Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
File:                     obtQVKF8yU__wrwpWhW_74qQQwo.mft (raw, json)
Hash identifier:          zEPEk4L3XIcNYZw7t4489nCJr7uepQ3/G2dqz2Xa2j8=
Subject key identifier:   B6:D9:24:47:A4:8F:69:44:48:07:1B:28:A0:BA:25:28:98:7D:AF:2D
Authority key identifier: A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
Certificate issuer:       /CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Certificate serial:       019FA899D7018EB9E94562BC94B95E4D9C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
Manifest number:          09E8
Signing time:             Tue 28 Jul 2026 12:01:21 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:21 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:21 +0000
Files and hashes:         1: 7PC27OPKTmB0TCcSiVXYJK9WFIs.asa (hash: yw12opdZtS3FAbe5nCehts1Uh2Vll7TupGePhAN8/WY=)
                          2: obtQVKF8yU__wrwpWhW_74qQQwo.crl (hash: 7Yui9EaRUZNnntBqc2WWXSC3dg1SXroNvfJUYZLFslY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:d7:01:8e:b9:e9:45:62:bc:94:b9:5e:4d:9c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
        Validity
            Not Before: Jul 28 12:01:21 2026 GMT
            Not After : Jul 29 12:01:21 2026 GMT
        Subject: CN=b6d92447a48f694448071b28a0ba2528987daf2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:22:70:ba:44:cd:e5:bf:58:d5:78:84:8d:
                    35:ed:b7:08:92:d8:b0:d0:55:f4:53:60:07:c9:c4:
                    1a:d5:c8:34:02:23:2e:50:ad:3c:1f:8d:ca:5c:9e:
                    7d:2c:53:c5:2c:1b:c4:ea:b4:95:ef:c3:9a:0f:16:
                    77:09:be:46:99:b0:a0:7d:0b:5b:81:3f:c6:8c:1f:
                    bd:de:a2:ab:d8:6c:0f:80:62:aa:d8:43:94:82:10:
                    78:10:de:1c:73:9b:7b:42:77:0a:8f:84:36:89:66:
                    86:a8:af:e0:73:76:76:3e:05:99:29:93:c2:6f:35:
                    9f:89:a5:84:9e:4a:38:d9:cf:8a:31:d7:05:7d:11:
                    54:34:f6:85:41:10:6c:d0:da:94:49:35:bf:d4:a4:
                    80:40:19:73:bb:e3:95:73:47:67:f2:c0:f4:2b:f5:
                    cd:81:08:6c:04:1c:9e:65:f7:b7:6a:e0:7b:5a:e4:
                    99:b1:56:e6:7e:b4:ed:bf:73:f4:05:55:be:eb:74:
                    f5:ab:cc:ba:ea:01:ee:94:d7:40:2f:11:b7:8b:37:
                    67:a0:15:69:f4:20:ff:36:4c:16:6b:9e:59:4f:14:
                    25:7f:c5:6a:5a:48:79:00:38:73:07:4b:73:7b:dc:
                    72:ef:3c:5b:1f:d4:34:e4:bc:1a:ac:40:67:11:7e:
                    3d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D9:24:47:A4:8F:69:44:48:07:1B:28:A0:BA:25:28:98:7D:AF:2D
            X509v3 Authority Key Identifier:
                keyid:A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6d:c1:39:6f:cc:e1:55:4a:b5:b2:78:41:ef:83:b5:3c:42:
         0a:ce:28:e8:fa:eb:51:c4:a5:17:56:35:91:67:c3:ce:bc:58:
         f7:c8:03:ad:e0:5e:0f:3b:dc:97:74:89:24:4e:61:ec:89:2b:
         99:14:ce:2b:9b:5f:5d:1a:14:df:9b:f0:3c:c2:0c:57:71:53:
         79:22:0b:b9:34:60:0a:56:88:f9:78:2f:9a:eb:57:79:9f:97:
         6e:3a:00:69:c1:67:81:2e:29:45:20:f8:05:03:99:36:bb:ce:
         8d:ec:6d:2f:7a:fc:de:14:a3:17:9b:90:15:fb:2b:b9:6f:fe:
         52:08:e1:f4:55:ac:a3:5d:3e:9a:0c:90:64:1d:c1:94:f9:46:
         2d:78:d1:fd:ad:4f:8b:3c:25:17:6f:b9:c0:73:87:ed:3f:84:
         1e:22:55:c0:8a:42:1a:34:e4:78:4c:fc:a4:3e:e9:4e:9a:ec:
         ee:f5:ab:b3:20:9e:ee:f4:41:80:c4:b6:7e:9f:85:df:7e:fe:
         18:82:70:0f:8c:a3:cd:54:ad:1d:07:6d:4f:c0:b9:cb:60:d8:
         f6:98:50:38:da:63:45:1e:ba:27:fe:82:f1:d2:e4:40:03:8c:
         ec:e9:8e:50:42:c7:e6:25:6b:94:76:5c:80:6c:d5:44:6e:ed:
         9c:8d:fa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:33:19 2026 by rpki-client