Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File:                     mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier:          yQ06TaYLfIlqmmrAdF0hhNuBRSUF4lkI/hlQoDaOquE=
Subject key identifier:   AF:B3:0A:60:25:4C:ED:F2:78:9C:A2:BD:12:21:0E:10:18:F5:DE:B7
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer:       /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial:       019FAC08D0AB0B2694FA16E50CAEE97AD46B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number:          077E
Signing time:             Wed 29 Jul 2026 04:01:26 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:26 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:26 +0000
Files and hashes:         1: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: xFdLdPA2Kr5wQVSF2T+fS4VbpQI5oT18xe1F4GZfArs=)
                          2: z_44jtrGJfD6zh9PidW-GJCCXns.roa (hash: wkQhSLVYP9oo4jjQ5UZW99eD0rUSG+lto+V5IH7d35w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:d0:ab:0b:26:94:fa:16:e5:0c:ae:e9:7a:d4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
        Validity
            Not Before: Jul 29 04:01:26 2026 GMT
            Not After : Jul 30 04:01:26 2026 GMT
        Subject: CN=afb30a60254cedf2789ca2bd12210e1018f5deb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:4f:69:d4:ef:9e:25:11:74:34:92:ac:68:
                    5a:47:bb:a2:db:04:cd:e7:3c:86:f3:32:38:f4:46:
                    5e:72:71:4b:3a:d4:d0:1f:97:45:4a:d7:23:d1:51:
                    9f:bd:09:80:2b:36:0c:fd:11:b7:72:d4:c4:27:aa:
                    05:38:77:8b:73:81:54:77:ba:e3:55:ac:30:85:7f:
                    dd:02:7b:45:ba:69:00:76:2c:8b:e6:3f:13:07:7e:
                    da:d5:04:60:17:f0:71:7e:96:48:bb:92:d4:34:fb:
                    30:73:47:16:65:ad:35:7b:40:dd:04:7a:81:b3:2f:
                    a2:5f:22:40:45:f6:93:08:63:83:cc:5a:13:b4:ef:
                    6e:43:d5:7f:b9:3c:69:3f:a1:df:1a:d9:41:a4:54:
                    9c:91:ef:5d:68:b5:1c:9e:1b:84:45:4a:20:4f:b6:
                    fc:da:f3:c0:c4:49:a9:74:10:bf:46:86:31:a6:a7:
                    d3:0a:a2:0f:1e:c0:cf:4b:d3:d5:f7:d0:86:c9:d3:
                    0e:9b:58:63:c5:e0:d2:3e:9d:23:af:cd:44:5b:78:
                    93:0f:07:b6:fa:bf:db:40:a0:98:76:ed:67:88:87:
                    df:26:dd:15:09:13:33:86:81:c4:6b:b7:82:3b:80:
                    44:46:a9:30:38:3c:81:4f:1c:c0:ba:15:8d:57:66:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B3:0A:60:25:4C:ED:F2:78:9C:A2:BD:12:21:0E:10:18:F5:DE:B7
            X509v3 Authority Key Identifier:
                keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f1:d1:98:7f:f2:a8:67:9a:0b:2b:86:ac:cd:46:92:39:78:
         29:8a:41:a6:6f:ba:c1:b0:8a:fa:fa:ae:d2:ad:10:4e:c6:aa:
         f1:9b:e7:94:74:70:0b:d8:e3:17:b0:89:85:07:50:33:a5:63:
         71:cf:f6:8b:8f:4c:f7:93:92:cf:10:c3:d3:e5:65:66:07:c7:
         75:aa:78:6c:c5:4d:e3:4a:a1:3d:1c:08:30:85:f6:6d:f2:6f:
         c9:ac:39:5f:a9:4e:f6:7a:db:8f:22:64:a0:20:23:57:69:0c:
         8c:3a:8e:21:1f:7b:2b:97:80:78:a6:be:f1:26:25:2c:2f:72:
         6a:a6:42:d5:87:08:73:4e:7f:a8:5a:6b:85:5c:b6:a5:34:12:
         c0:bf:19:8f:be:b5:49:74:9b:5f:66:80:72:97:bf:4a:5b:72:
         d7:21:12:7c:aa:2a:92:ff:aa:ee:cd:7a:6c:3a:4b:a7:36:a9:
         91:20:65:60:e6:9a:53:97:4a:1b:77:e7:f3:a7:0c:80:c6:b1:
         0a:75:c7:9d:a5:ac:0d:a2:f7:69:ce:76:9f:f5:a5:31:60:99:
         c2:d7:a0:6a:06:cd:69:bd:7a:72:ac:b7:1d:ef:f4:ad:9d:6c:
         aa:a5:ca:91:6d:31:50:c0:42:15:54:88:00:6e:1d:da:a6:ac:
         50:21:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:16:42 2026 by rpki-client