Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
File:                     Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft (raw, json)
Hash identifier:          cdYQq2c7t8ge0sqoUv/Pji+uFrFUa6w4E/DvxcBIZ5k=
Subject key identifier:   16:77:74:2C:F4:5B:70:59:7E:25:7B:08:AD:43:E7:D3:72:47:E3:98
Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
Certificate issuer:       /CN=464d733de81fbd486d442358e0c15370520f9312
Certificate serial:       019FAC08AAF3D43CE37E53805E9564B80B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
Manifest number:          0476
Signing time:             Wed 29 Jul 2026 04:01:16 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:16 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:16 +0000
Files and hashes:         1: Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl (hash: Dt5qPTAm0E79TMh0e5VxU09pWYEgd6oIZUw8HokwEPk=)
                          2: X2-StnXGjfI9wfKhZQp0793U3Io.roa (hash: l8ocH0IxQsjfL6ukdiPqqCpYZzs3R9sEM3Pe+2LGF84=)
                          3: _BGqcu40RXoTf10_8VGIOgqYEiw.roa (hash: EO0e4LrOi8gJaif6ib941Se3Fz7ZwcHJpJUxBOS6sjg=)
                          4: sYLKdeDOUeQxy_Kv2E_Cnj0I44k.roa (hash: 7UjSkmLEewaWHHfvbCaxDyZlIQWGWRAv2o5SfuX7IBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:aa:f3:d4:3c:e3:7e:53:80:5e:95:64:b8:0b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464d733de81fbd486d442358e0c15370520f9312
        Validity
            Not Before: Jul 29 04:01:16 2026 GMT
            Not After : Jul 30 04:01:16 2026 GMT
        Subject: CN=1677742cf45b70597e257b08ad43e7d37247e398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:24:f8:2e:65:69:04:35:b0:64:36:98:58:
                    f6:e9:26:40:af:bf:a9:77:3d:51:b1:e6:48:13:eb:
                    d8:ad:f6:3d:d2:1d:2a:c9:a8:7d:2a:1c:ee:d4:bc:
                    63:af:26:8f:f7:15:86:86:f6:93:3a:05:9b:b8:09:
                    54:74:c2:58:50:c2:e5:1a:8c:3f:26:32:05:8f:f7:
                    99:93:9c:84:db:67:c9:03:27:37:2d:3f:23:b7:d0:
                    e9:96:4c:27:ab:d9:d0:67:a4:67:37:d3:08:99:22:
                    80:f0:93:c7:43:e2:e2:bc:84:b2:4c:03:65:e1:71:
                    c3:fb:db:33:8b:b2:e0:d0:22:81:1d:70:4e:8b:56:
                    3d:5d:be:dd:49:da:1c:d1:a5:ee:14:9c:cf:74:7d:
                    61:cd:f8:6f:61:84:f1:8a:24:6f:a1:c1:8a:ba:d6:
                    27:a5:9b:11:fd:6e:91:8b:f2:0a:36:4d:2d:6a:fc:
                    05:5d:a7:c0:35:1a:e0:af:7b:77:27:6c:2d:93:cf:
                    76:ee:ec:19:67:4c:ee:4b:39:55:61:84:85:2a:b2:
                    e9:88:73:87:a9:6c:49:c1:8d:81:ad:2e:85:53:be:
                    17:34:88:b4:4e:1a:03:6f:10:9a:46:98:cc:26:61:
                    77:ac:2a:59:a3:e0:09:97:f9:b5:5d:fd:39:11:a2:
                    c2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:77:74:2C:F4:5B:70:59:7E:25:7B:08:AD:43:E7:D3:72:47:E3:98
            X509v3 Authority Key Identifier:
                keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7a:da:06:5a:64:3a:75:c1:bc:6c:e8:ec:0e:71:67:90:14:
         22:4e:c7:f6:5a:60:0b:4f:7a:ea:b7:7a:eb:ee:61:e5:00:49:
         fc:2f:a0:b5:1e:85:31:26:c9:83:50:f3:7e:bc:1e:de:b2:d0:
         5f:1e:67:3b:40:30:3c:8e:e1:04:1e:bf:0d:e8:4a:50:94:6a:
         43:f8:f7:3b:65:68:4b:12:1c:45:49:32:99:64:1a:f1:c0:99:
         01:fa:cd:3c:51:76:46:0a:49:34:e7:09:fa:d6:60:26:5a:d3:
         f1:7c:7b:e3:87:04:af:46:49:a2:ad:b1:0f:27:7b:87:64:0c:
         b4:28:fd:40:f8:e1:fc:6a:a5:85:34:09:a1:29:88:9c:e1:9f:
         40:e5:de:80:c6:05:9d:f9:f2:d7:aa:52:6f:1b:4a:4e:41:71:
         55:a1:fa:ea:c4:71:b1:f5:3c:c4:5c:5f:86:eb:fd:32:ae:76:
         4b:dd:78:00:2a:75:7d:c2:f5:e9:2c:38:24:7d:f9:da:77:b7:
         92:30:9d:25:a0:7c:0a:f1:03:3c:a9:b8:67:75:49:37:8e:1c:
         9b:69:48:55:30:84:36:fa:99:3f:e4:fa:5d:6f:13:c2:b0:89:
         a0:5d:c3:2a:dd:fc:c6:40:93:1e:4f:70:2f:b9:b8:62:c6:b7:
         6d:cc:9d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:09:47 2026 by rpki-client