Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File:                     mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier:          +FPw3zGPNOu3k6TEwMAi1pAf43kHtYSODNLyTAtKlPE=
Subject key identifier:   00:7D:D0:99:6A:93:75:33:3B:0E:C0:6B:34:BE:64:31:47:4D:A3:29
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer:       /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial:       019FAA504CF9AD9D2D066A202B3AE03A68B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number:          19DA
Signing time:             Tue 28 Jul 2026 20:00:17 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:17 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:17 +0000
Files and hashes:         1: 9WusnEA7UsiroKwVXFKCOaUJb3c.roa (hash: fb+KrV1ZjwlDY775gAvNE53AejRLewrgw0HPLBs+ie0=)
                          2: EpVqLX2wGdjg6RHIKlcFAYrzxZM.roa (hash: I+GdKkkhDVqSQlbstKKL56Ml+Mm3LF7CHLrw/iB8Sm0=)
                          3: IkDgMGh9UUmRviqmiJ_OYP1f9S4.roa (hash: RuDafgx85YwCS+Dkl1AZk67UPodQ/qCtU6vOrFp0Dc8=)
                          4: aT21_RL1m6rGeB-ld5KbAq-VyRY.roa (hash: igzeABuSc631EbNOWtmlhHktMnf95zdqHlwzunblRoQ=)
                          5: ahiZqqU1sLMyuZr836gd9oxj7Kw.roa (hash: ihPj0GX7KiHEc0nRL0sGVIybPI61K8/7t6F6pKkft+0=)
                          6: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: S444dhSFyg1uiP9N0DakMby40bVrhJTa+DY+9rilclk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:4c:f9:ad:9d:2d:06:6a:20:2b:3a:e0:3a:68:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
        Validity
            Not Before: Jul 28 20:00:17 2026 GMT
            Not After : Jul 29 20:00:17 2026 GMT
        Subject: CN=007dd0996a9375333b0ec06b34be6431474da329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:53:c7:18:b0:02:37:9c:4f:38:cc:dc:91:b5:
                    09:08:f4:6b:48:5d:27:99:77:a1:91:36:ff:59:74:
                    b6:ad:b8:ad:75:9a:2b:dc:f7:6c:4f:65:22:3e:43:
                    24:24:ce:3a:50:c8:14:80:15:a6:5f:4d:24:70:32:
                    5c:1d:fb:87:aa:fa:c3:e0:ae:b4:46:64:11:c6:2f:
                    e2:1a:89:11:91:31:4d:28:89:f6:c3:85:80:b4:ee:
                    12:2d:c0:1c:b0:55:21:25:2c:37:e4:9f:7e:b4:a2:
                    4b:7b:f7:a9:0d:f2:02:e1:7e:6f:9e:84:b5:65:0c:
                    97:1a:51:97:3d:d7:d1:71:ba:49:c4:33:e3:21:6b:
                    75:8d:3e:af:cc:db:f1:a0:5d:07:3d:48:5a:8e:c4:
                    c7:88:2e:d3:57:bc:81:3b:5a:43:99:fd:85:05:7f:
                    d3:e5:e8:34:14:05:a5:71:7c:7d:4d:2a:d6:f9:30:
                    3f:ce:1e:1a:1f:5d:6c:d6:39:a9:d4:1a:36:8b:cc:
                    5c:0c:81:15:a3:a8:84:ae:19:25:ea:21:73:29:a7:
                    35:53:9a:e7:50:17:9c:26:e5:b3:18:21:9d:48:9f:
                    a2:3a:bb:82:3e:a7:6a:0c:09:5b:82:f7:83:ee:a0:
                    d1:40:ff:28:e7:c1:7f:2d:04:90:a5:15:bb:fe:19:
                    ab:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7D:D0:99:6A:93:75:33:3B:0E:C0:6B:34:BE:64:31:47:4D:A3:29
            X509v3 Authority Key Identifier:
                keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:84:69:20:8d:d1:d3:ab:bf:92:9e:e4:6b:d1:75:aa:f6:2f:
         d9:e0:d7:db:db:38:13:06:de:45:27:6c:fb:2d:97:04:4e:7b:
         b1:17:f9:3b:bb:c8:59:5b:89:a6:34:c3:75:ae:10:9e:61:05:
         fe:e0:60:ec:28:59:91:24:b8:18:72:c9:eb:ab:72:e5:c1:a4:
         6f:6c:38:2a:c4:73:32:46:b2:25:a9:3f:45:0f:49:93:68:20:
         51:7c:e6:47:03:c8:57:0c:32:d3:9e:ee:cd:a1:7b:d5:0d:96:
         3f:09:9f:e7:8d:60:db:e2:68:df:ba:cc:2d:b4:88:ed:89:74:
         f1:b8:66:81:c5:fb:c4:5d:28:ec:ab:84:2d:22:e8:ba:8e:46:
         c3:4b:ec:f0:06:54:c3:c1:8f:39:ea:8d:11:b8:15:e1:de:7a:
         43:db:f4:cd:79:e0:06:8f:35:5f:5c:87:8f:58:e2:14:9a:33:
         46:1e:71:ed:bf:04:e9:48:83:82:7e:ea:35:38:e7:d4:24:a8:
         b5:b9:a2:6c:bb:00:c3:f7:ef:84:f5:5d:46:2c:67:32:22:cb:
         9b:be:e5:8a:58:47:ea:c7:00:1d:41:6e:d4:f1:97:3f:38:90:
         7d:f1:34:50:91:46:98:3d:14:5f:11:1b:29:78:ad:9e:21:a4:
         74:35:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:35:05 2026 by rpki-client