Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
File:                     d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft (raw, json)
Hash identifier:          aqgPgnI98SeQqA14HXr4ihQXIFzkSrJmrd/Kx1ovNZY=
Subject key identifier:   9C:E7:ED:54:96:A6:FB:0F:1D:EF:40:E6:54:84:BD:68:16:C4:19:46
Authority key identifier: 77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
Certificate issuer:       /CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Certificate serial:       019FA899E22E16ED48D866B9E74FFABAB5D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:24 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:24 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:24 +0000
Files and hashes:         1: 31s38qTNO6yt_t2cWViMVU8rzT8.roa (hash: hHBR9FRB8VGB5NgdUu2OjlV3tCFxVK0wgLqKuADUEY4=)
                          2: VXztzk4Ee02YToFvK1hXq4z0ngg.roa (hash: TG73c3Jp5R3Lk7QQ+JsM9RhJbp3eNPxZOiVn6niYjI4=)
                          3: XPBmD8Gtnws4nIHrF49jMceOosg.roa (hash: O2+V+IZD88cCJbaxnDGHuAzNsGo6UPNKZgTbgUxV0l0=)
                          4: cwbV0vWcQ5Wj6E31oIeSxEVrBuY.roa (hash: /Is553alSS62yiVoav4+HU2iTt1j95KP3P9CAryXxjU=)
                          5: d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl (hash: 4pNhVixFLKnnxE96e5iuVP3+3nj5ZUDHht7pGFqzrkE=)
                          6: xJPTTp5K8VAilWrMTnS2jp6tHnk.roa (hash: KMPOdyDiNO1wmzY0MhqQ4kgJJIERiU41QBcjjv60rmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:e2:2e:16:ed:48:d8:66:b9:e7:4f:fa:ba:b5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
        Validity
            Not Before: Jul 28 12:01:24 2026 GMT
            Not After : Jul 29 12:01:24 2026 GMT
        Subject: CN=9ce7ed5496a6fb0f1def40e65484bd6816c41946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d7:8d:b0:cc:61:5f:9b:45:8e:c7:e0:93:b2:
                    9e:3b:1f:f8:9f:09:b8:b1:f8:68:63:77:23:07:63:
                    da:46:59:b9:25:f5:ce:f2:64:7c:7d:46:0b:d3:eb:
                    ce:0f:1e:c8:0f:91:75:68:6a:8c:b6:93:d7:f6:9b:
                    37:e3:0a:85:60:5b:39:a2:60:f1:cd:02:3c:27:c8:
                    60:2a:72:0c:43:a2:a6:bd:22:23:9d:33:ad:36:25:
                    55:ac:af:90:bb:a8:27:70:c3:14:87:70:18:85:ac:
                    09:c8:0b:02:a0:33:ba:05:eb:4d:fe:b4:04:34:03:
                    89:2c:c3:23:b7:58:2c:98:5e:5c:a5:31:ff:de:d8:
                    e7:5d:e9:c1:49:8c:fb:1f:da:a2:72:7d:f8:ad:36:
                    54:c3:8b:55:fe:17:1e:e1:f3:a4:8d:05:51:aa:24:
                    05:84:f6:f5:2b:2a:96:ac:a2:3f:10:78:6f:66:e0:
                    b6:ec:96:f0:5e:91:72:f2:ca:73:ae:09:36:96:b2:
                    e6:58:9c:6f:4c:eb:05:4d:39:f4:c0:93:c5:00:6d:
                    35:9b:7c:24:8d:ad:29:11:65:f3:66:dd:c2:b4:ba:
                    1e:c3:02:bb:46:d1:3a:0a:2e:7f:df:80:60:ec:3d:
                    70:11:4f:bb:18:ae:b9:10:39:1a:e6:ee:c9:be:12:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E7:ED:54:96:A6:FB:0F:1D:EF:40:E6:54:84:BD:68:16:C4:19:46
            X509v3 Authority Key Identifier:
                keyid:77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:77:0e:1b:8e:77:72:65:45:f8:97:ca:a5:f4:d4:3f:0c:94:
         e9:a3:01:18:e4:c2:b0:54:49:6a:53:81:65:fc:50:4e:37:2f:
         c7:96:c4:68:87:19:92:28:8c:e3:25:d5:51:61:2a:1d:89:e6:
         e4:42:4d:c4:01:be:ba:09:d0:28:88:b5:ca:ef:26:c4:71:af:
         50:45:32:31:0a:01:57:45:e1:a5:2d:36:2b:d7:09:22:24:0a:
         49:13:1f:f0:b9:3e:1a:61:e2:c3:8c:89:fb:ee:d9:f9:76:95:
         1c:80:40:c5:e5:ed:15:c4:28:89:b4:ea:7c:8d:93:60:69:b1:
         8f:d7:6f:c5:74:81:9f:ec:55:24:15:ef:66:a1:da:37:1d:29:
         ed:53:d3:7e:b5:dc:35:76:e9:83:ff:63:51:30:89:73:83:0e:
         99:d4:f4:6d:4d:03:ab:1a:4f:e0:93:e7:fa:e2:09:f7:db:84:
         1f:fe:8b:02:47:0c:60:ba:f6:a8:fb:29:cb:04:26:80:f0:d9:
         74:0a:92:9b:1f:bc:d5:fe:6d:a9:9a:6d:fe:11:3e:1b:12:2d:
         cd:73:85:87:35:ff:6f:c7:dd:5d:66:14:8d:45:89:9d:a3:0f:
         88:49:8c:62:f1:db:02:fc:da:44:7a:3c:31:85:96:f7:61:a0:
         3a:74:f9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:17 2026 by rpki-client