Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File:                     y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier:          xvVnJWsxB+M1DBPat3ItIujjrRj9B2lc5c+1YRu4nv0=
Subject key identifier:   97:65:AD:78:10:61:AF:40:85:B9:BC:92:2E:E0:25:6F:AE:3F:85:52
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer:       /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial:       019FABD108E817860729E42528A73A535D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number:          0D44
Signing time:             Wed 29 Jul 2026 03:00:30 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:30 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:30 +0000
Files and hashes:         1: im_vhLMibVudnZg4kJ52SUS3c-w.roa (hash: jWyQDspkXiHiDQkhSK+ARTtEFmL2PYL0z1g2F7GJj5E=)
                          2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: XkdRzEWe/4Gm63NYdFlK8R1ebQhY2U9mb7sWzuuaEXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:08:e8:17:86:07:29:e4:25:28:a7:3a:53:5d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
        Validity
            Not Before: Jul 29 03:00:30 2026 GMT
            Not After : Jul 30 03:00:30 2026 GMT
        Subject: CN=9765ad781061af4085b9bc922ee0256fae3f8552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:a1:8c:29:b7:e5:b3:ff:6b:4a:71:6e:d5:
                    59:e5:0d:35:ac:8e:1e:d8:02:c3:4f:e1:3b:f0:10:
                    ca:22:fd:b1:63:af:ab:e0:1a:f6:08:0b:ef:af:f9:
                    0a:9d:87:ee:fc:26:07:a6:bf:d5:ed:3e:41:37:56:
                    e7:fa:99:b2:b8:e5:07:c5:9e:37:86:1d:05:2d:c1:
                    d7:1a:e8:e9:9c:a0:41:31:0e:73:b4:bb:ae:93:74:
                    b4:f7:6c:c5:9a:eb:05:cc:43:29:cb:0c:53:fb:a8:
                    93:85:06:60:30:e8:37:a0:8b:b4:f9:c1:ba:ac:45:
                    ed:0d:37:71:40:5e:fe:fe:fa:93:21:4a:ea:99:d6:
                    ba:63:0d:5d:c9:43:ff:31:95:c0:5c:88:15:8a:e5:
                    01:d8:9a:de:ce:e7:34:88:09:0a:c8:df:9c:f8:96:
                    a1:bb:41:b4:f7:49:21:62:39:d3:f4:a9:ef:2f:a4:
                    81:57:8f:f2:10:16:67:2c:ba:95:2c:87:ba:fe:21:
                    90:56:16:fb:63:4a:07:b6:cb:92:18:8d:9c:07:06:
                    76:71:ad:67:37:86:b9:6d:84:59:71:20:0a:58:b4:
                    b3:38:a9:e4:5e:80:3e:08:0c:b8:04:ea:55:99:76:
                    38:3f:f6:b9:3a:25:b4:94:45:f0:34:09:75:de:2f:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:65:AD:78:10:61:AF:40:85:B9:BC:92:2E:E0:25:6F:AE:3F:85:52
            X509v3 Authority Key Identifier:
                keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:af:80:26:66:16:be:e4:01:e8:11:f0:e9:78:48:96:04:35:
         d8:c9:ed:1d:8e:4c:db:28:e4:be:32:d4:19:ea:83:09:6a:c0:
         64:9a:8d:e6:50:6c:3d:82:e3:c7:03:3e:52:b4:57:4b:2b:57:
         ed:d5:8b:0a:18:47:1e:a2:cb:51:25:97:24:a7:c9:e3:fc:83:
         96:1c:1f:c6:c3:26:2f:ad:0e:70:a7:89:6b:cf:f4:65:e0:ba:
         54:4a:9c:00:13:81:66:68:7b:35:7a:05:7b:d5:b3:4c:75:5d:
         19:b4:e3:dd:6f:52:2b:cf:62:75:da:a0:53:91:e2:d2:d7:26:
         63:00:5a:45:d9:9b:30:09:7f:30:70:14:7a:b0:a6:1b:48:5d:
         40:64:96:39:f4:c7:f1:17:8c:df:42:56:0f:67:49:cd:b4:e1:
         ec:ae:be:fd:24:49:b8:48:96:6b:dc:2a:f5:50:9d:37:e5:db:
         56:6b:dc:72:46:58:cd:f5:49:52:53:2b:78:23:aa:c2:cd:8c:
         3f:61:ea:e5:43:68:a7:5e:dd:8d:aa:72:bf:ed:5d:c4:6e:eb:
         62:3f:b5:31:1f:0d:40:31:0e:b7:9d:d6:e2:ca:fa:c7:52:07:
         ad:60:fa:5a:1c:b8:21:dc:d0:80:2a:01:09:e8:73:01:ea:8e:
         df:2d:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:16 2026 by rpki-client