Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File:                     C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier:          y9nGohQSkmpTBijgfsTeUpIFRdBC6wNSPhhYwPk4DLo=
Subject key identifier:   6E:FC:14:8B:81:C4:B0:37:69:F9:95:9E:78:E6:A9:B4:79:BA:07:02
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer:       /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial:       019FA9E27C18B97D515F0FC4D42C8814186F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number:          1169
Signing time:             Tue 28 Jul 2026 18:00:20 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:20 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:20 +0000
Files and hashes:         1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: N6paXHJRg9hu9VuNw6WppMeemci9hKRtWgJ7LWNRO9Y=)
                          2: vYDkiQ8284qwQlXQwbK7sIbrgu4.roa (hash: atoNREmcnzRM3p/MPLhkQ+MYv5LYFsR6JX4f94qKzQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:7c:18:b9:7d:51:5f:0f:c4:d4:2c:88:14:18:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
        Validity
            Not Before: Jul 28 18:00:20 2026 GMT
            Not After : Jul 29 18:00:20 2026 GMT
        Subject: CN=6efc148b81c4b03769f9959e78e6a9b479ba0702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:5d:38:99:05:1e:52:33:07:9f:8d:2d:ef:
                    a7:4e:23:04:21:80:e1:29:b6:6a:dd:8f:04:9e:4b:
                    ec:07:86:c0:6f:b8:7f:3d:48:8e:25:85:b7:e2:87:
                    ec:47:3c:56:ea:2f:f5:f8:f5:bc:99:23:ca:44:71:
                    c8:1e:0f:72:a9:2d:f7:de:b7:d4:b0:51:6e:2b:57:
                    4a:76:e3:4f:f1:47:72:23:b1:bc:60:77:42:61:9a:
                    5d:42:d5:9e:1b:7c:b3:81:fe:ba:61:64:8e:ee:eb:
                    7f:19:5d:5a:97:b9:b1:60:23:92:8e:91:fb:21:89:
                    2d:70:3d:d3:a2:0c:b1:62:7e:3f:a2:91:e0:71:f0:
                    7d:d4:de:df:13:5c:d8:cd:94:30:c7:8b:cb:93:83:
                    e6:14:79:11:ea:00:16:6d:77:d8:d0:bf:0b:cc:2b:
                    2a:df:66:ff:f6:ee:db:06:8f:df:7f:e1:94:0d:7a:
                    9a:1f:95:78:81:ab:0a:ff:e6:80:54:89:a8:e2:c7:
                    c8:3f:2f:17:13:93:bf:61:25:34:f7:0d:89:f1:28:
                    aa:9c:44:23:c4:0e:10:c5:b3:c1:e8:20:05:19:5e:
                    53:6f:7b:4c:62:49:0a:9e:06:b2:04:28:d0:be:72:
                    3d:de:e9:67:7b:c0:13:9d:fa:03:fe:12:22:95:67:
                    37:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FC:14:8B:81:C4:B0:37:69:F9:95:9E:78:E6:A9:B4:79:BA:07:02
            X509v3 Authority Key Identifier:
                keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6f:d7:c6:b1:01:d1:e5:f1:7f:f3:67:d1:ed:b7:b5:d3:1d:
         56:15:eb:89:76:bc:46:99:f0:f3:ac:4f:28:2a:50:33:55:da:
         ea:a5:7e:5a:fe:f8:00:69:0d:eb:e9:3e:c5:b2:4f:8d:00:ac:
         07:6c:78:c1:2c:8a:1e:70:7d:82:ca:4b:4a:64:ab:c6:cd:d8:
         2f:6b:4c:50:11:04:87:e8:dd:d4:e6:3b:b8:6c:a0:74:cc:8d:
         bf:c6:4e:5d:de:cf:86:ae:25:b8:a8:be:88:1a:4f:42:1c:14:
         5f:3e:43:fc:42:4e:b0:77:b3:bc:61:e5:d6:fc:76:a8:d4:44:
         85:6a:a3:6b:91:91:85:ac:03:a4:65:7f:d5:72:7e:af:8e:b2:
         83:67:0e:b3:03:a8:45:22:7b:0d:71:df:a9:2b:56:0b:54:91:
         19:ba:9e:02:f0:9e:95:fe:ec:b8:7c:2c:ea:fc:3c:f9:de:e0:
         59:63:c9:03:5b:f6:02:10:60:13:eb:35:70:f9:c5:36:53:c0:
         9b:b0:96:c5:25:8f:a7:54:e9:2b:fe:ad:74:4e:ed:88:bb:b9:
         71:b8:3b:a8:42:58:99:52:2f:8f:fa:3c:4c:3e:e9:09:94:94:
         bc:44:21:95:95:e6:41:3d:d4:c3:70:c2:0f:90:9e:59:f2:84:
         94:76:5d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:31:57 2026 by rpki-client