Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File:                     isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier:          TyDq3sKXAo7SJlpRzDROLRL2HVRIk7iHJ2V7xvWZwKM=
Subject key identifier:   08:A5:81:E9:D4:9F:52:2A:5E:FE:25:54:30:9E:42:9C:4A:89:6D:85
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer:       /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial:       019F9E159A2E49F4136D1B88FEAA2AD6C086
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number:          16B4
Signing time:             Sun 26 Jul 2026 11:00:43 +0000
Manifest this update:     Sun 26 Jul 2026 11:00:43 +0000
Manifest next update:     Mon 27 Jul 2026 11:00:43 +0000
Files and hashes:         1: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: SLmlZObP21nsCvHRO0tQjNyVOajHzUNMdFFkdbLNjpc=)
                          2: pjsQjYCyJ3t8hM7PRxXLSSskH0s.roa (hash: JlEEmKo2Oj3IztEax/xHj/p3At5KTwe0I06/xzxbFsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:15:9a:2e:49:f4:13:6d:1b:88:fe:aa:2a:d6:c0:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
        Validity
            Not Before: Jul 26 11:00:43 2026 GMT
            Not After : Jul 27 11:00:43 2026 GMT
        Subject: CN=08a581e9d49f522a5efe2554309e429c4a896d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:e7:02:88:c5:28:00:c0:cd:d9:49:0f:cd:
                    ab:91:e0:f9:1b:44:7b:7e:a2:5b:98:0c:a9:7f:8a:
                    9b:f0:ab:15:c3:4c:97:0b:c6:64:aa:b8:c7:a7:0d:
                    1a:12:56:9e:b2:8a:a8:95:2d:95:11:66:6b:bd:45:
                    c7:06:d5:08:8c:cb:15:2f:dc:04:5a:5c:b8:a4:88:
                    2e:39:8e:c6:22:99:d1:70:80:e1:ec:13:73:1f:7a:
                    f3:31:be:ef:24:5d:64:39:34:29:a3:3a:89:4d:c4:
                    e7:0c:57:ae:25:89:5f:96:78:13:ef:3f:f3:ab:5b:
                    71:72:f9:b1:8e:a9:70:c5:d0:5e:4f:4f:09:e8:64:
                    ed:ce:d8:fb:40:ae:e1:0c:c6:46:31:88:4a:e0:0f:
                    44:9c:10:8f:40:df:96:49:c2:af:17:84:d6:53:e5:
                    e0:46:ab:2a:08:77:70:c2:08:3a:1c:6b:90:9a:13:
                    77:e4:54:aa:f1:ff:8a:66:06:a9:78:02:a7:dc:20:
                    2a:6a:cf:c0:7b:c1:b0:c4:f0:00:21:5b:bf:0c:ac:
                    2d:a0:f1:b5:f6:22:90:7d:b9:82:f9:33:bc:5a:d2:
                    91:56:51:b1:43:1f:10:9b:df:f7:e7:97:df:9a:fe:
                    83:d2:ed:05:9c:6e:22:b0:7d:a7:b6:a4:ad:b8:85:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A5:81:E9:D4:9F:52:2A:5E:FE:25:54:30:9E:42:9C:4A:89:6D:85
            X509v3 Authority Key Identifier:
                keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:35:58:b9:55:4a:0d:1a:11:ef:dc:a8:0b:77:d1:27:da:95:
         b3:ab:e8:96:58:f8:0a:9e:64:25:42:fd:94:80:fa:e2:ed:6e:
         09:57:89:9a:ac:df:80:8a:27:c7:90:48:cd:49:ec:1f:e8:6c:
         59:bd:da:ce:13:b5:4b:ee:6d:a7:16:3f:1c:ab:16:80:a1:06:
         a4:4b:d9:55:e8:96:65:32:08:87:93:30:74:8b:25:38:78:2e:
         23:f3:80:a7:1e:79:92:c9:61:32:46:ea:00:c9:fa:b1:41:f5:
         ec:a0:f6:b8:cf:cf:f6:67:45:d7:f3:2d:30:64:ae:04:cc:49:
         9c:27:2a:ea:85:b9:1d:4d:d8:8a:c1:ef:1b:fc:c0:6e:46:4b:
         c7:f8:2c:cb:d1:78:42:2e:4a:33:ba:e5:78:fa:9d:5c:9b:0f:
         c9:c7:25:13:93:ae:89:5f:b5:17:2d:7b:36:21:3f:ac:eb:a4:
         07:35:27:ef:e9:49:40:58:3a:41:5a:4f:20:96:f0:d1:da:f8:
         e4:ad:7b:b3:eb:e6:61:0f:3a:91:88:af:e9:90:f1:5e:04:c0:
         8c:f6:01:1c:b8:a9:34:f8:2c:52:73:9c:9d:a0:43:59:42:b7:
         6d:98:0e:1a:7a:02:f0:0d:c0:7e:33:77:34:c4:c8:c4:b5:8c:
         cd:b7:74:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:54:46 2026 by rpki-client