Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
File:                     V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json)
Hash identifier:          6BlkGrqiIMjeQ0//D7wUJlYWUzmbipmrmQkrT4hq9t4=
Subject key identifier:   DD:91:F0:27:1D:01:7E:05:1A:BF:B7:9B:DF:F8:A3:84:E6:21:97:67
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Certificate issuer:       /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial:       019FA1BB34FE42724EC5BBA94762EBAEFE20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
Manifest number:          13C4
Signing time:             Mon 27 Jul 2026 04:00:28 +0000
Manifest this update:     Mon 27 Jul 2026 04:00:28 +0000
Manifest next update:     Tue 28 Jul 2026 04:00:28 +0000
Files and hashes:         1: 0i0XuDvoPgs1nd1NeD83B2IScVA.roa (hash: YNJF/olVt/Dil/zKrwDDUgcE/N5peyDf18kFIpNKPX8=)
                          2: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: FX/tE67QiLpA+pCuD6iFuPkvPaCqGojBN26sSLvScPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:34:fe:42:72:4e:c5:bb:a9:47:62:eb:ae:fe:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
        Validity
            Not Before: Jul 27 04:00:28 2026 GMT
            Not After : Jul 28 04:00:28 2026 GMT
        Subject: CN=dd91f0271d017e051abfb79bdff8a384e6219767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:54:66:82:84:7a:9b:61:a4:7e:95:f0:a3:
                    22:67:62:19:61:e3:8f:01:43:b8:dc:7f:f8:5b:a8:
                    50:31:61:46:93:e6:c3:21:a2:85:38:39:21:a5:ed:
                    c7:6a:09:c5:cb:c9:0c:f9:66:61:21:5f:32:56:79:
                    73:04:ac:e3:81:88:6c:11:a5:7c:f0:d1:b9:93:5d:
                    c0:55:cc:67:04:ad:0a:a1:f2:05:2d:4a:7a:0d:a3:
                    2d:d0:4b:56:43:fe:a6:b7:b0:2d:01:da:d0:78:48:
                    21:73:4d:ce:db:ca:97:90:e9:49:38:3a:e5:00:fa:
                    da:42:c1:56:eb:23:b1:c6:5a:b4:91:49:f6:bc:da:
                    5e:ba:42:33:5b:23:3c:6c:85:a7:f5:2c:e8:ba:cb:
                    74:e1:79:f5:3c:78:a2:e0:4e:c0:ca:e8:44:ac:fd:
                    cc:a6:6a:ee:1a:9c:29:ab:99:6d:33:d2:18:99:3e:
                    32:dc:fd:20:3a:0c:d0:6a:de:41:a9:1d:1b:7c:0f:
                    c4:d0:4e:d3:68:fc:12:41:25:2e:52:4d:28:db:1d:
                    2e:65:63:60:3a:c6:27:3d:4c:6f:c0:be:ce:ef:e0:
                    5c:ac:88:24:1d:e8:72:b8:b2:86:c0:fe:ef:ec:27:
                    f9:79:f6:05:8c:81:6e:93:05:7c:4f:9b:65:d9:93:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:F0:27:1D:01:7E:05:1A:BF:B7:9B:DF:F8:A3:84:E6:21:97:67
            X509v3 Authority Key Identifier:
                keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:50:e9:9c:31:d2:58:4f:76:bd:2d:e1:89:c9:05:d4:f4:94:
         ad:50:b9:52:73:e5:97:e2:05:0b:fa:e3:79:50:f9:0f:9f:8d:
         d9:96:37:95:ce:ca:2e:1b:18:a8:cd:c3:c7:f8:41:3d:f9:85:
         ed:94:b7:54:62:23:d3:d8:a6:4f:45:1c:ea:1c:83:54:30:e9:
         79:2e:c2:04:f5:23:a5:8a:73:9f:b4:7c:b3:d4:9f:f0:d7:4d:
         10:81:63:9a:26:10:a1:a5:b1:c7:64:73:04:59:40:ff:d7:68:
         44:f3:f0:e4:97:7a:40:bc:ec:1e:63:a0:38:5f:91:74:1e:07:
         e1:71:9a:8d:b9:1b:0e:ca:84:66:72:d5:14:be:94:40:36:d6:
         ed:66:95:0c:36:c2:80:60:75:54:74:94:de:52:63:75:22:c1:
         4b:31:30:2a:35:ea:c9:86:50:b4:7b:89:01:1b:9c:5e:a4:94:
         2d:ac:19:2a:77:c3:48:09:1e:5c:ff:f0:25:a6:9b:fd:9a:13:
         97:6f:db:14:ae:0e:2f:32:f6:b3:5b:2a:53:ea:39:65:8e:fd:
         62:08:ad:63:6b:ab:32:19:6f:f7:04:8f:e6:e7:fa:d4:82:e8:
         36:af:98:19:3d:7a:30:74:b5:ad:4a:de:cd:2c:22:06:f0:26:
         34:13:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:39:40 2026 by rpki-client