Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
File:                     f6gWozONMnQc1P_49J3bLMg4_cU.mft (raw, json)
Hash identifier:          A3oWqc0DSFHY9fKDsTHMyw9xzLAoI+09GpvfZBsUFZc=
Subject key identifier:   40:9C:CA:70:44:D0:9D:81:1D:75:81:D3:6C:75:68:CA:63:73:E3:09
Authority key identifier: 7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5
Certificate issuer:       /CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
Certificate serial:       019FADF6F7910ABF4391535ECBBE7A07F52E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
Manifest number:          0745
Signing time:             Wed 29 Jul 2026 13:01:11 +0000
Manifest this update:     Wed 29 Jul 2026 13:01:11 +0000
Manifest next update:     Thu 30 Jul 2026 13:01:11 +0000
Files and hashes:         1: JXA8-jGbC4K_XrJLF-jKm9_Urkk.roa (hash: tDVb3RwyJVNSMR8JJRmNxAV5uGwYhy7h8q3pBfOZ3t8=)
                          2: f6gWozONMnQc1P_49J3bLMg4_cU.crl (hash: vmbmur2/bLBcKQRx+dLmzwQwu9N10NHD4vhTKLmhcUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:f6:f7:91:0a:bf:43:91:53:5e:cb:be:7a:07:f5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
        Validity
            Not Before: Jul 29 13:01:11 2026 GMT
            Not After : Jul 30 13:01:11 2026 GMT
        Subject: CN=409cca7044d09d811d7581d36c7568ca6373e309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:5b:f1:72:9f:7b:bb:1a:3e:f8:59:88:7e:
                    ba:65:26:43:f3:78:53:f0:68:68:34:f8:9b:8c:c8:
                    e1:e2:a6:3d:e0:3e:56:75:8e:28:db:2a:2c:a5:59:
                    23:e0:fe:d5:00:9b:94:f7:82:22:35:97:d9:fe:cb:
                    04:54:52:69:bd:62:ca:35:72:97:e7:35:66:8e:af:
                    39:38:87:e9:28:cf:b5:50:26:7d:ca:5f:4e:09:68:
                    82:4e:3e:40:18:33:27:76:72:73:40:db:47:1a:e7:
                    0b:1f:bb:f0:e3:c1:1f:8d:83:8f:72:64:d3:4a:e0:
                    59:7d:fc:92:af:27:a5:62:7f:1e:73:bb:fa:d4:e1:
                    01:ab:8e:6a:b2:04:51:02:89:ea:46:bb:32:7f:b6:
                    96:e2:6f:c6:43:f6:c8:ec:cc:00:f6:c8:3f:69:c2:
                    49:57:55:72:2b:5e:33:c3:a1:9f:04:22:33:5e:2a:
                    af:ea:19:38:e0:a0:2e:2b:85:ed:62:c9:a3:82:c7:
                    dd:ac:39:8b:7e:4b:09:26:b7:69:47:dd:1c:59:bb:
                    ed:3d:76:56:de:5e:a4:ea:7f:a1:e9:9b:26:00:e1:
                    85:2a:49:be:83:de:eb:b5:cc:74:19:1b:e6:e7:0d:
                    38:8d:11:ea:15:d2:a9:92:95:3a:16:22:cd:91:42:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9C:CA:70:44:D0:9D:81:1D:75:81:D3:6C:75:68:CA:63:73:E3:09
            X509v3 Authority Key Identifier:
                keyid:7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:87:f4:7c:83:5e:59:e0:05:e7:94:f5:a4:d1:90:b8:83:f1:
         4e:c8:b3:0a:09:35:94:c0:d1:22:0e:b2:26:b3:b0:89:f3:c0:
         a2:b2:67:28:c0:ff:44:14:c7:3f:70:bd:1b:fe:1f:3b:7b:46:
         e9:6a:35:a6:a8:48:aa:2e:48:c4:dc:64:63:c4:26:24:2d:6c:
         a7:1e:35:20:e6:12:44:c9:90:46:c7:ed:32:c4:b7:fc:92:7b:
         0f:28:5c:89:55:6b:4e:75:17:38:d3:66:9c:00:28:a2:08:5f:
         0b:85:7c:6d:90:70:51:06:85:e4:6d:b8:a6:9b:48:a9:71:ec:
         21:47:31:a7:8d:08:da:7a:04:82:be:b3:d8:f1:d3:e9:2c:4e:
         e6:01:0c:b2:02:e0:01:bb:68:27:41:be:35:2d:b3:d3:e6:b7:
         32:be:b0:a3:ea:a6:8c:c8:0e:ef:5a:78:8a:e8:37:60:36:f0:
         57:c7:f0:60:6c:c5:bb:c4:81:e9:eb:14:49:6b:06:38:a4:8d:
         4a:1a:4b:e3:77:5d:3a:5f:c5:ee:59:d3:0a:d3:22:2a:8e:9d:
         1a:0d:4e:55:9e:93:51:cb:fc:3a:aa:bc:91:c8:fe:eb:c6:61:
         89:7b:05:1e:15:6e:d7:41:23:62:89:81:d6:19:d3:f3:2e:62:
         6a:e8:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:47:45 2026 by rpki-client