Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File:                     29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier:          rAk1AJQBeqMx5X4y60J3/XmGQ/IghAG1S92cir+Roz4=
Subject key identifier:   A5:BB:9F:0B:1D:07:E7:A1:01:BE:B2:D3:BD:D2:CD:75:EA:C6:1A:03
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer:       /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial:       019F8643D901265F85897F88EBED2F7A8D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number:          043C
Signing time:             Tue 21 Jul 2026 20:00:21 +0000
Manifest this update:     Tue 21 Jul 2026 20:00:21 +0000
Manifest next update:     Wed 22 Jul 2026 20:00:21 +0000
Files and hashes:         1: 0XpSx_PqBsgWn7gAIHU3QZlrH3g.roa (hash: Eviyd5MC3TSKuaGr7W9HYIt5jchGDmF2CLXeiWnw2P0=)
                          2: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: moRWYcgZzlXH76JJOlNbQOD/MqkA9qYeq8hcGXvQC5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:43:d9:01:26:5f:85:89:7f:88:eb:ed:2f:7a:8d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
        Validity
            Not Before: Jul 21 20:00:21 2026 GMT
            Not After : Jul 22 20:00:21 2026 GMT
        Subject: CN=a5bb9f0b1d07e7a101beb2d3bdd2cd75eac61a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:6c:f0:c1:74:0b:a5:fa:69:fe:e2:b3:3c:
                    bc:7b:f2:b2:dd:c4:d5:e0:4f:12:77:8d:bb:7d:e8:
                    e9:01:09:46:e3:59:bc:21:94:a1:03:e0:69:24:56:
                    dd:e8:d3:72:35:d8:16:33:0d:97:7c:b1:1e:96:35:
                    6a:36:31:b1:02:f7:72:fe:6d:51:6e:87:12:f8:34:
                    54:bb:cd:f4:7c:3d:cc:fc:44:a5:7a:ff:04:0d:af:
                    14:0f:67:da:e3:31:e5:c8:dd:d8:66:fd:8c:dc:64:
                    1e:69:4a:42:be:e3:4a:bf:b2:a6:73:2f:af:6e:82:
                    aa:f5:af:13:7f:67:a7:9c:e5:11:40:70:88:e7:78:
                    a6:4a:ba:c4:26:d8:e2:04:e8:c5:6a:25:7f:65:47:
                    8b:3f:2a:3c:cb:15:af:84:8f:c8:4b:f2:7b:b8:87:
                    b3:02:c3:06:84:54:ab:1c:a5:ec:f8:d6:1c:d7:90:
                    42:64:ad:5f:14:18:31:de:86:18:d8:fb:33:8b:9e:
                    2c:8a:24:d0:4c:3b:91:c5:11:6b:94:c1:cf:c0:01:
                    d9:62:45:b1:af:82:af:ab:dd:41:0a:5c:8b:39:6c:
                    ca:7e:05:ab:9c:a2:50:c9:0c:50:ac:63:81:e6:bc:
                    87:64:21:19:f5:6d:db:a6:21:5e:2d:6a:e5:44:1d:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BB:9F:0B:1D:07:E7:A1:01:BE:B2:D3:BD:D2:CD:75:EA:C6:1A:03
            X509v3 Authority Key Identifier:
                keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:24:c5:9f:cd:e6:c4:18:79:d2:5c:46:d3:05:9f:7f:c0:24:
         5f:a3:0b:49:fd:b6:ae:84:d6:46:5c:e7:0a:56:ea:05:18:b5:
         d6:28:84:4d:74:7a:93:82:50:c8:e7:49:f2:04:d2:db:9f:f2:
         50:7c:38:e5:9c:e8:a5:dd:35:5a:c3:de:9b:2d:58:d9:61:ba:
         0b:04:46:39:f2:78:38:26:8f:52:b0:6e:fb:87:1b:21:0a:74:
         4d:59:bd:a7:a7:97:75:57:51:ae:4b:11:d9:32:f1:86:f8:34:
         3f:3d:1d:54:96:7f:25:8c:61:6e:43:6e:b1:20:49:c0:f1:64:
         60:07:0b:e3:1d:3d:94:ae:c6:29:2e:58:cc:22:f5:f1:c2:9d:
         b0:dd:60:d2:a3:10:df:3b:a2:dc:ee:bc:9f:87:10:fe:7f:64:
         1d:be:96:53:ba:23:5a:3b:5e:11:f7:be:2c:29:c6:5c:6e:a1:
         1c:4e:e2:8f:b4:a0:be:18:0e:d6:de:13:19:81:16:75:eb:99:
         9d:c4:98:24:8c:1e:d7:12:6d:84:1c:45:31:09:2e:eb:a6:f6:
         72:ac:56:b8:84:65:75:11:85:22:ac:f8:44:c4:20:c0:3e:3d:
         66:33:9a:0f:82:8c:7f:b0:73:c8:18:b7:39:5b:29:fd:10:76:
         44:3c:f4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:38:12 2026 by rpki-client