Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
File:                     in2Cv6bL-YO5cDSUAb3veO1mgrg.mft (raw, json)
Hash identifier:          gneGKVfpSG8Wcph40Pgh/nRC1yhE3ozWlCpfPxjvZ0Q=
Subject key identifier:   56:61:AE:D7:DB:EB:81:62:3B:C2:A1:EA:1C:10:1D:10:DE:E6:4C:5D
Authority key identifier: 8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8
Certificate issuer:       /CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
Certificate serial:       019FA90755895181C459A1D8385BB991AD6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
Manifest number:          17
Signing time:             Tue 28 Jul 2026 14:00:57 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:57 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:57 +0000
Files and hashes:         1: hMcWmfOrDrAMf7dFpd9dzvNPNAc.asa (hash: zDEzbE4uwtCgoLiCH/chQKVEo68ut8ck0BWOTkrF+1g=)
                          2: in2Cv6bL-YO5cDSUAb3veO1mgrg.crl (hash: KN7q162nUM1bBeCK2UlalCLkFuZztH6m89OhhOq2Dys=)
                          3: xS8E-QjHw2dzPf1KkLqn10hE7LM.roa (hash: 5/fVJMfp+DX4M6I9ZjhWtgFG3senFJ4L1a5dgOE8EkY=)
                          4: yeXW_YTNCb28ui0glUomJkKeHCk.asa (hash: vdoh5rReyHOdjiVdFljYmY00V/dpR9j9Pzzhrb2/aMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:55:89:51:81:c4:59:a1:d8:38:5b:b9:91:ad:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
        Validity
            Not Before: Jul 28 14:00:57 2026 GMT
            Not After : Jul 29 14:00:57 2026 GMT
        Subject: CN=5661aed7dbeb81623bc2a1ea1c101d10dee64c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:94:df:08:0a:dd:15:d6:60:eb:41:8d:a6:dc:
                    84:8e:22:34:f8:9f:ec:fc:56:44:d2:31:1a:7a:b2:
                    e9:b1:68:21:90:d9:82:66:b0:7a:18:92:22:ef:77:
                    68:af:4b:59:bd:ef:b7:46:93:58:9b:2b:d7:d9:90:
                    11:b1:ca:a4:f4:ec:14:9b:f0:2e:8b:59:d2:f7:df:
                    8a:ab:20:eb:76:b6:7b:7f:92:ce:37:c8:d8:61:b1:
                    c9:ae:c0:3f:be:0b:bc:ce:8d:17:0b:b8:d9:7f:bf:
                    35:2c:df:23:f8:87:be:b7:46:23:a5:fc:2b:5b:bf:
                    16:e9:c2:39:1b:4b:e6:ce:0f:7d:16:26:14:8e:b1:
                    65:1a:23:d2:83:19:12:00:59:d2:9d:d9:83:31:03:
                    ce:8b:98:d8:a4:f3:90:6a:b4:a0:69:17:4c:20:0c:
                    95:25:44:a3:44:86:15:5a:84:40:1c:65:15:32:f8:
                    94:ff:f1:c7:ec:27:02:e4:e8:41:33:86:33:ab:c7:
                    48:52:db:dc:9a:b5:68:47:ad:3a:86:82:02:9e:f2:
                    3d:a3:32:c6:b7:4b:8c:4d:83:64:19:69:af:46:95:
                    dc:a3:a6:19:59:3a:16:99:13:00:d2:76:7d:a8:5a:
                    fe:0d:aa:0b:33:64:dd:a8:89:f1:2b:51:db:c7:c5:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:61:AE:D7:DB:EB:81:62:3B:C2:A1:EA:1C:10:1D:10:DE:E6:4C:5D
            X509v3 Authority Key Identifier:
                keyid:8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bf:09:27:16:17:6f:57:f5:8f:c8:2f:bb:4e:16:16:66:b8:
         42:70:20:c1:2c:b5:bf:a6:cf:51:a3:58:e4:b1:cf:12:30:6f:
         36:0f:58:9c:ba:a3:58:a1:25:e5:85:aa:e9:be:49:84:aa:65:
         89:4b:55:4f:5c:f3:4d:12:6c:9b:23:9a:96:f3:53:5c:18:3b:
         2f:49:76:ae:f3:1f:71:79:0a:6a:e1:83:6b:56:14:c2:f0:64:
         1b:c1:e4:ed:ce:fd:0d:ae:ec:98:10:33:cf:6b:36:9b:e7:d5:
         62:ef:5d:45:df:53:5c:eb:60:7f:b0:07:d0:a6:b3:b1:36:48:
         4b:58:70:86:b9:9e:b4:e0:4d:c0:fe:4d:39:b7:3c:8c:e6:e4:
         89:f3:18:2d:e0:99:3f:f5:f1:4d:dc:ba:32:00:1a:be:11:ee:
         54:8f:58:e5:de:0a:4c:03:db:db:56:97:61:a5:8c:a8:d2:e8:
         a1:62:a6:01:6b:ca:a7:d7:13:1c:eb:f0:27:9d:6b:e0:2a:13:
         bf:a3:36:04:0c:b5:bf:14:9b:bc:b6:45:e3:95:45:f8:bc:ef:
         57:0e:a9:14:fb:9a:74:92:a3:63:69:83:bc:f8:19:23:49:90:
         fe:12:8f:4a:70:44:38:bb:b3:a9:a5:08:ec:8c:8e:0e:a2:d2:
         89:54:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:37:18 2026 by rpki-client