Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File:                     Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier:          vFfQbDayfwU3PRNQJoeN+ExWwzV8PMT6Fr18O7vOeck=
Subject key identifier:   7E:3A:E1:46:AA:4E:34:C0:24:FB:55:B6:26:D0:72:98:2E:39:52:95
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer:       /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial:       019FACAD63FF2ED687B54AADC12E08E17D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number:          143A
Signing time:             Wed 29 Jul 2026 07:01:12 +0000
Manifest this update:     Wed 29 Jul 2026 07:01:12 +0000
Manifest next update:     Thu 30 Jul 2026 07:01:12 +0000
Files and hashes:         1: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: G/MyUT96ct4UQIV3r9R42LMqXht4OVeCPSQ50FnCplA=)
                          2: ZbPx8DmJFKdQIWP-bXHtV-eEAv8.roa (hash: vdIV9Jeh3rKfLujo37xtw3yrmFmf9rID9z/P7vCkaSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:63:ff:2e:d6:87:b5:4a:ad:c1:2e:08:e1:7d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
        Validity
            Not Before: Jul 29 07:01:12 2026 GMT
            Not After : Jul 30 07:01:12 2026 GMT
        Subject: CN=7e3ae146aa4e34c024fb55b626d072982e395295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:65:be:4a:d1:eb:22:7f:68:5e:61:83:8f:
                    2f:e3:3c:b3:36:16:63:ed:84:ee:cf:01:2e:13:91:
                    1e:2a:da:4f:a0:62:bb:91:42:28:2f:0f:bd:bc:3d:
                    4c:39:0e:24:b8:15:cc:78:43:be:3c:88:1d:fe:01:
                    c8:71:cf:c2:c2:22:9e:c5:71:18:5f:b3:e1:fd:42:
                    3b:82:fe:c7:f2:fe:d0:30:c3:fc:b2:8b:ad:21:17:
                    71:7a:d2:c8:b2:60:96:b7:24:c5:c3:39:c9:a6:39:
                    fd:ff:27:43:d9:7d:83:17:96:be:99:c4:b3:a5:ae:
                    ad:7b:de:48:72:64:4d:57:8b:bb:01:00:b1:c1:d2:
                    82:e8:e5:73:2e:37:0e:6d:55:7c:2b:ab:0f:57:3a:
                    33:48:35:d9:5c:ad:63:e8:d6:3a:50:42:15:70:52:
                    63:f2:e4:d9:52:f9:ec:d9:d0:74:3f:3d:47:f9:50:
                    bc:8f:6b:6d:b8:e3:11:1a:8a:c0:5d:6e:03:d0:f7:
                    68:bb:57:50:38:85:7c:ed:35:8b:35:de:87:92:06:
                    9f:28:d5:af:e8:6c:06:96:4e:f5:8e:bc:da:3a:cb:
                    68:f4:e1:87:41:d1:5b:5c:ca:49:9d:58:8e:09:09:
                    58:ac:0c:7f:19:5a:26:ed:8d:d8:5d:81:47:ad:1d:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3A:E1:46:AA:4E:34:C0:24:FB:55:B6:26:D0:72:98:2E:39:52:95
            X509v3 Authority Key Identifier:
                keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c9:f9:08:59:f9:35:7d:c8:46:96:82:3f:e9:ac:fc:e6:ce:
         88:71:c9:28:2a:f3:86:fc:9b:88:33:68:48:c9:56:a4:d3:46:
         66:69:65:a8:cd:13:37:33:f7:18:41:d3:35:07:bd:8f:d6:37:
         da:b9:07:34:e5:ba:6a:58:31:2d:02:68:73:60:77:90:53:ea:
         08:46:ba:63:fd:28:49:63:70:e1:e1:89:ae:de:2f:1e:32:1d:
         55:80:cd:26:b5:4e:11:66:78:c2:d9:98:f3:47:49:f4:d1:9d:
         05:0b:ec:bd:79:b3:df:7c:d7:38:cb:f6:ae:8f:4a:c1:d3:ee:
         18:b8:05:db:82:5c:b0:fd:fb:92:4e:f0:43:ad:d9:9d:b4:87:
         97:c4:f1:20:ab:67:0f:a5:c2:60:a0:f9:ee:b3:68:7f:93:04:
         d5:5e:e2:b9:37:4f:f8:a9:d7:c0:0d:61:22:52:0f:35:3f:86:
         e1:a2:42:d9:0f:c4:17:97:87:10:6d:27:61:de:5e:a3:54:1c:
         b1:d5:d7:e7:1c:c2:c7:50:fd:d2:0c:69:03:87:4e:7c:5a:38:
         ea:3e:de:17:ee:05:8d:e5:0e:f8:9f:b9:1e:a7:96:4b:87:a8:
         8e:dd:fa:6d:0c:36:9f:45:e4:5a:06:97:f8:34:66:2e:34:3e:
         ba:91:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:19 2026 by rpki-client