Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File:                     jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier:          p171j4vIZRH/yiZiXoL8OJQxa/SOfNonsQ87hXLWN+w=
Subject key identifier:   74:9C:DC:D9:19:08:B1:3C:C1:72:57:5E:75:3A:89:49:6D:70:B8:20
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer:       /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial:       019FAC3F2A02BD0E7F1C0178F84EF219AF60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number:          0A16
Signing time:             Wed 29 Jul 2026 05:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:48 +0000
Files and hashes:         1: PQ4kixVMpunmZd3Y9lneEnubVHU.roa (hash: Yf8PqpssV4aPe31IuLnMjahZv8QaQaygjHQtEb4Jhyc=)
                          2: h8m3UyCHdJZvavzOM3kO78iBzSs.roa (hash: 7o6/q7pQ3291TBvgsO2xLF2/udPbMNgFs9of9Kxrm4o=)
                          3: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: JVM4Rz3CkS9w2cWc4NaX8tcXC/UhtXMhpGPKhsvIZxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:2a:02:bd:0e:7f:1c:01:78:f8:4e:f2:19:af:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
        Validity
            Not Before: Jul 29 05:00:48 2026 GMT
            Not After : Jul 30 05:00:48 2026 GMT
        Subject: CN=749cdcd91908b13cc172575e753a89496d70b820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:e5:ff:8f:4b:72:68:c8:56:25:9d:7b:db:
                    9e:5e:66:58:0c:37:69:45:3e:d3:0d:fd:30:f4:8c:
                    f6:11:ca:bb:40:c7:2e:b2:24:12:7b:9d:89:ff:87:
                    ac:95:1c:1a:c3:3d:ad:97:a4:8d:50:8f:54:c6:3c:
                    0b:64:5e:0f:bc:06:28:bf:6f:57:91:38:33:de:d3:
                    69:a6:11:6d:1a:49:21:63:07:84:e8:b2:7c:51:ea:
                    a1:bd:e7:df:22:72:5c:af:59:45:a4:15:92:a2:4a:
                    fe:8a:20:e7:4e:6e:b0:6f:ed:e0:85:cd:a1:5d:5c:
                    5e:7c:8f:ff:de:0c:ed:0e:c1:0c:77:53:31:c8:0b:
                    a3:9c:a9:c6:6a:b0:95:47:af:bf:af:bf:9f:bf:62:
                    0f:ea:91:08:c5:aa:c3:38:86:61:3f:03:c1:64:37:
                    01:35:42:9d:08:fb:9b:98:d9:34:91:55:2e:01:d8:
                    96:ee:7b:22:ab:4c:5c:dc:ab:12:59:84:3b:44:68:
                    90:97:44:59:63:81:61:49:b0:22:89:06:9d:00:50:
                    f8:9a:22:83:26:56:e8:2c:f1:7f:10:31:d6:33:56:
                    64:36:b9:e2:e6:8b:d9:95:d6:29:69:3c:95:75:f1:
                    46:d1:91:2f:16:bf:c1:f3:ff:39:90:90:ac:2d:fd:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9C:DC:D9:19:08:B1:3C:C1:72:57:5E:75:3A:89:49:6D:70:B8:20
            X509v3 Authority Key Identifier:
                keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:85:5c:0a:0b:b2:11:1f:b9:d9:79:b1:aa:71:ea:67:25:9d:
         62:01:76:2c:a5:24:97:27:19:05:26:28:76:d7:b5:20:2a:be:
         db:f7:f8:bb:d6:73:b4:2a:b2:21:7e:f6:f4:a7:2d:62:f6:86:
         a2:74:e5:de:03:f4:5e:19:08:94:af:93:88:38:81:63:fd:81:
         40:b1:3a:cd:ed:57:b2:32:82:d1:08:53:ee:e7:81:53:5d:c8:
         6c:12:67:ad:09:fc:ba:13:9a:5c:1b:6a:98:c0:d7:1f:02:2c:
         9d:56:d0:88:16:81:da:08:5c:d9:bc:26:e0:b6:c0:56:dc:69:
         fe:10:f0:21:01:ac:71:ec:49:84:38:ef:0d:01:c5:7a:83:54:
         d7:f1:0e:32:bd:70:1e:80:e5:75:74:6c:e1:3f:00:18:68:48:
         a3:a8:f9:72:7f:28:ac:88:f0:db:07:02:bf:a6:d0:85:a5:cb:
         9e:6c:c4:74:06:b9:d1:72:7f:86:c1:b0:f9:bd:ca:18:b6:d3:
         fe:ef:2f:e5:d5:0e:03:6a:f9:1b:fb:45:9c:c8:2e:92:9d:52:
         26:c2:fc:3e:74:ff:f7:1d:8a:1b:bf:c2:5f:70:ab:35:c5:4e:
         4f:8c:5e:02:c7:2f:76:cb:a7:0b:97:d8:fb:ea:8b:38:6b:76:
         ec:4d:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:47 2026 by rpki-client