
         8a:df:40:b2:48:da:45:29:f8:f8:59:e0:eb:aa:3b:05:33:89:
         5d:b6:6a:b2:63:e4:0e:86:50:9b:83:ca:89:08:27:76:90:e4:
         fd:90:ac:4e:41:b8:bd:1c:22:aa:6e:c5:2a:6f:f2:74:7f:62:
         51:a2:5e:82:6a:1d:3c:94:fc:a1:3e:9b:ce:67:7a:91:66:f5:
         3d:a3:d9:58:14:3f:a0:4d:3c:51:21:c2:ac:e0:4d:9c:76:a8:
         77:22:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:40:50 2026 by rpki-client