Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
File:                     Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json)
Hash identifier:          cBpWzfnCCfEnbwVARs/B9q2LDeB5ucP01w7T9wyogls=
Subject key identifier:   74:48:A0:7A:70:7B:79:08:B4:93:7A:87:71:7B:D5:32:6C:B5:0B:34
Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
Certificate issuer:       /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Certificate serial:       019FAB63D332F532FF9F208378DA2CD6E3C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 01:01:13 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:13 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:13 +0000
Files and hashes:         1: 2XedQ5Z42dY_hRwTsKx81Lezyfc.roa (hash: X9ztJb3Rfx+FojOZ+RViUwDKlFgWmcbx151sFFMV0Eg=)
                          2: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: wpJNk4L7cIa3rHfPr4Oka5ahsvVUjS1LSkuotffeDoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:d3:32:f5:32:ff:9f:20:83:78:da:2c:d6:e3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
        Validity
            Not Before: Jul 29 01:01:13 2026 GMT
            Not After : Jul 30 01:01:13 2026 GMT
        Subject: CN=7448a07a707b7908b4937a87717bd5326cb50b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:af:e4:8b:ab:d7:45:91:e5:40:82:05:79:
                    71:31:d5:bf:97:74:ca:a8:27:c2:c3:2e:39:77:51:
                    b7:48:30:1f:c0:ed:f1:49:22:68:6c:b8:dc:91:ae:
                    98:97:22:42:8d:be:d4:9a:97:40:41:59:de:b4:7c:
                    d8:bb:ed:e0:ae:3c:35:96:ef:d2:91:39:b6:0a:d0:
                    04:6f:cc:a5:62:72:07:4b:d7:4b:8c:11:5d:77:9d:
                    6a:04:da:2a:ae:bb:9e:49:43:cd:87:f9:12:23:e7:
                    7f:64:40:98:0b:6a:14:f0:9b:ac:16:c4:96:c7:11:
                    48:56:99:92:c7:d7:0c:a0:f0:ce:49:98:cf:aa:91:
                    e4:a7:f9:75:65:4f:36:3e:d5:3b:00:32:ed:7a:0e:
                    6c:b9:7c:65:74:4d:cd:e6:a4:8b:8c:5a:64:b5:f2:
                    d6:4f:6f:f8:f0:41:b3:99:e4:1a:a1:53:cf:80:c7:
                    07:45:e7:79:43:d6:15:ee:75:d1:1d:c1:a3:f4:a7:
                    96:77:43:35:43:12:e3:51:9a:40:47:3a:b6:b1:bf:
                    30:70:ff:b5:fb:b4:1c:2c:49:24:72:cd:ce:85:a6:
                    52:b0:05:3c:81:21:a6:47:72:c8:7c:70:66:dd:40:
                    e2:bd:91:27:4a:67:0e:94:7c:24:d5:57:12:11:ab:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:48:A0:7A:70:7B:79:08:B4:93:7A:87:71:7B:D5:32:6C:B5:0B:34
            X509v3 Authority Key Identifier:
                keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bf:1c:ae:60:f5:ca:b8:c0:25:c3:8f:69:9d:96:68:84:9d:
         76:43:1e:bd:3c:be:28:18:8e:4a:06:08:2f:4c:c4:08:65:89:
         7d:82:e3:38:ba:65:89:63:4a:f8:a2:1c:cc:b4:f8:3e:88:92:
         fc:70:30:81:15:8d:11:6f:3a:4d:e2:22:ef:a3:81:0c:81:76:
         65:ef:3b:0e:75:5e:d5:9b:84:6b:6f:d2:f2:c1:3b:7d:b5:9f:
         f9:f7:17:58:73:b6:57:1c:8e:6b:f3:02:28:7a:9a:6d:cb:46:
         eb:3b:19:f1:76:e8:2f:19:c7:d0:2f:25:c6:47:1d:df:d4:42:
         9b:26:05:00:56:cd:02:cc:e7:0b:92:e0:ff:ce:19:11:6c:f8:
         36:60:76:3c:6e:49:c9:06:42:d6:4f:8e:53:ca:b8:d2:66:6f:
         67:ba:41:be:4e:01:ec:ae:6d:64:9c:16:ad:39:f7:8a:e6:b0:
         fe:a3:db:6a:5b:43:f5:e5:af:7d:10:15:88:ad:e3:b0:c7:bf:
         6d:98:d6:a8:98:44:bc:d5:86:45:ec:67:25:15:12:19:5f:8e:
         d0:1a:13:0f:6f:4e:3c:6a:d9:c0:75:c3:03:2e:11:29:b8:5f:
         99:81:88:36:93:3f:7c:bb:52:aa:ee:ef:b3:2c:06:ff:7b:ab:
         58:0d:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:50:06 2026 by rpki-client