Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File:                     32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier:          EGZASGcM3OdJQBY1gq1n6kxFeG3/a2gOuRUO2CtLd60=
Subject key identifier:   F1:32:D7:B3:0B:44:6F:E7:78:DA:5D:26:F2:0A:AC:4D:F4:D9:04:51
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer:       /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial:       019FA7BD584536B86C864AF9617829FE94B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number:          116C
Signing time:             Tue 28 Jul 2026 08:00:31 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:31 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:31 +0000
Files and hashes:         1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: 5zXi5kt4uucw8J2Ij+emiV2U25JSISi0VKRV9XWrDyM=)
                          2: 6tu6wsRKFmIyHrU1PRGJUD04ppo.asa (hash: aHFYEiuMALmMOLvgpIvmsiVm50NUJxSxTCOLYvpZwmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:58:45:36:b8:6c:86:4a:f9:61:78:29:fe:94:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
        Validity
            Not Before: Jul 28 08:00:31 2026 GMT
            Not After : Jul 29 08:00:31 2026 GMT
        Subject: CN=f132d7b30b446fe778da5d26f20aac4df4d90451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:e5:b9:fc:78:b0:84:67:65:b8:d0:45:b2:
                    ba:ff:c5:b8:0c:89:f8:e1:0d:15:a3:f1:bf:31:0d:
                    2d:00:49:71:17:e8:66:58:e1:5a:e9:25:12:f7:b2:
                    b0:2b:90:a6:e4:54:48:a3:79:f6:63:91:52:bd:0f:
                    b6:0b:df:b6:bc:a9:13:99:b2:42:60:35:e5:98:65:
                    52:51:10:f2:7c:0e:4d:31:a8:5b:e6:0a:aa:06:2d:
                    af:f8:6b:1b:44:e0:2b:18:32:22:3d:3e:b2:22:a8:
                    17:5d:90:f2:40:06:fe:32:7e:32:da:ab:a2:79:cf:
                    62:57:b5:44:d4:0b:a2:97:0c:db:97:6a:8c:b4:51:
                    6c:e6:1e:fc:96:c9:da:54:45:98:03:1a:8a:5f:12:
                    7b:ff:15:99:1e:97:90:ca:73:c7:96:80:39:af:2d:
                    08:a9:33:63:84:a9:f6:b4:15:a4:d9:b9:27:bd:4d:
                    7d:4e:4e:fe:30:30:ea:8f:d4:02:1f:e7:8c:b3:53:
                    d0:2b:bf:8b:05:7d:f3:da:84:ef:69:05:e1:0d:4f:
                    24:f4:28:45:11:74:a5:af:de:a9:e1:37:eb:14:08:
                    e4:5a:3f:09:e5:7d:14:b1:cc:cc:d5:fd:73:42:51:
                    8b:19:06:d0:c4:7f:9a:ac:c2:2c:84:8f:d0:18:43:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:32:D7:B3:0B:44:6F:E7:78:DA:5D:26:F2:0A:AC:4D:F4:D9:04:51
            X509v3 Authority Key Identifier:
                keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:88:90:22:63:86:b6:3f:a8:aa:2f:95:ff:d8:74:61:bd:03:
         b7:dd:90:d3:4e:af:dd:57:1a:fa:28:69:ee:c1:8e:8b:7e:9e:
         bc:6e:f4:af:f0:ca:c7:e3:41:a5:e9:77:33:af:23:ab:bb:2e:
         f7:d0:79:17:84:0b:fd:b1:6e:75:4c:79:f7:9b:29:fe:0a:c0:
         ac:db:d2:1f:16:76:41:da:ef:88:b3:f5:ef:04:1a:71:7f:f9:
         7b:05:7b:32:24:db:f4:1a:bc:d8:e1:ea:f4:56:cf:f2:e2:e7:
         f8:ed:79:da:eb:3c:eb:db:a9:6d:e6:f4:43:46:91:e2:a1:f0:
         31:b7:44:bf:04:47:cd:c8:bc:e7:d4:5e:9b:00:89:cb:4a:04:
         b8:45:fe:40:b1:7d:f4:e3:e5:13:19:c4:84:ca:70:bc:c8:7c:
         86:5d:52:da:e8:43:85:d5:47:bd:0b:46:71:c7:dc:ba:60:a2:
         e5:14:5d:1e:9d:79:a9:d1:b0:b5:8b:19:aa:7b:b0:34:68:a4:
         1a:9c:6a:11:8d:57:ba:f9:f3:bc:fb:a1:8e:c7:d2:65:42:87:
         dc:ba:f5:64:44:43:b8:23:e7:40:44:12:82:bb:3a:53:4a:27:
         60:96:b1:b8:2d:0e:b6:f1:54:43:88:8d:3f:13:ce:6d:be:27:
         40:09:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:13 2026 by rpki-client