Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
File:                     jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json)
Hash identifier:          wjwUZEQeXAXf0rQLIG8Mv156h1mfGD2zMPOGxy2ZZl4=
Subject key identifier:   4E:32:E8:61:8D:6A:FB:14:AF:97:FA:D9:07:25:6E:19:92:3C:BA:88
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Certificate issuer:       /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial:       019FAB63F1C5BA90F7D4CAEBC8650AD52796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
Manifest number:          03F7
Signing time:             Wed 29 Jul 2026 01:01:21 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:21 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:21 +0000
Files and hashes:         1: U6fyPIg5ovdf3i2qfPC2WuuXRmU.roa (hash: 51JfirD5ph0Mlaqz0ZFat9LDvr0NCB5fGDpKtCYppz0=)
                          2: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: giS6S+4UWAtynb1AMSiHb8UIII+axLZU3aL1I/dAEGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:f1:c5:ba:90:f7:d4:ca:eb:c8:65:0a:d5:27:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
        Validity
            Not Before: Jul 29 01:01:21 2026 GMT
            Not After : Jul 30 01:01:21 2026 GMT
        Subject: CN=4e32e8618d6afb14af97fad907256e19923cba88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b4:43:45:74:93:d5:69:ca:20:13:96:e0:61:
                    4f:fc:13:75:27:4e:60:a1:8b:f1:95:dd:8a:58:16:
                    b7:73:0b:73:36:f0:0f:45:7a:90:74:b8:67:73:d0:
                    58:85:3b:ad:98:0b:9a:19:1d:20:e3:90:e2:a8:75:
                    d3:db:48:45:57:fa:09:50:59:d7:b1:39:30:c8:6e:
                    28:80:31:15:b8:8b:61:cb:39:2e:85:57:cd:a8:65:
                    c1:23:56:9c:ca:53:09:a1:94:ca:8b:0a:28:21:83:
                    2f:34:1c:2e:ed:2c:9b:56:b1:d5:59:76:b3:8c:32:
                    90:71:1b:3f:a7:77:36:11:86:bc:1e:f6:c8:66:6f:
                    f1:ad:67:c4:9c:8d:7c:bf:04:b5:68:dc:da:0e:87:
                    b0:4b:65:b7:8e:bc:42:fc:ec:aa:ce:45:07:97:c3:
                    13:b6:7b:ba:7e:86:a6:55:39:02:e8:ca:bb:53:d7:
                    df:7a:f4:85:f6:a0:99:d2:41:fa:13:bd:ca:bd:51:
                    84:b6:48:d5:2e:bd:48:dc:cb:d2:41:f8:e3:84:34:
                    f6:e5:fb:6c:01:d5:c5:d0:0b:b4:6b:14:a8:49:ed:
                    d1:ad:56:29:da:38:7e:a8:7a:33:5d:4b:94:3e:4d:
                    64:6b:40:a1:ca:f9:90:7c:c9:2a:e1:63:cd:d5:2b:
                    00:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:32:E8:61:8D:6A:FB:14:AF:97:FA:D9:07:25:6E:19:92:3C:BA:88
            X509v3 Authority Key Identifier:
                keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:17:a9:4a:d0:ec:41:fa:d7:a2:2b:ba:6a:b0:cf:19:2f:90:
         cd:3d:77:7e:95:6e:75:a6:bd:9b:50:9f:03:a4:86:62:3d:ab:
         50:25:02:e4:85:60:e0:16:0d:ef:8a:a3:1d:df:d2:d3:fa:d1:
         82:d9:a2:e3:df:3f:f3:98:2a:5c:f3:6e:fb:28:74:11:31:f8:
         60:fc:e9:f4:1c:bb:d8:bd:c6:ff:44:8d:e8:62:7b:b3:2c:75:
         a4:3c:d9:ce:4c:76:ea:ad:a5:bf:81:f0:0c:9c:9d:f2:b5:dd:
         73:75:29:94:bf:06:48:13:5a:01:76:c0:10:1a:ac:8a:8a:24:
         84:39:71:da:aa:f4:59:92:65:03:18:d0:e8:28:bb:e7:eb:d6:
         42:fb:7f:43:c8:29:d8:d7:c2:bd:3f:80:9b:46:b6:e5:76:13:
         ac:13:61:17:12:dd:84:1f:2d:11:66:67:6a:1b:17:bb:8e:3a:
         85:62:84:27:f9:2f:d0:57:4c:da:93:9b:32:f5:9d:58:39:74:
         b8:70:ef:69:5d:a1:41:59:fe:f7:39:60:69:43:6f:a8:1c:67:
         de:b8:14:8f:c0:fb:12:d8:93:13:94:f2:82:4a:6e:b7:c8:1f:
         ee:6c:44:9c:5c:e1:78:a8:20:84:82:ff:3f:7c:0a:5d:fb:58:
         15:be:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:06 2026 by rpki-client