Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File:                     yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier:          neJnsO1KVRujv5ZMZLm+JzGGqUiqOSACrODCmIbXoPM=
Subject key identifier:   3D:52:08:77:BC:5F:04:E1:32:A3:26:BD:F0:77:D7:83:B1:DA:4E:03
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer:       /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial:       019FAC08577BB04A470B75970207F7B51C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number:          19D9
Signing time:             Wed 29 Jul 2026 04:00:55 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:55 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:55 +0000
Files and hashes:         1: KuXwmM2lQvdKIC2B0b3rsQo2KEo.roa (hash: est3JhVR619cOv4Uosy6GyDA6CD78dYPQN9NmwxN838=)
                          2: _JOKPZqcfiucPtK6kvV2lQrbnr0.roa (hash: nm260FM+WPlu0nfW5ryQo/yh5QD+PAvLx2X4UhvgpfE=)
                          3: cisGlTDG6YbGvbXjq8ObLwOftto.roa (hash: B+cjo1pRI6fh+IOCsdjVyvdJ7iW7PB7/BMnta8fuFho=)
                          4: kMSjqJOrzJDpG8FFrIFiinruuxs.roa (hash: qq+kGxkHnwsPE0vpu7WxOqMNZmZUOTdi5OXzBh28VFs=)
                          5: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: D0pE9ZKcT4MY7w0Jp7St5wKQhLpNzaVhOyCIWPXubWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:57:7b:b0:4a:47:0b:75:97:02:07:f7:b5:1c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
        Validity
            Not Before: Jul 29 04:00:55 2026 GMT
            Not After : Jul 30 04:00:55 2026 GMT
        Subject: CN=3d520877bc5f04e132a326bdf077d783b1da4e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e0:ec:4e:05:00:4c:33:52:f4:41:5b:b0:7e:
                    2a:10:5a:59:b8:f4:7c:b8:f3:89:0a:49:3a:e6:e5:
                    d6:0e:f9:57:49:f2:70:14:c2:ac:c0:25:1b:96:63:
                    c7:cc:f3:90:08:88:9d:9a:ba:97:0f:86:65:3d:d9:
                    60:d3:92:36:ea:68:f5:54:4d:04:b8:a6:76:6b:5e:
                    be:39:5b:db:75:63:c4:9e:98:81:b7:83:ad:be:26:
                    9f:92:0f:c3:57:a3:82:fd:42:b6:fb:ec:9b:28:5c:
                    84:af:5d:e4:6f:12:93:d5:1a:e2:9f:4c:b1:36:26:
                    80:ea:57:6b:fd:7b:a7:fe:04:20:2a:2d:24:e7:82:
                    31:ba:cf:81:18:23:85:c0:8f:82:ed:7d:ea:2e:c8:
                    b3:c3:c2:3a:70:f1:3b:3a:90:c4:47:b7:54:e6:82:
                    74:97:90:f7:ba:ff:fb:71:ad:ab:8c:51:e0:c7:92:
                    d7:13:d0:c4:fb:6b:e3:5e:8d:40:c0:8f:4a:f2:04:
                    56:09:3f:3d:7f:e4:ee:f7:95:b9:e4:fc:a6:a2:26:
                    cc:f7:85:2d:a3:a2:2f:0f:f4:e2:c8:fc:d4:bf:a4:
                    57:92:dd:80:1e:ef:a1:b0:94:61:0c:bb:a6:63:39:
                    2c:0e:a5:3a:c2:c9:18:2b:c1:0e:55:a8:ed:dd:ae:
                    5c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:52:08:77:BC:5F:04:E1:32:A3:26:BD:F0:77:D7:83:B1:DA:4E:03
            X509v3 Authority Key Identifier:
                keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:74:c2:c9:2c:9d:95:35:45:5b:60:11:04:c2:20:d8:91:ff:
         f4:84:84:4d:71:69:c8:05:f9:22:7a:a9:e8:94:ed:f2:23:08:
         66:66:eb:4d:e8:9e:9f:44:cf:1e:97:fa:52:cc:02:d1:2f:8b:
         da:3c:db:89:34:35:d3:ec:01:fb:92:5b:29:52:d6:bb:55:64:
         0b:14:02:22:5e:a2:0d:7d:d3:56:2e:33:28:74:69:25:92:2a:
         43:4c:12:05:af:60:72:37:fd:68:f0:8c:4b:cf:92:62:a9:11:
         a2:c1:e4:11:0e:08:d6:0d:08:4c:55:17:09:bb:51:ba:d7:6a:
         46:11:83:ea:7b:75:39:72:03:5a:83:96:d5:9c:48:c6:28:58:
         16:26:b9:aa:9d:0d:94:e3:30:cf:64:46:5c:8a:5b:14:9e:9b:
         39:11:36:96:73:e0:14:0e:a2:63:9f:55:03:08:aa:0e:00:82:
         75:d0:dc:5c:06:91:28:b0:cb:4d:a3:ba:89:9f:7f:bf:96:70:
         90:8f:85:02:0a:73:71:91:dc:76:d8:98:95:6a:f0:2f:b7:d7:
         f5:94:59:80:32:f4:04:de:e1:95:60:9f:cc:4a:9c:c3:99:b4:
         dc:36:59:ae:ab:8c:53:d7:24:8d:c7:bd:8c:b6:d5:ea:90:94:
         64:1e:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:39:51 2026 by rpki-client