Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File:                     ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier:          bKDDHefrkE9HjGxivvzE1BsfjyDzCBZbxSKhDZjP6pY=
Subject key identifier:   77:CC:F3:C8:34:FE:E2:12:10:07:76:4C:82:72:72:76:FA:46:AC:5C
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       019FA4853DD39532F84774ACBB570FB729D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number:          1340
Signing time:             Mon 27 Jul 2026 17:00:23 +0000
Manifest this update:     Mon 27 Jul 2026 17:00:23 +0000
Manifest next update:     Tue 28 Jul 2026 17:00:23 +0000
Files and hashes:         1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
                          2: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (hash: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=)
                          3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
                          4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: 9HOusofMMxGsORWpqUhLWdcaR1Dwxe58EAmdRHOELQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 17:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:85:3d:d3:95:32:f8:47:74:ac:bb:57:0f:b7:29:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Jul 27 17:00:23 2026 GMT
            Not After : Jul 28 17:00:23 2026 GMT
        Subject: CN=77ccf3c834fee2121007764c82727276fa46ac5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:f9:83:e8:17:d4:f7:11:80:31:1d:e1:6d:
                    a7:e8:f3:e4:26:19:1f:ec:ad:64:76:a1:34:2f:2e:
                    5f:dc:f4:bd:e9:50:fe:7c:11:72:ec:68:82:7b:12:
                    71:c7:a8:51:a3:52:c1:00:be:02:a0:71:75:a1:42:
                    47:61:05:f4:50:f9:e0:b6:a5:63:db:0f:40:e9:1a:
                    0e:0c:99:d9:8c:82:de:93:ec:29:7d:da:19:f4:3f:
                    b6:e2:e8:1b:e7:d4:73:1e:26:58:7b:42:dc:67:04:
                    94:c5:ba:76:ed:83:06:e2:44:51:11:1d:63:84:d2:
                    95:8c:9c:dd:dd:98:9d:0e:dd:f5:8b:7b:8a:b8:b6:
                    16:a8:ee:32:eb:c6:bf:11:65:d2:9f:5f:36:e0:30:
                    bb:3f:df:d2:0c:2b:3b:25:88:01:89:85:60:78:33:
                    b1:fb:56:38:85:07:97:8f:31:2d:44:18:99:71:43:
                    2a:32:a1:f9:a8:67:82:65:2d:94:60:42:07:ab:24:
                    c0:88:a0:3a:ed:f4:14:dd:d0:8c:9b:5e:42:04:a1:
                    94:ac:32:01:7c:8c:b5:62:4a:4f:22:b3:ed:77:88:
                    ad:22:74:66:25:51:e9:fb:90:9d:67:c5:c6:b1:d2:
                    af:d2:ad:86:05:19:de:1b:f5:be:a8:02:c4:60:63:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CC:F3:C8:34:FE:E2:12:10:07:76:4C:82:72:72:76:FA:46:AC:5C
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:bb:be:4d:3c:1b:72:e3:95:05:96:db:f8:3d:83:26:b3:
         8d:1f:cf:3d:b0:db:20:f4:d0:39:04:4d:7f:fd:34:70:93:49:
         a4:81:5b:7d:9a:99:5c:30:8d:28:06:f0:76:6d:d4:c8:78:dc:
         96:41:d6:6a:e7:1a:04:ba:4d:83:61:a4:6b:c3:c9:53:dd:f9:
         5f:4e:10:74:84:45:ba:03:f9:a4:70:9c:5d:e1:ae:54:2b:f3:
         aa:01:cd:f4:c4:08:79:c9:71:c7:7e:ce:9d:e7:7f:11:d2:a7:
         d2:06:54:93:3f:3e:0d:23:63:49:bf:aa:35:0c:59:fc:4c:70:
         79:d8:15:d4:ce:81:4f:84:0c:b0:f3:d5:36:ed:10:ab:12:4e:
         6a:c2:4f:75:38:05:2c:d8:9d:5d:ed:71:b3:93:5d:d9:81:e7:
         40:00:77:ee:ff:f8:78:91:5c:6b:60:ac:68:1d:be:16:0b:02:
         2c:8c:19:37:71:39:d9:7c:c9:46:b5:3b:eb:1e:89:c7:45:86:
         a1:d0:f5:16:42:f4:e9:a8:8b:04:1a:c6:2d:81:0d:39:63:d3:
         dc:c0:08:56:2d:29:1e:16:21:27:57:26:24:b0:d9:60:b3:de:
         74:5e:c4:cb:f0:16:9b:19:29:5c:36:a9:8d:b1:e2:e1:5e:37:
         65:91:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:24:37 2026 by rpki-client