Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File:                     acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier:          xi27wHeEfyd78NBTUayLqWXG3zSL/MRy5Ss/3udXcrE=
Subject key identifier:   11:DC:9E:07:E6:8C:B2:8B:99:87:FE:C4:FE:96:FF:E6:BC:6B:C8:87
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer:       /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial:       019FAB9A130AAE98D1DA966C576C1DD7BEA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 02:00:29 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:29 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:29 +0000
Files and hashes:         1: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (hash: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4=)
                          2: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (hash: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E=)
                          3: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: yRnWbgrIXD3MY7/40t8GcHj7XjsWnHaDAeBMZD4qC0A=)
                          4: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (hash: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA=)
                          5: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (hash: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:13:0a:ae:98:d1:da:96:6c:57:6c:1d:d7:be:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
        Validity
            Not Before: Jul 29 02:00:29 2026 GMT
            Not After : Jul 30 02:00:29 2026 GMT
        Subject: CN=11dc9e07e68cb28b9987fec4fe96ffe6bc6bc887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:3a:65:66:b5:4f:01:30:33:03:dc:d6:f6:
                    63:d0:02:b5:f6:bb:f4:1d:f0:f2:4b:79:40:b3:e7:
                    bf:50:e4:55:9a:c0:59:3b:b4:91:6c:49:76:46:57:
                    fb:53:4e:0f:09:54:7b:19:32:dc:43:c1:3b:98:f0:
                    03:ec:3e:8d:5a:f4:39:9c:84:d6:0a:07:e8:5d:ca:
                    4c:70:cf:20:8a:fa:a1:43:20:26:87:2e:39:36:02:
                    85:c7:aa:5f:34:22:aa:f6:1e:ce:94:f2:da:64:7c:
                    15:d2:e1:61:ad:11:58:ae:e0:35:d2:a9:3a:a9:c4:
                    85:bf:59:a7:bc:07:b1:2d:f4:9a:b8:96:a3:c0:55:
                    b1:33:5b:ee:3e:e1:3c:f1:11:de:6c:a4:88:0f:46:
                    ba:23:ab:57:3f:ca:d6:fb:d6:d9:1c:57:3b:b1:91:
                    d1:1f:8a:25:97:83:9b:82:31:d2:0a:e9:a8:83:50:
                    de:e9:bc:5f:01:87:dd:15:d8:47:a2:30:7d:44:95:
                    e3:22:5f:0a:e9:a7:b7:92:16:6e:2f:05:96:bd:4c:
                    2e:8f:01:55:da:fe:d0:bb:60:51:f7:12:56:04:c1:
                    84:08:e0:13:d6:9a:ea:19:2d:9a:a8:eb:43:6d:d3:
                    a3:2f:44:dd:6e:f1:e7:21:6c:19:a5:64:60:24:e9:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DC:9E:07:E6:8C:B2:8B:99:87:FE:C4:FE:96:FF:E6:BC:6B:C8:87
            X509v3 Authority Key Identifier:
                keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:45:51:ec:a3:59:eb:da:f4:3d:73:36:2a:e2:61:c0:ac:29:
         b2:fe:c6:6c:c5:4b:70:1c:9b:35:e8:ce:01:80:87:db:46:30:
         a1:af:62:be:43:10:66:55:0e:e9:ba:8f:55:4d:76:80:1f:0c:
         75:c3:72:c3:59:9e:80:34:c2:84:f6:3c:1d:dc:a8:e1:ca:f9:
         d5:46:45:fd:18:58:8a:ec:1b:09:74:2d:d7:ca:90:80:12:44:
         2d:3b:3e:21:8f:5d:93:a2:5d:77:3d:9a:0b:c2:70:23:9f:a8:
         4f:b9:f6:3a:e0:63:df:bb:d6:dd:a0:c1:c8:c9:f3:fa:81:4d:
         dd:79:74:76:61:17:36:de:fa:02:b9:b2:45:01:79:b1:4a:7d:
         7a:3d:9b:11:a6:82:9e:d7:42:8a:70:9a:a1:01:13:0b:d5:59:
         c4:f5:eb:84:26:09:5b:2d:21:61:3e:c5:36:e4:d3:a0:cc:76:
         17:3a:55:5a:2b:64:3a:94:21:3f:6b:48:e3:fb:16:fb:58:b6:
         43:b9:dd:89:d1:94:be:76:a2:f3:84:b6:de:de:44:b7:de:2e:
         ce:bf:16:a6:33:7d:8a:21:82:81:8d:da:39:6f:e5:ce:57:2a:
         97:4e:e4:04:7f:88:e5:f3:1b:63:05:1a:d5:27:a3:6e:bf:9a:
         2e:b3:7e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:56:15 2026 by rpki-client