Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File:                     ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier:          H0pQ8YIEsvaqENpP2zPF2yoit62yrOkyHkuS6u/vZgw=
Subject key identifier:   46:E4:3C:FE:76:A9:D6:AC:48:85:92:65:A5:82:D6:63:CE:04:EA:12
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer:       /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial:       019F848C49B3AE4A3477AEFFAA53D26B8425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number:          1179
Signing time:             Tue 21 Jul 2026 12:00:14 +0000
Manifest this update:     Tue 21 Jul 2026 12:00:14 +0000
Manifest next update:     Wed 22 Jul 2026 12:00:14 +0000
Files and hashes:         1: C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa (hash: 4EBK9TE3DKNE91PsZ8jPUioXBBKUno4c9ILnL/KNCRs=)
                          2: m0XHnqLimHCaVdrwyhH4qvYB5k4.roa (hash: AyXTFUEVIX6Aa2cN5D+zF56YX+NxzZvMWIw5F0uYaGI=)
                          3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: rzpe5NWWO/n21Ax7IBW6YU+M4UXjTteQl7oWijd6hwQ=)
                          4: uFaZ7j6WOK_rFoGA3dV4DOr3Azw.roa (hash: 7Q1qXKsYai/yvbGaDBAb/Nup5NNAKS6f69A2HPPsnRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:8c:49:b3:ae:4a:34:77:ae:ff:aa:53:d2:6b:84:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
        Validity
            Not Before: Jul 21 12:00:14 2026 GMT
            Not After : Jul 22 12:00:14 2026 GMT
        Subject: CN=46e43cfe76a9d6ac48859265a582d663ce04ea12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:8c:cc:c9:35:08:d2:c6:4c:79:33:38:2a:
                    74:70:cd:fe:77:bf:34:90:86:92:f6:d5:48:97:d0:
                    12:d7:bd:64:fb:5a:5e:2d:6d:dd:4d:56:b1:9c:59:
                    51:d3:5e:68:4e:16:fd:13:05:5f:2a:8d:8d:29:c2:
                    91:df:62:f3:9b:74:e1:16:e3:ae:d5:db:6c:44:e5:
                    c1:f4:58:ed:fc:f1:97:9b:41:a7:1c:0d:84:fe:02:
                    f5:c8:93:4e:cc:34:2d:81:5f:1b:34:47:d5:a4:70:
                    2e:6b:7c:74:5b:09:25:27:33:8c:85:91:85:66:7f:
                    7c:df:1a:16:0d:f5:63:44:f7:fe:67:30:86:a4:28:
                    5a:cd:e1:7b:c0:9a:c9:81:ec:85:93:43:91:a1:44:
                    c4:b8:62:bf:3c:ad:20:10:93:cb:b2:91:43:f5:5d:
                    ad:73:ce:0c:da:a2:aa:62:55:33:cb:ef:f3:0d:f5:
                    55:27:5f:e2:f3:13:38:13:c3:ce:69:b1:cb:0e:94:
                    44:f3:af:aa:54:d4:7c:17:6a:31:f4:7c:e1:9d:56:
                    b1:2e:50:82:46:d8:5f:a7:19:d7:97:52:eb:9f:f7:
                    02:01:9d:ac:e0:8d:4d:6a:a4:04:71:05:ed:28:bc:
                    d5:b2:f4:32:45:f1:9e:70:e4:34:15:3d:4b:f1:f0:
                    0d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E4:3C:FE:76:A9:D6:AC:48:85:92:65:A5:82:D6:63:CE:04:EA:12
            X509v3 Authority Key Identifier:
                keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:db:34:37:fe:81:4d:8a:8e:94:40:ce:ff:0a:69:ec:70:1b:
         1b:b5:73:19:2b:98:6f:2a:2a:a8:20:df:89:cb:2f:0d:f4:ef:
         3a:33:f2:1f:9d:c9:62:d3:a2:44:81:f3:c5:c3:f1:0b:d1:a5:
         b7:48:1b:53:4d:37:8b:c2:ed:31:7b:a9:d6:fa:d7:90:f7:5e:
         a2:22:28:c4:45:6f:7b:f4:88:3b:ac:6f:32:54:1f:dd:c7:c2:
         74:16:84:90:a4:eb:01:13:50:70:53:e8:81:90:e5:76:6f:8d:
         f0:76:f5:c7:56:79:9f:03:c0:7c:ac:c5:d5:b2:2f:4e:b8:c7:
         5c:0c:3a:04:5f:14:de:a9:4d:3f:eb:95:71:c1:4a:fb:6b:99:
         0f:c2:41:69:85:98:6a:59:45:fa:d2:49:92:1a:a2:8a:31:ca:
         73:2b:5c:16:1c:78:57:0f:08:4e:86:c0:58:14:1e:d9:03:b8:
         d2:b5:40:fe:28:21:fd:fa:52:ad:f1:41:a8:35:3f:cb:8e:af:
         47:f7:88:82:f4:fa:6a:1d:a1:65:0b:d8:ad:81:11:1f:e3:23:
         86:cc:b9:99:78:2c:c0:07:e3:7f:cc:0d:a3:a2:f7:32:b4:62:
         3c:a8:5e:fd:9e:35:f2:43:4d:fa:42:e6:43:8d:bf:78:3c:1d:
         c0:21:5b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:28 2026 by rpki-client