Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File:                     sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier:          5HznSGoD/Kn7cSiXYzospNRHWN/WsIErUM8dknGw4jI=
Subject key identifier:   C4:58:21:28:0D:6C:B2:E5:F6:50:F6:52:1E:AD:66:68:E1:6D:94:85
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer:       /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial:       019FA899FB5BE3D5754658D5116DD94D72A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number:          12DD
Signing time:             Tue 28 Jul 2026 12:01:31 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:31 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:31 +0000
Files and hashes:         1: 1ZD-5sWPvLvF_F5r7aK4sjXeBa8.roa (hash: 9g3E8L94O35utFKdVj/OF7X+jv2TAGMuo7bfCk2FBWk=)
                          2: Jgh8TRgca-Yzk4zbDo1y-y8oAjA.roa (hash: 1YiIe3dsEVG85vOw2eS5VT5pNrhUblvJwxJsfNgGFh8=)
                          3: kpO4RG28fYYVmBuJSIXGaHvSxU0.roa (hash: i8inyU2Y1UbsH+wXnBk66d0sVuBHQPuFEaJpwKKuPzA=)
                          4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: 9p3q6ezwyW8pmXKLq6ndUvUKmpf0Mlx0ZVlLGrzOzqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:fb:5b:e3:d5:75:46:58:d5:11:6d:d9:4d:72:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
        Validity
            Not Before: Jul 28 12:01:31 2026 GMT
            Not After : Jul 29 12:01:31 2026 GMT
        Subject: CN=c45821280d6cb2e5f650f6521ead6668e16d9485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5b:9e:41:a4:b5:31:ae:c0:43:be:0d:af:38:
                    01:71:25:9b:93:f5:b2:66:2a:e2:35:41:4a:c3:d5:
                    12:8a:24:f3:26:b5:d3:c1:91:bc:df:44:5e:a2:c5:
                    85:a4:51:48:9e:b8:d6:b4:49:af:54:e5:8f:c0:02:
                    15:d4:a2:40:41:73:30:92:61:4c:ce:06:df:2f:3b:
                    ea:c5:2d:ab:32:ee:08:66:b1:2a:e3:fa:b2:f9:30:
                    30:e9:75:1a:c7:0a:5e:47:24:86:e1:2d:cd:fb:69:
                    9c:09:1b:34:27:2d:7f:90:34:9b:1d:28:72:34:53:
                    35:c8:17:28:45:81:24:07:f4:ad:31:7d:e1:f7:6b:
                    b9:92:ab:f6:3a:4f:91:9e:a7:33:3a:2e:ff:bf:3f:
                    4c:59:9a:1e:bf:6d:b8:6d:01:29:a7:80:19:01:a8:
                    ce:de:86:eb:18:53:d6:a4:45:d4:c2:b4:c5:a0:03:
                    75:8e:71:cd:2f:5c:63:9a:55:0e:2c:53:7e:3f:95:
                    b8:fd:74:e6:90:d1:b8:9a:50:27:66:0e:06:bc:ea:
                    4f:d2:6b:be:e5:6e:8f:c4:32:ab:fd:9f:ca:c6:08:
                    1b:c6:fd:e8:48:34:66:22:21:23:b9:9b:75:b0:9e:
                    e3:e4:06:9e:f3:c7:ea:44:39:aa:54:00:84:f0:70:
                    41:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:58:21:28:0D:6C:B2:E5:F6:50:F6:52:1E:AD:66:68:E1:6D:94:85
            X509v3 Authority Key Identifier:
                keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:fe:3a:43:7d:11:a1:0a:a4:26:aa:d1:52:45:aa:f9:35:bc:
         07:5a:5d:39:b6:c0:26:37:6c:82:bd:0d:c2:6f:04:f4:04:ff:
         52:5a:81:48:ef:17:4a:65:a6:09:8f:71:38:2f:1b:62:84:9d:
         0c:b4:95:0a:0e:8a:33:21:5a:85:30:da:09:eb:1f:09:2f:66:
         fb:31:42:d7:63:3a:d3:ae:01:4a:9c:82:7e:f5:be:52:34:7a:
         3a:59:33:37:a8:38:1f:2f:26:6b:9d:c4:a1:ae:2f:c1:f2:64:
         58:f2:a0:39:f2:27:29:f1:63:b8:97:6c:64:05:9b:35:f1:86:
         96:8a:a8:33:f2:e8:d4:42:1e:aa:7e:2b:fd:43:a6:60:8c:94:
         0c:05:1b:4d:2e:d1:f8:13:1f:ed:35:fb:d0:95:70:4e:3e:5a:
         38:b9:0b:bb:f9:09:cc:06:c4:e8:c1:cd:0f:2f:67:18:ce:8c:
         fa:b4:80:ba:ed:ac:ca:13:11:c6:29:34:ee:ae:f2:02:a8:96:
         f4:c4:e1:a2:8c:4a:31:01:44:6a:4c:b4:9e:d7:b9:19:36:67:
         89:1b:c8:13:21:32:8f:8f:15:92:09:41:c4:e6:e4:21:e2:cc:
         ea:99:15:31:92:e1:97:2c:0d:6f:71:31:3a:02:b5:4e:4c:8f:
         bb:11:f8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:18 2026 by rpki-client