Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File:                     v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier:          XXGPbOg0IQarjS6XEyNiPK7o4RkE0m5ReqH2N9Es3mw=
Subject key identifier:   E0:F5:A7:F2:2C:1C:77:92:47:55:E8:37:94:6C:46:80:0E:4C:E1:B9
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer:       /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial:       019FA975A4BF74663BE7CE9B592BCFA83C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number:          06CC
Signing time:             Tue 28 Jul 2026 16:01:27 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:27 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:27 +0000
Files and hashes:         1: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: NS/A2tAVmpe2dUbESuscCHmWrz9k5obSQmse/mEfAg4=)
                          2: vAouvOE7JSaMC475TpDqm8JvBho.roa (hash: hrbVWv0InqnmWPgkOG3ics28eJAV30J6nL+Bc/a8QUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:a4:bf:74:66:3b:e7:ce:9b:59:2b:cf:a8:3c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
        Validity
            Not Before: Jul 28 16:01:27 2026 GMT
            Not After : Jul 29 16:01:27 2026 GMT
        Subject: CN=e0f5a7f22c1c77924755e837946c46800e4ce1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:5c:e9:45:71:d5:58:a5:59:ce:c4:3a:c5:
                    7f:71:9e:35:3c:b6:ca:c0:02:99:6b:5b:ea:c9:a2:
                    40:56:e6:f8:ef:c1:c0:76:e8:20:97:a7:ea:7a:d1:
                    f9:31:c7:2c:ac:34:36:4c:3a:4c:1a:e9:d9:af:2d:
                    2c:35:30:f2:d7:73:7c:e6:69:24:d3:7c:62:3d:9e:
                    c6:93:66:06:3b:04:23:fd:75:12:ae:79:13:39:9d:
                    17:78:59:e1:0b:0a:da:ca:2a:62:79:9c:f6:ea:44:
                    f8:e2:0b:52:5a:28:cf:56:22:0e:c4:18:f7:53:f9:
                    31:db:17:f6:97:65:ea:d2:8f:ee:17:f0:4e:19:77:
                    72:57:61:59:a9:e3:f7:4a:9e:8e:fc:d5:dd:a7:1b:
                    03:25:92:60:82:6e:48:35:19:2d:a9:40:53:78:c9:
                    8e:b1:c3:81:d9:f1:24:d8:79:10:cf:02:56:70:a8:
                    6f:99:66:17:a6:e8:c5:2a:94:ed:7f:15:c9:18:59:
                    34:69:23:b6:8b:6c:1a:a5:b1:e9:4b:bb:6a:1b:da:
                    3e:8b:51:1c:12:b7:92:c0:16:26:90:69:bd:40:6e:
                    41:3f:24:97:3d:ec:db:dc:e8:4c:69:49:4d:2b:e3:
                    eb:b5:f3:ea:34:01:e2:11:7c:03:ee:bf:4c:b5:7e:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F5:A7:F2:2C:1C:77:92:47:55:E8:37:94:6C:46:80:0E:4C:E1:B9
            X509v3 Authority Key Identifier:
                keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:56:db:df:52:4c:6a:03:6e:db:3d:ab:bb:7a:67:fe:f9:8e:
         05:da:f0:7d:80:05:63:ae:a0:0c:48:a0:66:c6:a0:ac:a7:04:
         8b:b3:7c:52:06:ef:f3:c3:70:fa:a5:49:12:bb:46:d5:7f:fd:
         33:2c:aa:51:d0:07:65:15:9a:4f:a3:84:5e:7c:b9:ab:28:03:
         29:59:6e:5c:c4:b8:8e:22:c5:0a:f5:c1:31:f7:54:91:ba:36:
         ad:40:cb:25:bf:4b:b0:dd:fa:cf:5c:77:a4:a1:af:b6:f3:04:
         cc:79:6c:ab:a2:15:58:e4:de:37:98:8e:cf:f3:c1:40:bb:23:
         77:0f:32:b3:8c:70:c0:c9:e1:4c:24:06:77:2b:f5:b1:c1:93:
         7d:49:cc:a2:cd:4a:8a:2a:df:17:ba:90:2e:02:83:7d:ed:ee:
         46:a7:1b:61:4c:19:e4:e7:53:9b:60:85:7f:dd:bc:85:8c:7a:
         fd:d4:52:0a:cd:e1:d7:71:b8:23:0d:c8:3c:18:a0:07:30:d8:
         e6:44:b7:fe:6f:9e:24:c0:e7:74:72:99:84:e0:d2:f0:f7:61:
         c9:94:90:24:88:e5:a8:ed:7d:4b:8b:2d:b4:88:88:4d:09:bb:
         61:e2:16:bf:f4:fc:18:86:c6:14:c4:c9:94:59:68:3e:29:ae:
         f5:b1:d3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:22 2026 by rpki-client