Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File:                     39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier:          mdUVC/rdED8C6z2kP5xcqD0bAP8JpdvtHJNTRdo3FaE=
Subject key identifier:   73:5C:4A:B5:6F:1E:2B:2D:67:E6:1B:D2:83:40:96:ED:73:BC:29:07
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer:       /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial:       019FA56192ABDAA451513B046C583F35A8D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number:          08BA
Signing time:             Mon 27 Jul 2026 21:01:02 +0000
Manifest this update:     Mon 27 Jul 2026 21:01:02 +0000
Manifest next update:     Tue 28 Jul 2026 21:01:02 +0000
Files and hashes:         1: 1R8Nv6bwHGDwo2mOtPOF_3tZNSM.asa (hash: tt15uIuTQgd6Syibc3srDH+USXZ4ejIXqOAjH/FfWt0=)
                          2: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: SOc01QrdAnS8N24EQPfVDGwvicVgxZqPq/JbUf+jWBo=)
                          3: DbKSgaJwD4s0pMi5dIKaS74GVd0.roa (hash: T+MZOVnJ5hOhtVk6sS/9F3yH/t9bf3m1uORMjvQu1Mw=)
                          4: FcXv6_6IBhw3gOJhd-oIzN0MdTA.roa (hash: QOZ8gHmHm+d2woOpHnxCfU5p8HTqH4kCDsC9bYWmmqM=)
                          5: QTUs2t29sOiO1bQndfZmKxNAYdQ.roa (hash: myzQSNEVPstuOfu5qsB9AEg4A9vQ4YhsK6/lq/QzmjU=)
                          6: V0dM0OGiOIRr_LANVdvcw5kopNw.roa (hash: LNRzC3fIfmhFsLHaDaO4AM9qxVQUMv8ErtHtGjlMGJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 21:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a5:61:92:ab:da:a4:51:51:3b:04:6c:58:3f:35:a8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
        Validity
            Not Before: Jul 27 21:01:02 2026 GMT
            Not After : Jul 28 21:01:02 2026 GMT
        Subject: CN=735c4ab56f1e2b2d67e61bd2834096ed73bc2907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:56:ee:fa:2f:30:e0:c8:41:9e:b4:2f:8f:29:
                    ca:f6:05:ea:a4:86:96:8c:71:cd:17:ed:c4:dd:23:
                    78:5a:a9:83:6b:2e:3a:72:ef:75:43:38:0a:36:0a:
                    5a:78:5c:b9:51:5c:fd:ab:57:a3:6a:cf:a6:d8:6a:
                    73:7b:29:36:2b:a3:e2:1d:6b:40:59:73:ca:20:4b:
                    57:29:1d:65:f2:3c:8c:86:7b:52:69:3f:bc:0c:91:
                    4f:08:2a:9f:0e:94:f5:82:08:4e:af:9c:67:e8:c9:
                    9c:93:e6:6e:b8:3a:7d:f7:33:67:84:51:2b:59:7e:
                    41:d2:2a:74:96:ed:d6:8b:3b:71:59:26:ab:59:c8:
                    9c:99:41:9b:e9:3d:5b:4e:4a:3e:63:11:87:0f:66:
                    17:d7:17:f9:a5:ab:9f:3b:17:95:28:fa:4b:62:eb:
                    8e:40:f0:3c:6b:9a:01:85:c4:69:90:7a:33:50:72:
                    5c:ff:fc:6c:11:c0:3f:37:c5:2d:6a:8b:e0:62:86:
                    85:df:60:ff:7e:b1:bd:2a:be:23:85:b4:b7:ea:da:
                    b5:0e:2b:95:84:5e:66:86:74:39:7f:f9:57:13:a8:
                    2e:c7:3c:44:5d:3e:75:ac:dc:28:26:22:4e:b1:9c:
                    fd:5c:66:2a:19:fe:a3:4d:b2:c1:df:59:a5:bd:e0:
                    b4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5C:4A:B5:6F:1E:2B:2D:67:E6:1B:D2:83:40:96:ED:73:BC:29:07
            X509v3 Authority Key Identifier:
                keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:79:6b:d8:98:9f:b6:80:17:24:09:22:57:cc:c7:d3:9b:21:
         c7:5d:73:27:b1:21:2a:b3:c0:c6:42:06:e3:df:67:f3:5b:e1:
         ac:e8:f3:59:f1:27:a0:7f:e4:00:0d:1a:55:85:14:74:30:54:
         f7:fe:a4:27:be:12:99:a2:5a:f3:37:2d:c0:33:5e:63:df:21:
         8d:74:f0:a4:8e:a3:1d:e2:77:52:bd:5f:3e:dd:ac:09:b8:23:
         5a:0e:3a:2c:14:11:66:e7:bf:f8:40:28:3f:52:fd:77:72:c9:
         28:17:96:5b:7e:be:7a:5e:7a:22:ea:4b:bf:b7:0d:49:31:a1:
         b4:fa:eb:49:2f:95:b1:c9:50:14:b7:3d:34:13:21:f7:d7:6c:
         11:8e:3f:4b:d6:90:64:d5:96:d2:40:87:6d:8b:5a:e1:50:96:
         9b:29:3d:eb:14:67:a4:b7:e5:bd:22:0b:fb:b8:b5:7f:93:3f:
         af:87:af:c6:66:49:bf:9a:27:42:91:26:d0:60:1c:57:f6:2a:
         a8:10:24:de:4a:b2:70:1b:db:ee:48:17:c3:d7:b0:54:2a:46:
         9a:91:3f:da:4d:10:5e:c5:02:9c:3c:76:a6:a5:ac:e5:be:20:
         e2:80:0a:1e:cc:d0:0e:a1:2d:59:18:7d:82:eb:cc:28:2e:c3:
         f0:03:8c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:14:45 2026 by rpki-client