Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File:                     ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier:          FBqticA/hszL+b7o+VHlnMgP1KOQrJFBv7vKf58IHkc=
Subject key identifier:   31:1E:80:36:F9:7F:DA:08:98:A4:B5:2A:30:28:9B:23:29:71:B8:75
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer:       /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial:       019F56D8A79739AF2AB2303498997F35AB10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number:          079E
Signing time:             Sun 12 Jul 2026 15:01:06 +0000
Manifest this update:     Sun 12 Jul 2026 15:01:06 +0000
Manifest next update:     Mon 13 Jul 2026 15:01:06 +0000
Files and hashes:         1: QdViC720LUGk8rbETFc7icn6Tx4.roa (hash: wxpHqs3D6Qy6qVLUeFjXp0nQiZFcnT7PBeNSBBjzhuM=)
                          2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: adLpAjbykzznyWXAkEfhh8ciTGRTGoji8ryAI8KLy8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Jul 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:56:d8:a7:97:39:af:2a:b2:30:34:98:99:7f:35:ab:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
        Validity
            Not Before: Jul 12 15:01:06 2026 GMT
            Not After : Jul 13 15:01:06 2026 GMT
        Subject: CN=311e8036f97fda0898a4b52a30289b232971b875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:8b:44:4c:3c:4f:9d:26:e9:09:78:a4:9d:
                    c6:38:29:d7:95:7f:9f:79:db:b8:10:49:da:74:50:
                    ab:6d:7c:79:85:6c:5b:eb:7d:f7:3c:42:49:48:b4:
                    11:5f:39:94:30:2e:52:6d:61:2e:8a:ea:97:78:2e:
                    34:dd:72:b8:1b:22:13:fc:81:6e:2a:d2:b7:47:5a:
                    49:c4:3b:9a:34:f2:b5:70:59:ef:88:57:cc:a6:cc:
                    0b:14:a1:e5:6c:37:fc:0b:11:c9:e4:71:82:fc:7c:
                    d8:1d:3f:dc:5c:98:6d:33:29:dc:f8:2a:05:bd:b5:
                    10:44:23:c7:be:4a:3f:ab:a9:ad:9e:a4:43:bf:fa:
                    33:45:b3:1f:d9:57:9a:15:c7:21:7f:3c:6f:d8:a2:
                    70:d1:e9:75:7b:f5:19:3e:86:d6:fc:cf:93:49:6f:
                    fc:fc:31:06:ec:41:97:5d:1b:9a:87:ca:52:b9:da:
                    01:28:6f:e5:85:0b:c2:93:6e:d2:37:d8:0a:11:da:
                    9a:c0:07:61:96:ea:d7:c1:95:10:b4:5c:86:0e:6e:
                    df:3d:74:c8:ce:2d:a0:f4:1e:09:f5:7a:49:2a:ab:
                    60:7d:2c:ea:dd:5e:90:7c:70:f1:65:4b:49:6f:cf:
                    9d:15:19:10:68:d3:e9:32:85:07:ce:25:c7:ff:a5:
                    9e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1E:80:36:F9:7F:DA:08:98:A4:B5:2A:30:28:9B:23:29:71:B8:75
            X509v3 Authority Key Identifier:
                keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d1:d5:b8:52:47:36:a7:21:56:1f:88:7a:dc:70:20:51:1f:
         e6:e1:ec:88:57:6e:20:c0:78:0f:4f:94:19:e4:10:51:ff:bc:
         0d:19:44:7e:c8:49:60:b7:c6:a3:38:7e:62:1f:4e:3e:de:88:
         91:43:0b:45:80:53:3b:32:e0:75:3a:1a:5d:02:8c:7d:7c:ea:
         ae:4f:2f:fb:d5:25:e7:8c:82:39:b0:64:97:d5:f9:17:02:cf:
         f6:72:91:44:1b:8f:e4:6f:b8:be:0d:0b:58:9b:db:86:e7:2b:
         7f:00:c0:44:f0:d0:81:48:81:9d:23:22:93:df:cc:31:4c:0d:
         0b:05:73:2d:35:1b:4d:69:f7:1b:d3:2f:07:1e:f8:a6:b1:74:
         e8:6d:39:6b:15:ca:f1:3d:10:23:ee:44:9c:6e:10:36:77:e9:
         53:6f:db:49:30:8e:b8:b8:a3:d9:41:30:08:30:22:9e:a5:0e:
         0e:d6:2f:92:3a:fc:c0:33:51:b2:72:c7:e9:b6:a9:02:1f:7f:
         31:83:d1:02:0d:68:ba:6d:fd:3e:29:9f:35:61:11:63:64:d5:
         6c:43:fa:f7:e3:75:3d:c5:86:fc:cd:54:2f:ef:99:86:0a:fa:
         3f:9e:b2:f8:e2:df:72:3e:8d:0f:46:98:e2:08:7d:96:50:b8:
         6d:bb:8d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:07:01 2026 by rpki-client