Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File:                     N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier:          JtEsheDqQ3eIngRGfDc3wE5NHYEvLxtsAzDcRJs/6fU=
Subject key identifier:   0D:A3:46:18:04:4C:6C:7E:9E:ED:54:F8:A6:5D:49:E9:53:E5:55:6A
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer:       /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial:       019F3717C19A06CC9299B336CC819F467C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number:          199C
Signing time:             Mon 06 Jul 2026 11:02:11 +0000
Manifest this update:     Mon 06 Jul 2026 11:02:11 +0000
Manifest next update:     Tue 07 Jul 2026 11:02:11 +0000
Files and hashes:         1: 2a6CDxxUrQGBmDt9bRl1JF_nyvc.roa (hash: ZSsnNRN6qb6nlLwR6tJUMByyx0s8BQTn0qVgNGvcWZc=)
                          2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: +cO4ksZxhznNsPcyA3IfNB7aFgnNwiFgNPnAFYp7ifY=)
                          3: Ol3Cdb1XyRY6urO3sw4yVDwme94.roa (hash: tfUvfQzgGXJJiO1C8x+8AL672Tfl8NCYZs94wHKASfw=)
                          4: fJoKECLKUeD5DLyAzQSfUcqojno.roa (hash: 3zNqg/msTStClL6VJhx0R8PHg/rjNiAgrUFnWqVj+Y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 11:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:17:c1:9a:06:cc:92:99:b3:36:cc:81:9f:46:7c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
        Validity
            Not Before: Jul  6 11:02:11 2026 GMT
            Not After : Jul  7 11:02:11 2026 GMT
        Subject: CN=0da34618044c6c7e9eed54f8a65d49e953e5556a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:09:7a:34:88:60:04:8d:b1:76:a6:1d:de:
                    1b:46:e3:bf:5b:1e:01:9b:0f:36:a6:cf:19:28:6d:
                    87:18:00:8d:69:c8:b2:7c:f0:8d:71:e5:e3:6b:0d:
                    d2:f1:2f:01:61:2a:ce:db:89:32:14:6a:31:5d:b6:
                    2b:2f:84:6b:16:17:8f:2c:7e:da:90:77:c9:ce:4e:
                    d6:20:9c:34:b8:94:70:6a:3f:82:38:14:fa:bc:dc:
                    81:1a:09:9d:46:7c:70:63:1a:94:12:1d:d6:69:52:
                    e5:91:3c:c9:b4:6e:d7:ac:68:ca:26:41:13:bb:ad:
                    82:fe:31:b9:da:2b:9d:e5:d1:43:a6:b0:10:a6:6d:
                    1c:aa:71:8a:4a:5b:f7:48:76:5b:b3:a3:d5:af:d9:
                    e8:89:18:3e:e4:fa:c8:83:2a:5e:bf:3e:a2:00:46:
                    28:5e:71:80:6a:7d:61:35:48:7b:33:09:56:38:d8:
                    a1:30:d2:41:ab:0c:d2:52:5b:6b:f8:6b:be:66:de:
                    b4:ba:b3:a8:64:9c:b1:7a:61:3e:2f:a4:e3:2e:a9:
                    98:a0:21:91:60:c7:56:f4:40:7e:4d:71:30:93:f9:
                    79:1e:3c:ef:2c:f8:b7:1d:7b:91:b1:cc:1c:93:37:
                    26:0b:78:7f:6b:0d:02:c4:03:64:ac:82:9a:fc:19:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A3:46:18:04:4C:6C:7E:9E:ED:54:F8:A6:5D:49:E9:53:E5:55:6A
            X509v3 Authority Key Identifier:
                keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:2c:77:db:ce:4f:0b:96:af:91:e3:55:aa:59:b6:5f:3b:
         38:6e:a6:00:98:d8:eb:2a:4e:cf:63:08:08:94:0c:ab:66:f1:
         f9:aa:9c:f7:04:8d:94:45:77:11:a3:2b:ab:10:6a:01:a0:e6:
         a5:59:bc:09:43:1f:ac:93:c0:a5:9a:5c:4d:4d:62:38:8c:85:
         83:04:7e:87:e8:d4:10:75:3d:60:8c:bd:da:f1:be:c3:92:77:
         97:28:19:54:f2:43:fe:6e:6b:c2:ba:16:6d:f8:93:ea:5d:61:
         83:19:56:7a:03:1c:47:83:58:8e:1e:92:88:9f:d9:5d:06:0c:
         df:ea:01:fe:c4:d2:0e:a2:d1:b0:95:bb:53:8d:be:fa:91:08:
         d5:bb:c4:d9:8d:e9:58:eb:31:3d:c2:f0:24:7a:b5:25:13:63:
         84:16:ec:e0:d1:ae:de:ab:bb:49:98:f9:fa:49:86:13:d1:2c:
         31:b0:49:30:03:22:6e:58:2d:7d:ea:5e:e0:be:e3:10:5f:58:
         64:c2:3c:d2:ea:53:3e:a9:04:0a:8c:ae:12:d6:2a:df:92:d8:
         56:f0:98:70:17:fe:83:78:03:6a:14:97:15:97:7f:a8:00:8c:
         45:13:2e:b4:a4:14:02:5e:52:16:29:b5:3a:cc:64:fc:b5:7f:
         da:d0:02:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:17:38 2026 by rpki-client