Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
File:                     jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft (raw, json)
Hash identifier:          z9zpf+2xsXL9WsKI5FiJFIkRXM/IlOckAP9TrdxG8yg=
Subject key identifier:   F6:18:B8:85:E5:F5:E0:E1:C7:2A:AB:79:B1:05:E6:E1:0A:83:46:10
Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
Certificate issuer:       /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Certificate serial:       019FABD10101C25CD84EA60633000BE4F69E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
Manifest number:          0CA6
Signing time:             Wed 29 Jul 2026 03:00:28 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:28 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:28 +0000
Files and hashes:         1: 1iAUZQnAjPJmM3fx6VheKbjSaC0.roa (hash: ayQpZh8PFS4/2h7rrWfeqNzGcx6D/Lzgpi5g3p8RHQo=)
                          2: NvGwv0tgbOiZD5vQjxJqJJXPvRA.roa (hash: 3uFlLidOa4e1nDZau75bOj3y4T1goZPB2N6R1JL8d7c=)
                          3: UNicrp7c5qmqfUMaaE2imeZSfJ4.roa (hash: HvQvHtfV7Kicbdq+rxiWhbGQFfs4xQ7iH7hCA9P9w+o=)
                          4: XYRMpXTmrwZ9ysuk8CmU8-sXMDE.roa (hash: HTGn1k4c6oETgpfUTnE83wF8MXn0cJBcwbbcColhYVo=)
                          5: jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl (hash: aaBrteFsqSyNU/+MYCUewkVuTgSCmSr4desvsnIY9A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:01:01:c2:5c:d8:4e:a6:06:33:00:0b:e4:f6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
        Validity
            Not Before: Jul 29 03:00:28 2026 GMT
            Not After : Jul 30 03:00:28 2026 GMT
        Subject: CN=f618b885e5f5e0e1c72aab79b105e6e10a834610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:24:c8:ec:92:55:3e:a9:fd:1d:c9:5d:d1:
                    a0:11:da:2c:5b:46:62:d0:94:55:ed:63:0f:4c:32:
                    41:90:07:bd:14:f5:e0:e0:74:bb:4d:2e:5e:8e:94:
                    73:26:87:e0:8d:d9:c0:0d:48:36:03:a2:70:b9:24:
                    33:a2:d3:e3:89:45:9d:5e:c1:c7:f7:1e:26:0e:3a:
                    2c:b8:3f:92:3e:62:7b:53:f7:fe:27:95:1d:20:3f:
                    94:1e:51:b2:ab:f4:6f:51:b4:2e:fd:27:19:23:49:
                    5f:65:ba:5a:57:54:89:c2:9c:81:f9:f0:b7:58:ac:
                    3c:c1:a4:31:45:c6:9f:82:d4:da:15:f1:b5:0b:e6:
                    54:38:1e:52:53:57:c8:5f:dd:e2:0d:df:b8:21:43:
                    6e:ae:e7:e1:b0:02:a2:ee:08:48:09:16:f8:4b:fb:
                    93:3e:ce:45:75:62:28:0e:fd:07:c2:22:dd:da:e5:
                    b6:53:5b:47:97:fd:23:93:84:c3:8a:d8:64:a7:94:
                    a0:34:84:3f:61:a7:4a:d8:99:49:38:98:b8:13:c2:
                    2a:ca:ba:ad:cf:41:4e:b3:e9:79:f3:22:85:d1:64:
                    35:ba:c5:d7:7e:8c:57:f3:3c:cd:a8:b4:3a:d2:f3:
                    aa:3b:89:c8:29:bb:bb:7a:fc:ac:7d:90:59:0f:3e:
                    12:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:18:B8:85:E5:F5:E0:E1:C7:2A:AB:79:B1:05:E6:E1:0A:83:46:10
            X509v3 Authority Key Identifier:
                keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5d:9a:53:73:a2:ec:1c:70:8c:86:8a:39:18:5e:a7:ac:97:
         c6:b4:45:dc:f4:28:df:0c:ba:b1:21:0b:eb:85:f4:1c:12:83:
         3e:e1:3c:68:fa:58:13:f1:dd:b0:78:ae:d3:a3:41:6e:10:f4:
         66:76:46:2d:13:93:ff:63:85:28:b9:e4:36:3c:72:f0:05:2f:
         5e:64:63:37:44:b0:1a:12:0e:56:04:a0:b7:06:b8:f4:a3:62:
         0e:8b:4e:86:33:9c:3f:9b:6a:d7:7a:59:fc:a2:28:21:63:80:
         d3:b0:f3:26:35:62:bd:14:32:10:0e:67:bc:57:58:d2:70:70:
         5e:de:ff:1f:a8:3f:f0:2f:59:68:1b:91:c9:6a:35:e5:81:16:
         f5:bf:06:f3:14:b9:66:28:45:f0:f5:ec:0f:d9:40:c9:2e:0d:
         c7:e4:5f:c7:c0:10:8a:b1:68:f1:33:b4:3c:b4:f9:77:77:c9:
         85:1a:93:c2:92:7d:c6:b7:8f:78:fd:fe:09:ee:91:d7:0a:f3:
         26:3f:1c:a3:f9:3d:90:52:51:53:4a:b1:c5:18:0b:f7:cf:c8:
         28:cb:d7:8b:97:3e:0a:74:0c:d2:19:26:d0:77:13:ee:97:28:
         3e:c8:9a:5b:e0:d1:c7:e2:78:bf:b9:22:12:64:a7:3b:02:ab:
         42:6c:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:14 2026 by rpki-client