Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File:                     hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier:          7l8yHownxWdFTfWb5/zfD8s04MHc/EcG70DpCc6PF94=
Subject key identifier:   02:B8:98:FF:9C:78:46:67:B3:EF:04:46:D5:75:4F:7B:87:F9:0D:17
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer:       /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial:       019FA1F22E370251958AAF1F14CF5872A737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number:          131A
Signing time:             Mon 27 Jul 2026 05:00:30 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:30 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:30 +0000
Files and hashes:         1: 4IwzD6JWssSfDrS7OsowJYf8F3g.roa (hash: 3STzPQwFjgmuSyiPKC+VcXtn9kHY3QHNznY54Mamy30=)
                          2: Oq4z14N71pgiI9-KE_h-CCRcT20.roa (hash: hy7yGUYkeyO3aDyOj5aTJ3uxwm3TBHALM9Mgfy3Wu3M=)
                          3: SgMOoWz5gJhb0nyT-ZKsGgLzAOg.roa (hash: zgTRF9Sx7egnoTtrUbB6SPfcPU50038KU3DAntDwjks=)
                          4: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: 3efHr2sL2ZXVfmkXx9tGY8G7RNQnfLzBWDeMuHgsNHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:2e:37:02:51:95:8a:af:1f:14:cf:58:72:a7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
        Validity
            Not Before: Jul 27 05:00:30 2026 GMT
            Not After : Jul 28 05:00:30 2026 GMT
        Subject: CN=02b898ff9c784667b3ef0446d5754f7b87f90d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f2:28:15:13:c9:6a:a8:57:72:15:c2:c6:1b:
                    ea:99:ad:99:c6:ec:24:7a:43:fd:1d:f8:3c:29:6d:
                    73:16:c4:ac:25:ae:5f:48:79:02:06:49:c6:25:9e:
                    b4:eb:b4:8f:b6:c0:15:4a:25:c0:77:28:a1:1b:99:
                    ea:5e:31:31:71:2f:73:36:76:03:a4:c1:fa:9b:44:
                    8c:0b:04:6f:03:c4:40:8f:9e:a5:10:d2:60:f6:31:
                    73:16:89:e6:fc:a8:bf:fd:5f:c3:ab:fb:77:69:f2:
                    4d:cd:db:9a:68:d5:9d:64:d8:a5:d4:60:3e:ce:10:
                    8b:53:44:cf:48:4a:93:d7:bf:ea:a9:8c:46:df:53:
                    44:1b:a4:a5:d6:f6:99:a7:33:0a:2c:b1:b3:ed:f7:
                    0e:3b:1b:2e:7d:b9:f2:5a:cd:b8:16:8e:3c:f5:90:
                    75:61:84:3e:af:1b:82:47:c5:0b:c7:56:a3:8c:dc:
                    27:3f:33:fb:72:b6:f2:06:0d:76:50:95:b7:d2:45:
                    ca:77:f9:a5:3d:49:5c:7b:08:70:22:94:9b:14:b7:
                    d3:31:f8:64:88:1a:25:0a:61:60:2f:f5:5a:9c:a1:
                    72:7f:45:06:69:24:d8:af:55:87:80:41:8d:f7:be:
                    de:63:96:2a:9e:23:07:1c:71:07:cd:e4:db:6b:7c:
                    ce:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B8:98:FF:9C:78:46:67:B3:EF:04:46:D5:75:4F:7B:87:F9:0D:17
            X509v3 Authority Key Identifier:
                keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b8:0d:fa:78:03:7e:84:b2:86:9c:ff:5c:1e:27:78:30:5e:
         1f:90:8f:b2:25:f6:2e:0a:36:e1:52:fc:6e:0a:98:68:77:c4:
         bd:c7:41:bb:5c:79:49:60:43:ad:55:b5:13:a4:f2:56:25:95:
         16:c6:1e:c1:64:b2:7a:84:cd:33:b1:1a:c1:35:07:bd:2c:a1:
         35:a2:f1:e6:37:fa:1d:1a:6c:fb:6a:9f:56:18:78:22:1e:a3:
         5c:44:e5:cc:8a:3a:f7:1c:47:77:1e:b1:e4:cc:aa:fc:95:b7:
         f2:ae:45:3a:1a:f8:c1:da:d1:54:48:7a:11:0a:f6:74:9c:be:
         83:9b:d8:cc:32:10:b7:74:a1:b7:5d:08:ce:80:7d:73:3a:ed:
         64:cb:6c:77:e6:08:c8:16:cd:67:81:8f:ee:e9:74:71:98:ab:
         8b:15:38:55:89:b3:fe:81:4f:51:62:43:36:a7:bf:77:bd:f3:
         c1:f4:50:ee:f1:61:59:72:df:0b:08:4d:61:e6:99:1b:1c:f6:
         f7:86:a0:47:46:e5:e1:df:cf:34:89:67:0d:a4:45:60:be:43:
         cc:a5:04:dd:35:4a:11:e1:f6:db:39:19:38:7c:99:2a:b3:21:
         03:d6:c3:b7:77:60:12:8a:67:64:e5:c6:35:69:c3:92:20:57:
         96:c2:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:37 2026 by rpki-client