Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File:                     1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier:          ZggUSFp00+0+IdxmVcvH4KVC0NE3m2d3iDImQmJP3AI=
Subject key identifier:   FF:6D:B2:0B:76:DB:5F:44:D5:F5:EF:D3:B4:20:B8:81:BC:F2:8E:CD
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer:       /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial:       019FABD0ECF77AC34239CCA18CD595A0E785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number:          19D3
Signing time:             Wed 29 Jul 2026 03:00:23 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:23 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:23 +0000
Files and hashes:         1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: qSlKdI03MnpXxf+P+Did1v6a46FuQHS5TKlVdTWpXgA=)
                          2: WKc4Vos6EgMcwq2jPs8Vo_T2gKg.roa (hash: cCxzpDSEtEshoJyIVMHZls1v4t+x9ri7tVY5Xlsvk/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d0:ec:f7:7a:c3:42:39:cc:a1:8c:d5:95:a0:e7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
        Validity
            Not Before: Jul 29 03:00:23 2026 GMT
            Not After : Jul 30 03:00:23 2026 GMT
        Subject: CN=ff6db20b76db5f44d5f5efd3b420b881bcf28ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:3b:27:ad:79:a9:9f:39:d1:0a:63:ee:68:
                    65:69:40:69:a9:97:f4:b4:e0:b5:ce:ea:0f:a2:d6:
                    6e:15:a3:bc:02:a4:9d:cf:2e:66:8d:aa:be:64:b6:
                    94:a3:15:79:da:06:e3:45:90:31:ce:8f:12:ef:c0:
                    8d:46:f4:32:45:3b:d3:8f:78:9c:bd:16:da:7c:e1:
                    b2:ab:fc:c2:7f:66:4d:bf:24:31:e1:a5:31:23:36:
                    48:ab:0d:90:d3:57:4a:e8:e3:86:3f:72:83:1d:59:
                    ab:2e:a3:49:c8:59:de:a8:07:d3:4b:7e:c9:5a:1b:
                    a1:29:c3:ce:e2:57:23:9a:63:4a:3f:96:78:e0:bb:
                    95:aa:bd:74:9d:8f:82:88:74:af:e2:ec:d2:6e:45:
                    00:0e:de:02:10:da:45:e7:0a:56:0b:0c:5c:25:de:
                    16:5b:29:57:53:b4:ff:21:b9:a2:4c:49:17:ff:f5:
                    f1:db:b6:94:4b:d0:ed:98:68:99:54:0e:07:81:f0:
                    03:28:bb:42:70:47:9c:d3:3f:98:a6:ed:07:21:cf:
                    f7:e1:e2:48:76:0c:2c:78:4b:ef:5d:0b:58:d4:74:
                    17:79:86:0f:69:8b:30:b7:d8:63:85:0e:1a:3e:df:
                    8b:38:37:a4:50:c9:aa:71:c4:f0:48:a6:63:d9:c6:
                    0f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6D:B2:0B:76:DB:5F:44:D5:F5:EF:D3:B4:20:B8:81:BC:F2:8E:CD
            X509v3 Authority Key Identifier:
                keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:35:14:a0:48:b7:ef:d5:98:df:97:dc:75:7b:cb:4f:e3:8d:
         ef:9a:2e:da:df:7b:94:fe:8b:04:39:9a:32:19:d0:66:df:79:
         86:75:2c:0a:96:d2:70:83:9e:1a:41:8c:af:61:7b:f1:0e:90:
         d8:65:c9:ba:4a:4d:23:14:d6:af:a8:09:0a:ac:6e:49:b1:ee:
         33:0f:9d:99:53:ff:9c:bc:16:06:e7:68:ec:5f:ae:ee:f1:61:
         84:f1:f2:86:6a:af:f6:3b:c1:02:36:ff:16:e3:b4:6a:74:ba:
         94:9a:90:d7:5e:73:71:93:0a:8c:77:e7:1e:2b:c6:6c:65:18:
         35:f6:16:c8:af:08:5f:01:a5:03:46:35:6c:00:94:69:6a:b7:
         8b:7c:5f:00:02:42:e2:63:aa:52:09:0b:46:22:7a:48:30:ab:
         45:a7:69:fb:db:e3:f9:0a:7b:60:e9:a3:06:d0:0a:b0:5c:1b:
         95:38:ea:08:8e:64:aa:19:2b:e5:76:98:50:e6:73:35:9e:33:
         f1:8c:90:8f:5b:16:5d:4e:9b:91:0e:4a:6c:40:22:d6:d9:56:
         17:53:b9:b5:e9:65:97:73:cd:ab:75:3b:f0:fd:fb:bd:51:6c:
         c0:ae:32:f4:25:12:6a:60:6e:e1:87:fb:96:15:cd:e3:2d:4f:
         2e:e9:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:11:23 2026 by rpki-client