Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File:                     1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier:          TNf9ZFa4CYN1dPVssJa8VvV49eBHrUT6pd1o+w2+asE=
Subject key identifier:   19:15:4E:43:C3:3E:9E:FD:ED:A7:84:EB:AA:BA:20:8C:25:F9:7C:D2
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer:       /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial:       019FAC08467214623AE8B085F1245B20A9F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number:          0E2D
Signing time:             Wed 29 Jul 2026 04:00:51 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:51 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:51 +0000
Files and hashes:         1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: 8tamHJxwEEyeimv9k2rYtcsymEfANuTcg5NSwrnAwYI=)
                          2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:46:72:14:62:3a:e8:b0:85:f1:24:5b:20:a9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
        Validity
            Not Before: Jul 29 04:00:51 2026 GMT
            Not After : Jul 30 04:00:51 2026 GMT
        Subject: CN=19154e43c33e9efdeda784ebaaba208c25f97cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:60:89:96:28:c7:7f:8f:f2:cf:0d:ab:da:98:
                    2d:09:de:ea:e5:2a:df:ac:ae:0e:24:e0:96:fc:9f:
                    53:c2:d2:1c:a0:30:c3:df:6c:4f:a6:a7:95:8a:c9:
                    5f:a0:44:7b:4d:b2:16:64:01:c9:e6:68:b3:6b:5d:
                    d9:85:d8:5d:72:95:5e:0d:1e:dc:88:34:30:29:2b:
                    ae:f0:0e:ac:bf:dd:5e:67:ec:a0:a2:19:07:7d:da:
                    d7:c2:cd:40:2d:b6:fb:13:67:3e:a3:df:d6:40:f6:
                    3f:dc:ad:a6:49:b7:74:38:c2:c9:b0:b0:19:20:7c:
                    73:97:03:6d:e6:e2:83:b4:f1:de:0b:2b:a5:fa:5e:
                    d4:c9:f0:a7:11:24:fa:54:2a:9c:e4:bf:07:b4:f8:
                    9c:1c:9b:08:d0:06:fe:99:47:05:1f:83:c1:63:2e:
                    fc:05:b9:1c:a9:00:76:b1:0a:49:0d:6b:d7:70:0a:
                    17:71:5d:35:d2:e8:71:e2:76:4d:04:82:17:f3:6e:
                    75:45:14:20:61:46:f0:4f:7b:5b:65:73:8d:b7:3b:
                    71:50:22:9f:15:28:af:74:ca:94:20:c8:1b:86:d5:
                    70:16:be:73:98:67:cc:d5:e4:70:f3:47:ae:85:08:
                    0c:63:37:4b:eb:60:39:38:0f:81:5b:f9:a0:03:c6:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:15:4E:43:C3:3E:9E:FD:ED:A7:84:EB:AA:BA:20:8C:25:F9:7C:D2
            X509v3 Authority Key Identifier:
                keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a7:70:31:46:f1:92:99:55:a8:fc:8f:7f:d1:01:e5:de:7d:
         16:18:49:69:3b:83:3c:50:26:84:4b:f2:15:22:95:b1:80:11:
         e7:45:6f:d1:f4:f7:f6:0f:46:ff:96:c8:6e:ec:e5:9d:f9:3b:
         ff:c4:1d:a1:e0:7a:5d:9a:72:9e:7d:93:d9:84:82:30:98:c3:
         5b:1a:b5:3a:db:f3:a1:ec:09:c9:da:23:dd:1c:82:a0:e9:1b:
         c9:54:a3:26:77:6b:db:a2:16:20:83:3b:cc:dc:12:a4:85:9c:
         b3:a4:70:40:c0:ac:3b:77:df:aa:36:e5:b3:67:5a:dc:ad:dc:
         06:85:8a:5b:62:9d:a2:fb:e5:ab:5f:ac:6b:28:5f:df:6f:d6:
         bf:78:8d:2f:8f:ee:81:2b:09:98:d8:f0:1e:c0:c5:80:5a:8d:
         af:ad:5a:1c:e0:56:e7:42:c8:3e:a6:0e:31:96:d6:51:73:39:
         a5:99:49:34:4f:a0:cd:37:ba:bc:3e:47:bc:25:b2:0b:49:41:
         e3:6d:1d:b0:33:8b:bf:8b:a6:b0:a2:e4:c7:f8:69:40:42:57:
         3f:c7:30:24:79:08:c9:17:b0:b3:ec:7a:3c:a8:61:ba:78:ed:
         69:1c:16:e9:d6:03:42:cd:10:59:ee:68:cf:75:09:d5:8e:de:
         4b:37:12:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:43:26 2026 by rpki-client