Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File:                     F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier:          zHZBpJqi+Nk8uLp5tlOiIG+XmDwruWElhFKUTPYKW+M=
Subject key identifier:   85:C2:7C:33:3F:FA:39:8F:70:72:43:DD:4C:47:0E:27:39:38:2C:E5
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer:       /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial:       019FACE4331DA6A88F9E35F74BBCE742358C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number:          1966
Signing time:             Wed 29 Jul 2026 08:01:04 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:04 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:04 +0000
Files and hashes:         1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: kGkh2TRJH458nwQPO6tHEoRCLI+BjcEr9KpubqeczGA=)
                          2: PnmMPjc4F5uoJXYfqJ1sZSQuC6I.roa (hash: /5mkx4+jtWUqD/pZZ8CzGZwV8K0K77VUycNPiYZySbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:33:1d:a6:a8:8f:9e:35:f7:4b:bc:e7:42:35:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
        Validity
            Not Before: Jul 29 08:01:04 2026 GMT
            Not After : Jul 30 08:01:04 2026 GMT
        Subject: CN=85c27c333ffa398f707243dd4c470e2739382ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:32:50:c3:19:ca:33:e8:45:5a:b7:db:f6:
                    2f:4f:b6:23:c9:ee:45:85:f3:89:bb:0d:a8:65:3d:
                    fb:75:f9:0e:20:fd:83:c5:74:73:63:de:9c:2c:5a:
                    0b:30:e0:ee:97:57:19:9c:ba:e2:b0:46:0e:81:f6:
                    c3:59:81:fc:6d:d3:ef:94:d2:95:ac:d0:b3:2b:98:
                    ce:58:b0:15:6e:46:0a:60:40:f0:42:c2:b5:fa:fb:
                    01:b5:5f:80:25:d6:d7:1b:1f:ad:1f:73:a9:b7:8b:
                    d0:64:08:ea:ca:35:eb:d9:a6:1c:2c:11:39:16:fa:
                    b0:18:b4:da:d4:04:e9:5f:95:66:01:e9:0b:24:5a:
                    87:f7:29:d8:f1:13:54:f6:2e:23:49:dc:81:aa:ca:
                    8a:ed:1f:43:10:0c:5f:73:41:08:95:0f:2b:ae:74:
                    f0:cf:de:88:18:39:c4:16:c6:0d:89:42:cb:ab:1a:
                    39:9e:4d:68:dd:1a:de:04:57:ad:7f:d7:44:5c:28:
                    46:a1:92:db:99:28:53:87:77:f4:81:e6:0f:66:26:
                    f6:10:c9:52:b4:70:f9:8c:75:f0:8e:8b:5b:ed:9b:
                    84:58:c8:41:09:b8:2f:2c:17:80:47:0b:29:cf:8e:
                    39:94:27:dd:eb:d0:1d:0a:35:11:b5:22:64:bc:fe:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C2:7C:33:3F:FA:39:8F:70:72:43:DD:4C:47:0E:27:39:38:2C:E5
            X509v3 Authority Key Identifier:
                keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8f:ca:e3:6c:7f:ab:07:80:f9:b4:bd:7e:9b:e9:b6:3c:53:
         a2:f1:da:51:c4:15:4c:09:37:37:14:e7:dd:dd:87:02:d8:61:
         b3:7c:9a:ce:c5:38:f8:42:e2:60:89:4b:f6:f1:78:52:50:8e:
         5d:ba:8c:89:a1:76:a2:8b:46:34:5e:33:99:ab:5a:b8:fc:56:
         93:55:3e:e5:9c:ff:27:5f:a4:27:76:d8:b7:d9:9f:8c:9a:2b:
         7f:59:cf:02:5b:8a:43:e5:cb:5e:f4:03:02:0c:c3:b6:29:d0:
         db:d9:6f:6e:48:d2:4a:8f:19:9e:1b:db:52:d6:0f:6b:da:fb:
         77:cd:3f:e0:67:45:1f:2d:d7:c7:ac:21:b6:89:0c:90:1d:52:
         45:b2:8e:33:a0:c1:f2:37:19:59:c5:a5:e0:d9:c2:b2:1e:cc:
         78:0b:40:f5:09:8a:d2:aa:67:a2:91:2c:d2:45:29:17:14:f1:
         35:e9:64:ae:c3:74:c1:2f:e5:0c:b9:89:9d:a4:a1:1d:85:3b:
         89:12:98:77:c5:be:e7:24:dd:a2:38:28:c6:de:50:16:eb:43:
         88:e2:78:f7:10:8c:ed:fd:28:cd:d6:b1:e4:fc:e6:76:04:e7:
         fa:f1:38:66:0d:d9:bc:47:3a:76:52:11:c4:2c:ae:6f:35:9b:
         97:79:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:40:40 2026 by rpki-client