Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File:                     B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier:          SIzhxp3Lzt5d9lQ2U8A1Fq29ffvYt8vXTCpRDfBQrpk=
Subject key identifier:   44:02:5D:AD:7D:5E:AC:9B:A9:DD:90:F7:EC:89:5B:8E:AE:84:DE:74
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer:       /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial:       019FA9ABF428D202EA3DC90117C47ECB7501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 17:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:46 +0000
Files and hashes:         1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: Urrd18Dxkri6y+jHIrchIlOCl/rvqCeh53ZW6uTLhBE=)
                          2: OaG9G9Rkeg7MQ9HAOpMM6Qb2lyE.roa (hash: 2tlWpqcv4FYW9H4L8bdUATgM+St3ZdyU2sE6jN6ILxk=)
                          3: YXSgyUgUnB863rJPTcWCW7mGwFc.roa (hash: V1Uuys2uya26ArEHIls/PYBVdC0Vm3sFwdUGRo5ZhTA=)
                          4: lMQfwH-V7Yhd6sNgC8BpN5Ho3vc.roa (hash: 80PQfjBzEobkUlg1u1KjDZCEtHTRyd3Qm3q0fmEsPoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:f4:28:d2:02:ea:3d:c9:01:17:c4:7e:cb:75:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f2a175be20108641c649553213f212511667a5
        Validity
            Not Before: Jul 28 17:00:46 2026 GMT
            Not After : Jul 29 17:00:46 2026 GMT
        Subject: CN=44025dad7d5eac9ba9dd90f7ec895b8eae84de74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:33:7a:b4:0c:ce:43:a6:34:fa:36:3a:ac:
                    88:f4:c9:10:29:7d:fa:06:9a:7e:f5:77:ff:39:de:
                    6d:d4:64:87:14:56:97:5f:e6:21:ef:37:87:b1:c7:
                    ac:47:a3:0a:39:8e:4c:67:74:62:08:c7:ac:fe:3e:
                    05:c2:c5:42:93:d9:b7:44:5a:58:bf:80:80:02:be:
                    b4:56:c6:74:38:a4:44:a7:80:2c:7e:57:6e:36:7c:
                    7c:8f:1b:72:25:b8:4c:69:53:1e:4c:ae:fa:4f:09:
                    0a:c4:13:11:ee:73:90:dc:2c:72:ee:b2:75:41:ef:
                    75:e3:6e:d8:f6:6d:3a:ac:2c:f4:77:bc:bb:93:a0:
                    47:4b:3f:3f:32:ea:bc:92:26:83:90:e9:99:9f:11:
                    22:87:18:a9:7e:4b:fe:1f:1e:69:7a:7a:b1:fb:a3:
                    59:0f:ee:06:c3:77:0f:8f:1a:77:59:4a:f0:47:b9:
                    bb:4a:27:06:7e:71:6a:ab:b8:c1:6e:61:8b:5c:07:
                    3f:0c:83:8d:fb:64:80:82:ef:16:d0:0e:31:80:13:
                    c5:df:2a:72:7f:22:5b:a1:f6:47:83:f7:57:db:31:
                    d3:27:59:3c:7e:d7:b4:6f:03:ae:e7:d4:18:a6:c5:
                    18:f6:d5:9b:24:6e:5d:74:a1:a1:ad:c0:35:25:b9:
                    26:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:02:5D:AD:7D:5E:AC:9B:A9:DD:90:F7:EC:89:5B:8E:AE:84:DE:74
            X509v3 Authority Key Identifier:
                keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c9:db:b8:29:45:8f:92:5a:5a:74:e6:f8:9d:2a:b4:a2:18:
         3d:5b:2f:ce:88:bf:9e:0e:fb:2f:3e:89:46:d1:fc:49:32:e7:
         e1:a1:f8:9d:1c:ad:23:a0:6e:16:52:09:fa:28:2d:37:37:45:
         ca:dc:6c:c3:e6:f7:15:39:5f:03:a4:83:2b:2c:83:b6:26:d0:
         39:02:50:95:9b:2a:8c:1e:6f:11:7b:cb:a6:bb:76:bd:43:ff:
         5c:c4:f4:6f:69:9b:cd:ac:1a:85:a4:75:fd:50:c1:d3:70:58:
         a9:66:fa:45:1b:80:13:a4:e2:ac:94:0b:a5:f2:fe:66:3a:81:
         2d:16:cb:32:df:29:73:92:e2:ef:a2:10:a8:a9:f0:f2:3c:f9:
         e8:16:b0:14:82:c5:f1:a7:f2:fb:96:26:15:29:e9:69:ce:07:
         80:83:12:a3:e8:6b:68:31:41:2b:f5:45:70:50:4c:b8:98:f6:
         b9:42:ee:b3:de:d1:d2:1d:d0:d6:cf:3f:49:8c:0d:49:60:37:
         08:0a:e7:2f:90:f8:2e:4e:13:0e:1d:ad:e6:02:7b:7b:3b:d0:
         ac:43:b7:30:46:a4:d8:14:ac:fe:d7:e3:28:f5:1b:3c:e1:cd:
         d5:79:e9:28:f6:98:ca:51:a5:e2:4b:4f:cf:e4:76:f4:65:af:
         00:06:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:21 2026 by rpki-client