Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
File:                     tW8vzp5iphaOKy6UggRb8ssKtug.mft (raw, json)
Hash identifier:          f3pWPLGFs0gKAguzfbzIIa4RMlmRPW7knao+IfX9w6s=
Subject key identifier:   04:5A:A1:C9:6F:C4:C5:E4:F5:CC:69:7F:1D:31:F8:F4:C8:D3:CC:6A
Authority key identifier: B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
Certificate issuer:       /CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Certificate serial:       019FA907C3DA2CCA93722412BE09BA15207E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
Manifest number:          90
Signing time:             Tue 28 Jul 2026 14:01:26 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:26 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:26 +0000
Files and hashes:         1: 3IFlA7XZRz-rJyiUo52SmKm4VsU.roa (hash: Gp8N57OCRY5f9RVcKJ2qU+3skzf1F3jJT8s5mJ+AwBs=)
                          2: h4sliK0wW-wV_fLIV-hVMdt8j90.roa (hash: nC61aBs28ehRtgiS7EhPTBum3rJp7V4Sc7tA8g7RTn0=)
                          3: tW8vzp5iphaOKy6UggRb8ssKtug.crl (hash: SkFc5+CBmnJZ2kvrAliacWkGCPaklsiON2yGnZO1q3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:c3:da:2c:ca:93:72:24:12:be:09:ba:15:20:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
        Validity
            Not Before: Jul 28 14:01:26 2026 GMT
            Not After : Jul 29 14:01:26 2026 GMT
        Subject: CN=045aa1c96fc4c5e4f5cc697f1d31f8f4c8d3cc6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:e4:6f:40:74:16:18:5e:ee:eb:19:70:ad:
                    e4:8a:7e:b2:1a:4f:10:73:2e:d6:30:45:25:94:d1:
                    5e:c8:11:a5:80:04:5e:6a:04:17:40:4c:ea:c8:05:
                    2d:33:0e:e4:07:e0:dc:48:60:36:bb:59:f4:c4:ce:
                    40:c2:37:75:be:b1:19:fc:2a:3e:2d:88:4f:7b:18:
                    d2:29:2c:f4:91:4f:e2:85:e4:8f:1d:58:18:14:0b:
                    de:ae:d3:7d:8f:3e:31:60:df:47:b3:8f:70:9e:74:
                    52:01:a7:37:3a:83:0c:d6:7d:b1:42:7d:38:0f:70:
                    b0:98:20:97:16:ae:30:7a:83:dd:02:88:b8:c1:a3:
                    49:be:e6:99:7f:60:c7:a2:27:fd:9d:5e:85:77:fd:
                    ba:2b:aa:5b:c5:ee:6c:91:d5:b6:cb:db:14:85:f8:
                    c9:59:1d:40:4e:3a:38:d3:83:ac:ba:a7:dc:14:27:
                    71:a5:30:04:1f:5e:d4:37:cc:36:79:e9:ef:9f:b9:
                    db:41:a5:55:0d:c0:1e:c3:73:d9:f8:00:71:47:de:
                    63:ad:07:72:7c:5b:d6:6d:2c:09:11:9d:c7:d1:62:
                    9d:d9:7a:e3:6e:60:fa:b7:01:8a:a6:2f:33:58:c7:
                    40:47:66:3e:85:ea:e9:71:39:cc:e4:94:c9:37:c3:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5A:A1:C9:6F:C4:C5:E4:F5:CC:69:7F:1D:31:F8:F4:C8:D3:CC:6A
            X509v3 Authority Key Identifier:
                keyid:B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b6:7f:5d:24:0e:83:02:18:13:fe:e6:f9:9e:c4:d4:fd:1d:
         56:bf:04:32:a1:80:6e:42:e0:da:2c:63:bf:a7:e6:d1:c9:42:
         e5:d0:17:6a:87:3b:2e:f2:2d:84:02:1d:df:bd:27:cc:83:13:
         9f:57:70:96:ff:1d:e6:71:4a:d0:8f:ec:1b:3d:2e:5e:4c:ae:
         4c:8b:7e:f9:dc:2e:69:60:a5:d6:97:c5:a9:84:6e:ae:d1:dc:
         da:7e:fc:f6:fe:59:7c:2c:4d:6e:5e:00:16:65:18:d7:b4:5a:
         d0:a8:9f:fb:7c:66:30:7a:3f:63:1c:fa:02:f7:9a:1e:90:4d:
         ee:1e:a5:1d:bc:9b:2f:40:72:0d:17:b7:32:04:66:4a:74:da:
         3e:7a:12:01:e6:cf:f0:ed:a5:91:46:a6:5b:68:92:7f:3a:ac:
         ac:f4:c4:bb:89:7a:34:bd:ec:32:2d:cd:98:a7:ba:99:c1:36:
         49:ec:b1:b8:c1:1e:57:c1:69:28:ad:80:07:7c:2d:3d:7d:83:
         29:23:c9:a4:4e:11:5c:12:ed:fe:32:fa:4a:1e:31:0b:f8:bf:
         8c:31:1a:f5:14:be:c3:8f:2f:0d:1b:0a:a7:9a:af:e9:94:d0:
         b6:92:7d:3c:82:98:48:31:50:9d:e3:7a:dc:e8:4c:e5:e1:ab:
         8c:a0:b2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:00:26 2026 by rpki-client