Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File:                     8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier:          oYtn14jRToPuWAnEVDNsnJdCJ6v+5vsPXkr4IVSIFrQ=
Subject key identifier:   46:C0:6E:57:E0:32:AE:06:FB:14:AF:2B:1D:D5:D2:26:9A:2F:A0:46
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer:       /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial:       019FAAF5AC0BB274066326B3B34B1E4C2D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number:          07D5
Signing time:             Tue 28 Jul 2026 23:00:54 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:54 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:54 +0000
Files and hashes:         1: 1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa (hash: tYA4HwMckxXKaEemAAzTny37cSzdXzplQtmU/0PMdkU=)
                          2: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: ln7gdxzwzrO+EoTnwuoYqLqU3smXKY3hz+InYpTOqUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:ac:0b:b2:74:06:63:26:b3:b3:4b:1e:4c:2d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
        Validity
            Not Before: Jul 28 23:00:54 2026 GMT
            Not After : Jul 29 23:00:54 2026 GMT
        Subject: CN=46c06e57e032ae06fb14af2b1dd5d2269a2fa046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:50:f1:08:ae:5c:fb:c9:ee:67:45:34:61:47:
                    62:26:6a:9d:bb:a4:fa:d2:84:62:9b:a0:a1:88:f2:
                    ab:e4:2e:8f:f1:8a:da:6f:53:dc:b8:9b:42:e0:da:
                    66:cb:93:6b:66:c5:d8:f2:93:13:a9:71:db:e8:08:
                    bb:de:fc:80:5b:d2:93:6b:ec:95:5c:d4:8c:ab:fb:
                    42:e9:70:cb:55:1c:85:86:13:a1:22:3c:46:ea:af:
                    54:16:55:31:3a:05:6f:2b:29:45:e6:6a:46:31:c2:
                    24:6f:7d:99:96:e0:61:73:5a:81:43:54:bb:a2:64:
                    83:1c:19:0a:df:2d:d8:c2:82:43:de:71:16:df:62:
                    d0:2c:63:4e:2f:53:5d:03:72:10:0d:76:e4:2c:46:
                    a9:1a:95:71:00:64:9d:33:53:01:d8:6b:87:13:fc:
                    18:16:55:66:2c:0b:53:0b:fd:e9:48:80:97:a5:59:
                    95:c5:7d:d3:e5:a3:7f:19:bc:b0:a1:92:8e:53:58:
                    0a:31:8b:ee:a4:73:f5:e9:bc:36:7c:51:08:5d:59:
                    12:6e:8c:16:65:47:99:4a:d3:43:87:c8:dc:71:93:
                    84:f6:96:89:4e:61:f0:f0:82:5f:f5:1e:89:db:c0:
                    79:39:ff:81:85:e7:d0:f2:f4:71:c8:92:0f:da:f5:
                    70:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C0:6E:57:E0:32:AE:06:FB:14:AF:2B:1D:D5:D2:26:9A:2F:A0:46
            X509v3 Authority Key Identifier:
                keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4e:5a:32:1a:99:e4:fb:af:ee:6b:de:eb:8f:29:68:2a:d3:
         c3:57:e8:38:17:8c:b0:bd:e0:23:fc:66:ce:e7:45:cb:63:66:
         10:29:81:29:0a:07:76:a2:c4:20:7c:c9:05:b2:1b:96:50:82:
         e5:60:6f:45:df:a3:69:bf:db:cd:5b:5a:5b:40:bc:77:51:15:
         50:00:8e:88:da:04:b5:47:60:a3:57:8f:29:fe:23:44:a6:c4:
         62:d5:bc:45:02:80:09:8a:81:a3:ba:ab:dc:ac:5b:27:a6:52:
         c4:3c:a8:a5:93:48:ef:7d:2f:ce:a5:9b:5a:ec:d1:2b:17:8f:
         a3:23:4c:e6:e2:3c:d3:23:9c:01:0b:3c:ac:bb:09:d8:9e:24:
         92:d6:bb:22:02:70:a0:31:d7:4d:a5:26:e6:2d:18:79:c1:1d:
         72:52:5d:88:cd:e7:4c:7c:83:93:b1:6d:2b:06:20:c1:1a:26:
         cd:11:ec:f4:2c:db:ae:d8:f1:5f:5b:cc:1c:6d:8c:ca:34:7d:
         5e:10:0c:3f:d3:b2:84:18:08:3c:52:49:21:21:b2:10:2b:23:
         fd:02:e0:76:4f:b1:8c:3f:3b:1b:c7:f5:bf:6d:fb:24:26:39:
         5f:6e:20:ef:90:ea:05:cf:0f:9d:fb:4f:26:67:c6:a5:96:d4:
         de:2e:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:19:05 2026 by rpki-client