Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File:                     R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier:          2WkKhRTgXu8r7mJe8RyJd9RHmZ73iChH/OlkgON4WBY=
Subject key identifier:   73:5C:95:04:1E:32:50:F8:C2:3C:62:38:11:C6:30:0D:45:B0:23:61
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer:       /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial:       019FACAD511A5045D649B278C310A655DB0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number:          0981
Signing time:             Wed 29 Jul 2026 07:01:07 +0000
Manifest this update:     Wed 29 Jul 2026 07:01:07 +0000
Manifest next update:     Thu 30 Jul 2026 07:01:07 +0000
Files and hashes:         1: EK0F93TMdb3mWGdibqrR_m6Xz-I.roa (hash: mx33ExzlOw54fpOREl279Ht7q+DRDKueDOMyUR0ZqEk=)
                          2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: XqNmD3bUCX/9aAnDQYIDx68lnUgY5m6jBXIi3rwmMKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:51:1a:50:45:d6:49:b2:78:c3:10:a6:55:db:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
        Validity
            Not Before: Jul 29 07:01:07 2026 GMT
            Not After : Jul 30 07:01:07 2026 GMT
        Subject: CN=735c95041e3250f8c23c623811c6300d45b02361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:20:b2:80:58:9b:04:f0:3b:8e:87:73:65:8f:
                    dc:ca:81:cc:ab:09:11:55:1b:44:df:21:6e:ab:80:
                    bc:da:d3:aa:d2:d0:99:33:5a:7c:31:30:7e:58:ba:
                    f4:a9:bd:1d:6f:f1:fe:2f:f7:fd:f1:eb:60:63:74:
                    a1:1c:24:89:6d:be:c8:be:c4:dd:83:fe:2a:94:f5:
                    fd:fb:f8:f2:d5:3b:cd:27:3c:bf:1e:40:7c:30:f3:
                    57:69:8c:43:05:c4:5d:fc:b5:7d:19:3c:e7:14:b8:
                    68:34:3a:98:b8:db:09:9a:67:ff:3e:71:ee:84:a3:
                    8b:1c:69:03:21:6a:cb:e4:60:7f:4b:3a:0a:9c:e5:
                    f9:39:36:af:e1:87:88:55:0b:0e:fa:0f:c6:42:45:
                    b7:2f:90:e1:01:65:e2:33:7e:1c:f2:4a:54:3d:25:
                    ed:8d:dd:30:fb:7f:e2:31:40:ee:c2:13:80:d5:02:
                    4a:ef:57:7a:7e:1a:7f:c4:36:53:4e:82:4b:8e:f4:
                    50:85:52:19:cd:9d:a6:95:c9:9a:18:ae:34:ae:fc:
                    51:cb:0f:2d:c2:f2:01:6d:00:52:5b:01:0f:64:df:
                    6f:de:43:6d:a1:fb:49:96:1e:be:a7:4d:09:9e:df:
                    2a:e3:c5:fa:0e:4b:fa:b4:ba:70:4c:e9:64:ac:6f:
                    b0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5C:95:04:1E:32:50:F8:C2:3C:62:38:11:C6:30:0D:45:B0:23:61
            X509v3 Authority Key Identifier:
                keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2b:41:f8:e3:00:4a:5a:15:3e:d5:66:b3:fe:7d:77:3b:c2:
         d9:85:85:e2:19:d8:d1:9d:48:fb:5f:38:90:7d:51:17:f4:b5:
         03:f3:8e:1e:86:15:02:e9:a0:bc:56:fd:a5:4e:8d:42:93:91:
         d8:f0:5d:1e:b8:0f:1c:fb:cc:f6:03:2d:4e:ae:fe:34:7c:5d:
         6f:8d:3f:20:dd:72:39:16:c7:14:c2:fb:b2:20:39:29:7b:e6:
         c6:18:01:68:18:f5:07:e7:a1:29:e8:ca:77:6e:9f:fb:c7:e3:
         90:f3:42:10:fc:27:6d:28:e0:54:52:23:3e:0c:6a:79:21:18:
         6d:b0:ff:0b:cd:a3:dc:9e:79:55:52:a6:9f:9c:79:66:60:5a:
         86:7a:01:64:b2:9d:5d:d6:05:84:c4:1f:91:d1:eb:68:e0:a9:
         ac:93:ab:c6:25:e2:d3:ee:b1:f4:be:72:3a:0e:73:e2:20:a9:
         97:b9:33:42:9c:98:c9:3b:a9:83:68:2b:11:a4:ec:3f:60:ca:
         88:92:0b:3d:43:c5:5e:64:e7:3b:8e:b9:b3:8f:f7:34:f7:1a:
         d1:08:a1:c6:95:3a:e6:f7:d0:bb:c7:df:b2:05:12:c6:93:d1:
         5d:03:3d:67:20:c2:b8:b7:f9:2e:41:b7:31:4b:02:ad:c8:bf:
         f2:3b:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:36 2026 by rpki-client