Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File:                     _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier:          LQNaNiPhgxpnpQ9bX8wmhQC+jQKUW1Db4nlUul5lU98=
Subject key identifier:   6A:0B:94:A5:1A:51:90:D2:96:17:EE:B7:74:73:13:83:33:AA:F7:66
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer:       /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial:       019FAAF596A5F37B8EFBD6360179AD2CA97E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number:          0A9B
Signing time:             Tue 28 Jul 2026 23:00:49 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:49 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:49 +0000
Files and hashes:         1: ALLGVKP-5SXjVEpjuKZaujJ3frw.roa (hash: 2IbnRTYsIxpxMkgjyLztl2mAatRyrBZ2hVeLGo8g2qQ=)
                          2: ATMfOPn_iklWkDGZaU6nBEYrMIs.roa (hash: MkgqGmH4i1AY83gSH/fJ/hLhxo7uHROhQ+deiJMJQps=)
                          3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: yXcx/foUwzbE5EIxKRL/wO7E+PEKuO2WY63goghdrFo=)
                          4: gd0apcrdYEI4bPnkTNGJSM4gRa4.roa (hash: p+dDYEXfjkS2FAsmztfw4NEl9rJExwTKxbBp/O3yJJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:96:a5:f3:7b:8e:fb:d6:36:01:79:ad:2c:a9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
        Validity
            Not Before: Jul 28 23:00:49 2026 GMT
            Not After : Jul 29 23:00:49 2026 GMT
        Subject: CN=6a0b94a51a5190d29617eeb77473138333aaf766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:68:de:34:f6:4d:35:3c:cb:85:d6:3e:ba:80:
                    dc:4d:6f:db:9d:16:dc:20:2e:6f:d2:ce:84:56:48:
                    9a:55:69:a9:d6:df:c7:cf:c5:ce:8f:5d:a6:56:fb:
                    d7:2a:9c:98:7f:87:80:5e:b7:da:0d:4f:ba:f3:fa:
                    ce:c0:95:3c:4c:de:b6:32:9a:c1:f8:cc:11:71:72:
                    b7:53:83:be:a0:7e:1d:51:ec:92:7e:fd:fe:d6:45:
                    20:9e:b1:e2:fe:05:96:53:bf:e5:91:ec:d7:ac:6d:
                    f4:32:f6:26:94:08:51:18:99:11:0a:21:b4:e8:ae:
                    94:a5:1e:63:f0:f1:31:84:ba:98:16:c4:b4:20:0d:
                    a2:2e:fc:68:c3:ff:4e:7d:19:7d:a5:02:da:6c:a7:
                    a3:e8:33:85:11:19:c9:b4:3d:db:69:81:8f:9f:55:
                    31:ad:07:4a:41:97:07:b2:c0:19:e6:63:eb:ee:e6:
                    44:f1:5d:ed:4d:ba:9d:67:f9:40:e0:7a:92:83:4b:
                    79:11:fc:6f:bf:45:46:6e:cb:2f:84:ee:c7:0d:c8:
                    3e:ba:b9:9a:d8:d3:98:d7:93:9a:5d:61:cd:71:0a:
                    d0:95:c0:35:ea:b4:0c:60:2b:9b:e9:fb:15:33:4b:
                    34:ec:33:f7:6c:b6:b4:10:1d:c9:27:7e:ac:85:68:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0B:94:A5:1A:51:90:D2:96:17:EE:B7:74:73:13:83:33:AA:F7:66
            X509v3 Authority Key Identifier:
                keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4d:76:76:bc:cd:e7:ae:81:10:d3:9f:f7:5e:9d:c6:46:eb:
         ed:da:df:2e:e1:68:72:64:16:ee:30:c5:f6:c8:bd:ee:22:a6:
         5e:50:2b:d6:19:19:29:6f:cf:d4:52:b3:1a:d7:76:33:e6:97:
         d3:4e:d4:20:ad:d6:63:cb:95:f6:a0:ec:a7:7b:33:76:e5:09:
         a0:2e:5e:d7:06:04:61:58:c9:62:ad:54:59:d6:66:12:65:bb:
         5e:db:d4:ce:19:d6:28:93:e6:b8:c4:fc:e8:d3:8d:b0:1a:a2:
         78:7e:88:ad:67:a7:6d:93:7b:ae:10:bb:8d:fc:4c:54:c2:4e:
         27:d2:ed:ea:c8:5b:db:5d:62:a4:fa:fd:77:f7:a3:3a:f2:98:
         7f:74:a6:e9:07:43:69:7b:dd:01:14:56:04:dd:89:96:15:55:
         02:e3:92:2a:60:ca:4a:7d:47:7b:47:c0:7b:7f:27:01:61:76:
         f1:2d:2c:f5:b5:52:f1:fd:80:dc:81:fd:ca:7a:c3:9f:91:87:
         e1:ce:45:06:ef:e0:77:17:4a:d0:71:af:9c:38:41:92:f6:f4:
         31:b5:93:2e:41:e0:69:c5:55:c7:43:a0:4a:4b:4a:17:8a:e6:
         8d:26:65:68:dc:b8:74:84:57:7a:a1:ff:98:e9:27:26:41:51:
         84:63:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:59 2026 by rpki-client