Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File:                     1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier:          /S4DBd6BawJ3iUgHOQvHJXGO5vafYAZ+315jIeuL86Y=
Subject key identifier:   49:2B:BF:CA:9C:7B:CB:57:8C:5F:DA:43:CA:C0:E7:38:E6:BC:16:3A
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer:       /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial:       019FAABEA5CDA533642D38EEE3D73E9038FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 22:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:48 +0000
Files and hashes:         1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: b/L1lg4V3Y2mdR2Tk6FQnnBbdo1delXMxeDps5rEeEc=)
                          2: Xt7SYxDoMD7f1JMsQqo2iBPwXMs.roa (hash: WGtYGe9kCICp8bvBpPPbaske1TWvTE4WqSyYb2snIwU=)
                          3: cAmf4fFwxBOF5X-O_EChDpWAvt8.roa (hash: S1GNYBesOR3SinnMOoqnXekNsmRmZx3vpxOqHl53nP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:a5:cd:a5:33:64:2d:38:ee:e3:d7:3e:90:38:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
        Validity
            Not Before: Jul 28 22:00:48 2026 GMT
            Not After : Jul 29 22:00:48 2026 GMT
        Subject: CN=492bbfca9c7bcb578c5fda43cac0e738e6bc163a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:3e:a9:14:4e:cd:b4:6c:ac:fd:9a:f2:7a:
                    9b:e6:a6:dc:1c:bd:98:fa:1b:89:31:82:e9:8a:58:
                    c9:b6:2f:72:c5:4d:a7:b8:fa:ed:d3:0d:a1:78:62:
                    8a:74:2b:11:a5:72:28:95:e2:3c:4a:2e:9c:cf:47:
                    7b:e4:53:a0:bc:8c:7d:43:86:d8:d7:5e:98:5c:bf:
                    8e:ec:1b:e6:17:f3:07:d6:be:37:ab:71:d4:51:85:
                    38:ff:00:9d:fd:a8:81:9f:fe:c5:56:c7:ff:b1:ed:
                    0a:65:26:6f:17:89:ba:ab:1c:90:20:dc:f5:bb:3f:
                    7e:1d:2c:a2:bb:b8:57:7e:3b:09:17:c4:d0:25:21:
                    bb:ec:fa:a4:64:2d:bf:0f:43:7c:44:fe:d3:f5:4b:
                    6c:2b:1a:7e:89:be:48:02:93:5b:90:92:68:14:6b:
                    33:e5:e4:c9:f0:be:cc:d4:45:33:26:ec:25:4b:bd:
                    2d:2f:cd:be:3f:aa:eb:a3:b3:90:e0:b2:81:6a:01:
                    d7:cb:ec:41:d5:8f:dc:c7:96:a0:e2:0a:26:11:b2:
                    64:57:5a:a6:a2:3e:1b:32:b6:18:e2:53:b9:7f:3e:
                    e2:30:7c:e8:30:98:57:42:d9:1f:1c:4f:b7:75:3e:
                    42:77:d8:a2:09:cd:53:7d:86:28:6d:32:58:f1:78:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2B:BF:CA:9C:7B:CB:57:8C:5F:DA:43:CA:C0:E7:38:E6:BC:16:3A
            X509v3 Authority Key Identifier:
                keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4d:9f:60:6b:36:10:a2:16:ec:83:47:a3:f6:c5:0e:ed:4a:
         e7:ea:bd:ec:44:92:c8:4e:21:b7:2d:be:cb:9c:73:b1:c0:a2:
         1b:c4:77:59:b3:a8:1c:38:80:8b:f7:e1:bb:1e:1d:e5:f7:3f:
         74:3c:d6:68:5e:db:c9:c9:5d:07:59:9b:85:56:b3:e8:2c:a6:
         ba:80:55:57:19:7c:6c:fe:cb:ff:47:50:d6:cd:cc:cc:a9:f9:
         4d:01:35:1a:48:6c:bf:45:a8:ad:ef:94:c1:46:22:b6:b5:ba:
         12:82:7a:37:1a:60:01:5e:2f:c9:45:55:63:92:83:b6:c9:83:
         03:b7:3b:88:ae:cb:f3:76:e7:cf:6c:69:e0:83:85:4f:53:4c:
         08:dd:86:1f:8b:a1:76:16:bf:d2:f2:7d:fa:d6:22:b4:35:e3:
         18:4f:e2:f6:6d:a3:04:57:5e:99:3a:64:99:93:30:cb:7e:54:
         4a:a0:47:a1:2f:e4:d0:02:8c:c5:32:6b:1d:6f:21:6c:6d:a2:
         11:72:1d:65:02:7e:bd:a6:f0:b2:aa:e1:47:65:66:ea:07:ca:
         66:0f:bb:c5:2a:40:76:11:4d:c6:1d:d9:13:88:45:5f:ce:fa:
         90:3b:8f:ac:fb:36:16:e9:a5:6e:b0:68:5b:26:b7:61:61:9d:
         c6:32:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:12:19 2026 by rpki-client