Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
File:                     t1OsA5RSieGGvylzeyVhjTzNRDA.mft (raw, json)
Hash identifier:          1G7HXPJ8g/Fs5PQXvT0gge7WrA16XZ/JHCW+jaT2kUk=
Subject key identifier:   64:06:37:FE:7A:50:EC:47:4C:9E:18:8A:8F:BA:69:BC:35:AE:13:DB
Authority key identifier: B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
Certificate issuer:       /CN=b753ac03945289e186bf29737b25618d3ccd4430
Certificate serial:       019F81F943F975EA16A2174E20BBEBCFAF12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
Manifest number:          38
Signing time:             Tue 21 Jul 2026 00:00:24 +0000
Manifest this update:     Tue 21 Jul 2026 00:00:24 +0000
Manifest next update:     Wed 22 Jul 2026 00:00:24 +0000
Files and hashes:         1: 1-5yL_Q-nYPf2CLV3tjpWzClJnPw.roa (hash: k8H40R+fMFH7wBdsLB91Y9l2eozFqsIfXqragAiM93E=)
                          2: ea_Ab_KVnKlMEbYPrAJZWmJhhsc.roa (hash: 6cSn8uzwyUxMJNcnfAeGMw+pCS/UoUALDhF7qixnWRg=)
                          3: fPtQuFsuVeGkMlwHU_sA5LSJu_E.roa (hash: WDhKtqp/PbP0mGK261CVF4VxFxH7CTo0soaxOvLBySA=)
                          4: t1OsA5RSieGGvylzeyVhjTzNRDA.crl (hash: J+VWZ+qwdpBRbnbW262ptxkcp77KjUpHXTZt1VCY/eA=)
                          5: tr8FATLSUssLeZoYd6_aJnbXdq8.roa (hash: 7GIhmLkuSFB1irvbk3E504lE/D2UrFS2bjn5VxfkzOQ=)
                          6: wrNDqIGL46GbPFlLV3ftdAx_UK4.roa (hash: 5QK1F45BImfUqKNV131htGF5A+1+6XK2Skgx/nv8vZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:f9:43:f9:75:ea:16:a2:17:4e:20:bb:eb:cf:af:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b753ac03945289e186bf29737b25618d3ccd4430
        Validity
            Not Before: Jul 21 00:00:24 2026 GMT
            Not After : Jul 22 00:00:24 2026 GMT
        Subject: CN=640637fe7a50ec474c9e188a8fba69bc35ae13db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:c5:2d:04:e2:7b:37:08:56:9a:e2:a5:18:
                    95:07:5c:e3:d8:e8:b5:b1:20:f9:f9:e1:6f:5d:12:
                    2c:b8:3a:e1:29:b4:27:ea:66:73:9e:0f:fe:fc:fe:
                    c0:56:5e:93:85:85:32:9f:df:07:8a:48:a7:0d:c3:
                    50:68:d6:25:7e:d0:d8:17:9a:2a:fe:38:3a:03:36:
                    8f:b3:e2:d0:de:61:93:84:b1:75:9d:23:0a:38:39:
                    f3:b8:80:1c:a3:a4:45:1b:fb:11:49:ad:02:7b:d5:
                    36:46:5e:16:57:ce:d3:11:b8:28:0e:67:e1:69:c5:
                    fb:a8:86:4a:56:55:1c:db:33:fa:dd:97:3b:f0:39:
                    cf:ed:cc:29:c2:c1:28:f4:ce:07:0e:41:b8:27:f0:
                    9e:a2:8a:66:22:c0:9c:2a:84:9b:1b:69:ea:e7:9f:
                    e9:a3:15:0e:cd:71:f5:1d:62:72:21:60:9b:36:66:
                    7f:72:18:0a:89:b3:f1:ac:44:b4:19:a9:6c:8e:e0:
                    56:32:8a:c9:73:69:ab:68:d3:5c:0c:ea:99:ad:de:
                    4a:9a:72:3e:67:d2:7d:3c:75:05:d8:bc:fa:45:28:
                    74:6d:d1:1e:af:56:b4:72:c6:96:4b:03:33:11:85:
                    87:80:cf:89:c9:37:ae:6f:ef:18:d9:81:05:5f:01:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:06:37:FE:7A:50:EC:47:4C:9E:18:8A:8F:BA:69:BC:35:AE:13:DB
            X509v3 Authority Key Identifier:
                keyid:B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:43:37:3c:50:be:f5:90:84:38:f4:43:9b:ff:75:0e:24:9d:
         de:6e:e9:81:c3:77:ec:47:8c:cc:bb:2d:8f:82:58:61:cd:25:
         e6:79:66:dd:da:4b:07:2e:4f:5a:d2:0e:53:41:ac:e9:3d:24:
         0b:07:3c:79:43:49:31:42:18:4f:de:bf:0d:d5:67:4f:7a:91:
         32:93:f9:ca:44:65:7d:ee:84:00:d0:78:37:76:fe:3a:8f:b3:
         f6:a3:ef:66:ee:df:e5:b2:21:a7:5e:31:58:2b:9e:a2:35:69:
         5c:cd:87:00:9a:de:25:cb:d7:52:5f:7f:bb:47:59:4c:78:f0:
         cb:64:37:08:28:e6:8b:d8:4f:7e:13:73:80:14:82:1d:43:d4:
         17:37:80:42:b9:e3:33:f0:02:01:69:f0:40:4e:9c:1d:50:84:
         e9:66:38:4a:24:38:d3:31:5e:20:81:69:49:7f:77:c7:e5:2d:
         c7:49:22:76:0e:07:53:cb:d7:f9:6b:52:f9:27:7b:17:87:c8:
         76:44:f8:5f:88:31:5b:3d:60:4c:fc:f2:bb:95:11:cb:70:ef:
         19:cf:66:b6:35:98:9d:f5:f5:18:ae:e5:8f:f8:0c:39:16:82:
         f8:be:b2:ff:03:76:fa:09:27:62:93:3f:ef:9a:fd:32:48:7b:
         66:b0:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:48:37 2026 by rpki-client