Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
File:                     2783kJzhe6U62QqGMjd6XZOHQ-U.mft (raw, json)
Hash identifier:          mv/ZbCCz3Az7OdMNN6EhQpMQy+myO7Cvs3d0GCWPo6I=
Subject key identifier:   5F:B6:4B:42:AD:EC:6F:25:84:25:FA:4E:F3:61:49:9E:B9:71:69:15
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       019F830C4A4BF2C00AB0828C0B57AE0E33FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
Manifest number:          0F95
Signing time:             Tue 21 Jul 2026 05:00:48 +0000
Manifest this update:     Tue 21 Jul 2026 05:00:48 +0000
Manifest next update:     Wed 22 Jul 2026 05:00:48 +0000
Files and hashes:         1: 2783kJzhe6U62QqGMjd6XZOHQ-U.crl (hash: IaKhmLj7r48rQ2wniJxEPpmcYq45ucnG18B9GEML32M=)
                          2: TTwK20SxDSqzIyzV0QGO0SmjawA.roa (hash: x2Tzuet+mqmVtk1cFs2lJv6NLw6VZlQyasN9WGmhONs=)
                          3: XnoeLIkYNpYQWVse-yX5iRjTc1s.roa (hash: ptKlPyES08hICN66dmlPtZNxNra0j4is1IcwHdPzbr4=)
                          4: lEbAfouHoMhTrs36FwPLKCH2I7w.roa (hash: ccDJaCoETUQjCTdcoNlWxXPIM6P7uFIKkfsOSoduMMA=)
                          5: xu7t96CgIHN3hwNmggXTcfk-UpA.roa (hash: iRBThFuWjKJSamtnuVG+6/kq+wDEj0e0hvd45FkbUb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:0c:4a:4b:f2:c0:0a:b0:82:8c:0b:57:ae:0e:33:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Jul 21 05:00:48 2026 GMT
            Not After : Jul 22 05:00:48 2026 GMT
        Subject: CN=5fb64b42adec6f258425fa4ef361499eb9716915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:ce:c6:52:11:19:d2:08:8e:cc:36:97:0e:
                    4b:10:d1:2d:d6:c7:59:48:0f:3e:87:fa:a1:92:4e:
                    bd:3e:19:34:ff:e4:c1:8a:a0:b7:3f:2d:3c:9d:91:
                    34:2f:07:30:64:d6:98:e6:fb:f9:6f:ff:77:03:3f:
                    3d:7a:5f:aa:1d:b5:64:16:a8:a9:65:dc:1d:f8:0f:
                    00:f2:0c:55:9a:96:3a:0d:d3:6c:76:9a:22:6c:cd:
                    4d:16:b7:03:56:b8:5f:28:37:7e:97:31:07:72:4e:
                    b3:f2:06:c3:2c:e9:a3:86:fe:66:a2:41:b8:04:fe:
                    74:af:8c:c7:e3:8d:c2:14:25:e6:a7:61:a2:63:a9:
                    90:60:4d:f5:7c:bd:5c:27:60:e4:8e:c2:1f:80:40:
                    75:e8:75:4d:29:17:ef:3e:84:09:2a:1c:a7:93:e1:
                    cb:95:d9:e2:56:46:f2:65:48:da:33:42:36:69:eb:
                    93:86:65:1b:13:d9:67:3a:a0:0a:41:51:74:e7:67:
                    5e:7f:37:21:ab:e3:01:2e:5b:7c:28:de:41:20:0e:
                    3f:b7:ea:02:98:dd:5e:3c:81:4a:e6:52:b6:cf:13:
                    43:08:8f:ce:9c:d8:68:5c:da:84:1d:1d:59:6d:97:
                    eb:71:9e:7a:c4:10:55:10:5e:7a:23:ab:71:c5:45:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B6:4B:42:AD:EC:6F:25:84:25:FA:4E:F3:61:49:9E:B9:71:69:15
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:39:bb:1c:7c:91:d0:0e:11:89:8b:3d:82:97:38:86:8f:76:
         e3:e7:bf:fc:a9:07:3c:64:02:a7:3f:45:e5:0f:6f:69:95:b3:
         be:c2:eb:fc:54:a8:85:4d:58:d6:46:43:88:2f:49:19:05:7b:
         ff:77:80:a9:fa:ab:20:3e:ff:11:05:6a:e9:65:d6:3c:d6:da:
         22:d4:05:d8:7e:8e:c7:69:8c:94:de:d0:47:3e:c1:a2:ab:51:
         f1:c9:57:21:af:62:fc:ec:b8:c8:05:51:ef:0f:77:c2:78:48:
         7c:b6:2d:0a:71:3c:35:bb:95:d7:61:59:05:70:35:f1:a6:21:
         50:9b:2c:14:24:50:5b:67:b4:44:93:78:61:f9:af:bc:28:70:
         dd:44:25:c6:e7:b6:fa:89:bd:4f:6e:16:f5:e9:6e:68:16:53:
         05:97:aa:f3:1a:b3:94:3b:0a:16:78:61:2f:07:72:e1:bf:85:
         b7:2f:fe:4c:04:94:89:20:ab:5d:dd:34:32:d0:3a:f2:0e:03:
         3e:a1:ea:c9:03:03:81:27:c7:bc:e5:c7:84:a3:79:39:ff:83:
         91:40:df:df:09:1c:ff:dc:8c:03:74:e7:cd:7c:bc:d9:e4:af:
         09:4d:c9:5c:da:08:52:0d:64:07:54:e9:5c:d0:46:7a:11:e0:
         0c:ee:c1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:30:59 2026 by rpki-client