Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
File:                     U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft (raw, json)
Hash identifier:          wn8mjQN/3lZRs8p1HEFanipqKuylwEmpMgJXo+VbmOE=
Subject key identifier:   09:CD:42:A1:83:AA:28:D7:47:07:18:B5:CA:D9:44:DE:84:33:94:7B
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Certificate issuer:       /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial:       019FA9ABA9D05215B66AE4D7663198F08472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
Manifest number:          106F
Signing time:             Tue 28 Jul 2026 17:00:27 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:27 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:27 +0000
Files and hashes:         1: 2v8-VRWu7ZQ7kaqtMJAMf8fXUB4.roa (hash: RUjaAMUiVfvMndNs5Aj41yn805YqU9Z4t95Kt6bJ84M=)
                          2: 8cnYIAFov8XyQ7mz1E9Sdbppeps.roa (hash: djldwC6E58AUQMRWAx9zysCU5AJ6c7wvZ0F1503TLkk=)
                          3: KwmyiRC_z9hBeAnC7i3MkCttPhg.roa (hash: RYQ+8HBwCcHX5dXE4t1Fu0qIu5oQb2OLAyRR/Oum9+k=)
                          4: OwXJ8_aEBHXSy1C37RbJt1tMNVE.roa (hash: qtj2hH8I97IITpCpJRG/cr14e5foNr9LkXNGjgwaZLo=)
                          5: U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl (hash: zNuKtS8acWvWZk5q0k6ZRVfz/xZvj5bHpLvpodWK9kI=)
                          6: olvyqzuNvXrGeqfRmEUXNufvjIE.roa (hash: Hprl8Pe8mPAC17YXAu41Cy5RqBefPMudPYxyfqJmQBk=)
                          7: pgXOO-X2YoQD1xUfgpwy2AJKCd4.roa (hash: A+gEG2oAGHzvq6lumOztmhDUDyh36zMLQy0QLJwvsGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:a9:d0:52:15:b6:6a:e4:d7:66:31:98:f0:84:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
        Validity
            Not Before: Jul 28 17:00:27 2026 GMT
            Not After : Jul 29 17:00:27 2026 GMT
        Subject: CN=09cd42a183aa28d7470718b5cad944de8433947b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:dc:ea:05:ce:84:21:24:79:9f:ab:37:22:
                    02:d3:dd:36:62:89:f2:d2:5b:9f:85:d4:ee:25:66:
                    3c:68:da:41:0a:9b:24:4f:6f:c2:17:00:0b:3b:57:
                    8d:29:c0:d9:dd:04:fb:0c:cc:7d:a1:12:67:f3:32:
                    dc:af:bb:1c:5d:99:4e:08:5e:92:28:a5:f1:ce:f5:
                    1f:4a:75:18:27:c8:a8:51:57:bf:a7:1d:31:9d:c2:
                    c4:eb:6e:78:77:dd:19:c4:fd:db:d8:01:0a:c5:e6:
                    13:b5:41:25:dd:23:ec:19:87:24:6c:c6:52:92:1f:
                    fd:24:52:39:82:b0:c1:6d:76:a1:1d:c0:6a:ec:30:
                    e0:ac:7e:ec:50:dd:c7:04:c9:ba:f0:2c:59:78:a1:
                    59:45:54:6f:ad:0f:1a:c8:0a:ea:93:6b:c1:ee:f0:
                    c6:19:12:74:b5:69:6a:50:66:90:21:e2:68:7f:8c:
                    8d:58:44:99:d6:73:b2:fa:d3:af:f9:61:b4:3c:82:
                    91:f4:36:7c:ff:d2:aa:25:f5:f9:69:e5:6e:ba:68:
                    1f:94:71:b9:81:47:c3:0b:15:cd:cf:ec:da:97:f5:
                    1a:1f:2b:f0:05:00:b4:66:3d:df:25:2f:2d:d9:c8:
                    c5:25:a1:9c:c0:52:29:42:f2:a1:4e:21:1a:f4:e6:
                    78:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CD:42:A1:83:AA:28:D7:47:07:18:B5:CA:D9:44:DE:84:33:94:7B
            X509v3 Authority Key Identifier:
                keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7f:68:51:df:0e:41:9f:b4:60:e0:e2:c7:51:3e:dc:82:38:
         f6:4c:64:06:81:7d:a6:6e:7e:38:d2:5d:1c:92:f1:63:b4:77:
         19:d6:37:64:8c:3f:e8:94:15:da:20:18:b0:a2:9c:ad:0d:65:
         99:13:44:ac:05:7a:cc:e6:10:c0:d5:a0:66:5c:1a:a0:82:a7:
         5a:fe:2d:64:5d:0b:6f:f0:1f:ad:6c:6f:42:39:08:f8:81:76:
         62:f9:24:19:e8:ea:f2:c8:4c:5e:6c:15:a3:8c:fb:f8:c4:02:
         2c:56:36:73:fc:83:41:d4:0f:47:55:86:58:98:e5:d0:db:16:
         08:7b:e5:6d:9f:1d:30:bf:9e:a1:d1:08:e3:48:03:17:70:43:
         5c:70:af:7e:f9:f3:e5:bd:59:db:a3:82:73:70:11:de:6c:cf:
         6b:70:0f:2a:c1:40:91:c3:d3:e8:3d:3b:ef:23:af:a7:2a:b2:
         a4:b8:ce:2b:c5:f6:f3:fa:5c:e7:52:77:56:b1:85:b1:25:56:
         9e:c3:9e:83:08:46:10:10:12:f7:ff:9e:42:1d:7f:40:15:9f:
         a2:db:05:d2:3c:22:fc:60:7a:44:59:a7:af:b6:fd:2a:cd:5e:
         a9:75:39:17:ad:f7:e6:aa:a6:d0:c7:2d:fd:71:a6:3d:0e:c9:
         85:c5:c4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:03 2026 by rpki-client