Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File:                     1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier:          75NjOhGrI764vzlEKUyJlXnFlZsgnOdMaSEf0g+gA2k=
Subject key identifier:   43:DD:B2:6C:18:DB:DA:DD:A6:76:50:05:8E:C5:A3:D6:23:6A:2E:E6
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer:       /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial:       019FAC089E97577581FCF41EF60B96162D5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number:          0C26
Signing time:             Wed 29 Jul 2026 04:01:13 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:13 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:13 +0000
Files and hashes:         1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: c0Z1qV4L7SgH68mC0aOaSQMSt49taXe6JQWGYcSMvXM=)
                          2: 3_W7wx2-fypI1zi7oF8Q3NS1T7k.roa (hash: R18F2OZx+pMzaBIwLtZY9ZTcDCGHNNWTIHQDPwa2kWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:9e:97:57:75:81:fc:f4:1e:f6:0b:96:16:2d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
        Validity
            Not Before: Jul 29 04:01:13 2026 GMT
            Not After : Jul 30 04:01:13 2026 GMT
        Subject: CN=43ddb26c18dbdadda67650058ec5a3d6236a2ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:20:a7:b8:5d:b8:f0:a0:b0:a8:d9:33:72:03:
                    56:90:ca:39:ff:55:c7:c6:54:82:fc:68:da:9a:1e:
                    44:47:f5:7a:d1:47:c2:51:7a:6c:69:0c:5b:92:e0:
                    42:b3:26:15:f7:07:d6:75:da:14:70:df:be:b9:53:
                    56:14:aa:d9:63:18:6e:fb:cb:71:df:a3:33:09:0d:
                    dc:79:14:4d:2d:4e:5a:c9:5c:d7:8f:af:68:65:41:
                    46:dc:03:06:21:38:a1:ac:cc:df:ea:bf:b7:83:2f:
                    2d:54:b6:d9:53:39:ab:09:cd:9a:cf:4f:d6:42:c4:
                    11:a4:fb:af:37:6b:94:c6:c1:9f:5d:56:dc:24:ca:
                    bc:79:f6:57:18:79:9f:9a:e5:08:93:0a:47:c4:60:
                    47:0b:a0:13:4a:ba:3d:5d:8e:2a:a1:0f:04:5c:1c:
                    44:0b:05:20:80:d2:da:fd:79:0f:fd:1a:4a:4b:ed:
                    b5:a0:e8:86:f8:83:31:a3:4c:ed:65:34:3f:f6:da:
                    d0:9b:0f:36:24:d8:41:43:38:27:62:bd:6e:6f:ec:
                    53:6b:f6:9a:29:8e:e8:bc:1e:d3:b3:64:a3:18:1e:
                    47:8b:e4:23:b0:6e:19:b5:2b:ce:63:1c:97:b8:61:
                    22:e9:49:04:6b:d7:93:a9:28:a2:1e:e5:a3:45:7e:
                    1e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DD:B2:6C:18:DB:DA:DD:A6:76:50:05:8E:C5:A3:D6:23:6A:2E:E6
            X509v3 Authority Key Identifier:
                keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:8f:d2:94:c0:7e:94:51:7b:05:cb:e0:b1:d7:0f:c6:18:4b:
         4e:19:60:58:ab:4d:18:4c:68:90:b9:41:5f:04:43:8e:84:2f:
         a4:da:b4:ed:4b:26:85:f0:ae:48:0c:c0:b1:cb:db:59:0d:bb:
         22:53:74:b1:60:2d:6f:21:46:a8:00:29:c9:0e:ca:70:75:ca:
         a7:cf:eb:19:dd:cf:9c:ca:9c:26:d7:06:da:48:2b:9c:18:90:
         42:4b:d0:a8:b5:d8:45:bb:fc:69:a7:98:31:c0:bd:42:9e:04:
         62:5e:72:07:78:69:3e:4a:28:51:d2:5e:89:81:3e:28:a4:59:
         aa:4d:26:ff:d9:2e:4a:c1:b7:5d:56:4f:24:f7:c3:67:8c:04:
         b1:46:dc:b4:5d:43:20:78:03:91:79:71:75:f2:ae:f8:15:f0:
         f9:e2:dc:74:0d:c3:f4:fd:10:8f:8a:b0:30:79:01:d7:8e:f3:
         d7:d9:9e:4c:cf:0b:c8:52:43:d1:03:e5:d3:16:8d:6f:f6:b6:
         4c:31:95:41:8d:d7:f6:34:70:54:bf:bf:0f:31:8e:ba:f5:34:
         ef:3e:5c:4b:35:9f:01:4b:91:7f:06:92:04:25:f3:8e:fd:29:
         52:45:ec:05:9e:41:06:98:eb:56:77:75:b3:b7:0c:dc:d5:65:
         c9:7c:e1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:14:04 2026 by rpki-client