Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File:                     987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier:          7fdUogEGM0t3YoStpHWmpfFIHqFcnOPWRCstcDCArMU=
Subject key identifier:   B0:F8:DB:56:16:88:CD:7E:96:05:BC:79:3C:34:50:B9:E2:34:81:C6
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer:       /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial:       019FA86256C99B43CC538A5695FFC10F71BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number:          1193
Signing time:             Tue 28 Jul 2026 11:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:44 +0000
Files and hashes:         1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: ZOKc2Q0G3r2EozP1JIYVIMdYQxcAFutrp19/iGGBTaA=)
                          2: q7302L2OQ1J4JgKpMluxPnKa3L4.roa (hash: CogkGEqQAlbPJasD50LgFH8JZg8Ucl8+7Lw8QmjihaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:56:c9:9b:43:cc:53:8a:56:95:ff:c1:0f:71:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
        Validity
            Not Before: Jul 28 11:00:44 2026 GMT
            Not After : Jul 29 11:00:44 2026 GMT
        Subject: CN=b0f8db561688cd7e9605bc793c3450b9e23481c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:0b:e7:cb:23:ac:62:c5:c0:08:56:98:78:
                    38:30:52:f1:28:6e:a3:f1:04:69:7a:98:8c:42:03:
                    e6:17:23:81:ee:70:8b:32:51:64:9a:7b:30:1a:b9:
                    44:8f:63:48:0c:7d:98:b6:d5:b5:aa:3b:97:a5:54:
                    f5:86:1e:fe:59:a4:a7:a4:9e:18:5b:5a:59:85:da:
                    ba:2e:6d:32:33:e1:18:cf:e1:d6:53:75:dd:e3:ce:
                    de:d6:4c:3b:ca:b7:b9:50:41:0b:69:14:fc:c4:b0:
                    f6:f6:52:cc:db:5b:f2:90:41:bd:29:94:6b:6c:95:
                    b2:15:91:4a:21:7f:cb:f1:03:ec:ab:22:29:ec:ac:
                    de:c8:51:dd:88:16:21:dd:34:e6:2c:dd:1a:23:59:
                    be:49:69:34:f3:5e:c0:90:e5:03:bd:2b:a1:95:20:
                    31:65:da:af:4b:ee:c8:19:11:e2:af:d0:c4:a9:f3:
                    98:b9:92:12:9f:fc:35:02:ad:3e:05:34:cb:0b:98:
                    7f:76:29:1c:a6:35:29:ad:09:16:e7:e7:57:46:e5:
                    54:a8:08:ca:71:a7:28:36:5e:43:96:85:67:6d:c6:
                    ef:46:1d:b8:6d:ac:c1:3c:0a:f0:a1:78:71:4b:09:
                    c5:1e:08:28:38:4e:98:c1:a1:0a:e9:9c:9b:1e:0d:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F8:DB:56:16:88:CD:7E:96:05:BC:79:3C:34:50:B9:E2:34:81:C6
            X509v3 Authority Key Identifier:
                keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:ef:12:d2:fc:17:12:17:cf:e8:e3:13:9a:c3:92:61:d8:
         02:79:93:74:39:77:14:c0:f9:37:98:bb:8c:72:d6:f9:a8:ce:
         b8:c1:03:37:ec:ae:d0:c9:2f:33:17:0d:42:a1:52:e9:96:f7:
         e6:e7:cd:97:f3:d9:fb:98:db:b3:de:64:ac:c6:77:b3:64:75:
         85:43:19:27:b5:56:97:10:69:69:34:f3:01:f9:85:6f:d6:46:
         a5:4d:f2:1a:df:30:fa:ed:3c:06:66:92:42:0a:17:eb:9a:f9:
         9c:20:a6:72:53:b4:4c:5e:36:21:db:18:89:75:2d:a4:92:50:
         6d:4e:bb:ed:49:32:df:44:5c:89:10:d8:0c:40:76:ca:41:9c:
         a6:eb:b4:35:15:81:86:ee:20:a0:8b:8b:81:32:00:43:ac:cd:
         6a:cb:f7:40:68:c9:5e:7e:ba:57:bb:eb:03:2b:11:99:4b:53:
         b9:87:f9:a6:fa:c7:79:dd:f9:96:de:48:f6:3c:19:01:86:13:
         75:67:43:0f:7d:44:38:38:49:a2:ea:8b:e5:cd:5c:62:aa:09:
         23:31:2d:bc:14:b8:cb:35:bd:fc:a7:77:99:bb:36:6d:e4:e8:
         14:1a:f0:be:8c:e0:ae:42:fc:f0:78:7a:60:c5:49:9d:b0:80:
         47:59:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:41 2026 by rpki-client