Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File:                     1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier:          IlhUPP1E0YcBUS6CAR3rYqGOOpbTjBP7QzpnmtM/RWU=
Subject key identifier:   92:BB:0A:0D:6C:22:52:77:70:0D:48:62:9C:FD:49:CD:EE:58:3C:1D
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer:       /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial:       019FA9756AB6E5A64E7BDC507D24154C3B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number:          0A38
Signing time:             Tue 28 Jul 2026 16:01:12 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:12 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:12 +0000
Files and hashes:         1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: 7LYgDR5JyCtkc//reE9hLxBhfTq3UcmSoJkfIP1PySU=)
                          2: Cia7XDUlVcQjhopxxsVFSxmf98Q.roa (hash: Rgit10JBl/HzmYiRu+Za82DqspSX6JZYYxG73T1zZ9k=)
                          3: KW64rtt74S1zhjsRECqiGcQpL7Q.roa (hash: R6F/nrfUdQaOnAWUHDehNGl6m7vmiH2zvZoykDnOykg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:6a:b6:e5:a6:4e:7b:dc:50:7d:24:15:4c:3b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
        Validity
            Not Before: Jul 28 16:01:12 2026 GMT
            Not After : Jul 29 16:01:12 2026 GMT
        Subject: CN=92bb0a0d6c225277700d48629cfd49cdee583c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:7b:2c:bd:ad:6e:6b:11:08:4d:99:cd:05:
                    35:6b:b7:40:f2:82:be:ad:af:9c:3f:f5:d2:68:43:
                    31:ab:5b:74:ef:d6:c1:a2:a8:fd:00:92:1a:de:fe:
                    d9:7a:56:17:9e:10:9e:02:3b:c3:72:e2:c1:65:b0:
                    e4:52:88:73:2d:70:0e:79:67:f9:de:30:3e:c2:fc:
                    10:9e:30:89:b6:ee:31:db:1a:2e:90:cc:47:b6:88:
                    f9:37:a3:d9:0b:3d:7f:1f:bd:0f:e5:1c:a6:b1:59:
                    1b:53:0a:79:c4:82:0c:28:8c:b5:c9:23:b2:7d:2a:
                    19:86:12:de:38:30:fc:3c:9b:1d:f8:9c:aa:11:7b:
                    8e:66:60:82:6e:0d:d5:22:7f:a5:e4:6d:95:84:c5:
                    ad:6e:99:76:f0:32:71:b1:bd:fd:96:74:a0:83:68:
                    a0:15:38:59:79:54:71:24:aa:c6:94:eb:29:5a:c0:
                    c0:65:b1:37:13:92:05:70:0a:08:58:f6:57:aa:6c:
                    ba:a2:10:8b:92:d8:1e:f0:16:ce:f9:69:c7:1e:24:
                    20:50:73:35:73:d9:20:f2:79:76:19:ed:f9:28:29:
                    22:de:3c:52:0c:63:1f:8a:c3:59:8e:96:65:5a:c6:
                    f7:4e:ad:34:0e:71:e8:52:e9:26:57:53:00:27:49:
                    ab:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BB:0A:0D:6C:22:52:77:70:0D:48:62:9C:FD:49:CD:EE:58:3C:1D
            X509v3 Authority Key Identifier:
                keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8d:8e:21:de:8a:b5:ab:1a:d9:35:a9:db:ff:be:b1:94:7c:
         e8:88:12:ba:23:49:4c:81:55:0a:f0:ff:9e:84:f0:5e:2e:11:
         95:b8:e5:d0:48:db:d9:d7:bf:62:2a:99:f6:22:47:f8:21:bf:
         35:0b:52:ec:22:42:d6:9e:8e:cf:72:18:65:cf:00:23:d7:4e:
         88:c1:e1:df:d9:64:03:00:30:eb:d9:f3:72:44:49:92:ce:0c:
         31:e8:ae:03:7d:ab:93:b1:ae:ec:50:a6:49:a3:e7:12:e1:9c:
         7b:dd:2b:53:d8:31:18:9d:ab:f2:72:84:ec:38:95:04:38:d3:
         f6:1f:9e:bf:0d:6c:b9:ce:fe:83:35:0a:d2:dd:b8:14:75:8a:
         fb:82:e1:a3:9a:4b:e1:27:8f:0e:45:7f:b7:39:97:7a:75:b0:
         d5:e5:01:69:33:e7:ef:18:3b:7a:f3:7f:44:93:a6:36:e3:46:
         37:83:79:cc:fa:55:0f:12:ed:4b:72:93:d8:e0:9e:9e:e2:94:
         ae:43:37:03:4e:16:ec:24:22:98:6c:e0:aa:e8:bd:81:ab:50:
         19:b3:3a:ff:fb:79:bd:94:da:85:50:83:7e:d5:60:25:6a:31:
         42:e9:ba:4c:51:ab:4d:47:21:9c:31:3e:59:9f:60:91:12:e9:
         b9:df:29:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:06 2026 by rpki-client