Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File:                     0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier:          9xc8OYJaZ/P8o2N00YFaGFxirDDsgXY0bG978eakUWk=
Subject key identifier:   27:60:73:E3:FF:F9:9B:FF:D6:D9:D0:31:25:8A:A6:F2:B4:EE:1A:DC
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer:       /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial:       019FA3AA69B21A0F6AC0255BB3A3BFB41720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number:          05A1
Signing time:             Mon 27 Jul 2026 13:01:22 +0000
Manifest this update:     Mon 27 Jul 2026 13:01:22 +0000
Manifest next update:     Tue 28 Jul 2026 13:01:22 +0000
Files and hashes:         1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: /wOSuxNElFH/XKBRdmjp2WFVUqFkrc4HTILea4CRwH4=)
                          2: NrghsoBul7tbolTWF8ZamRT2aQc.roa (hash: hJwEiMp115u5I16JHTrfollMknUTcgmFLYKBs/fIj04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:aa:69:b2:1a:0f:6a:c0:25:5b:b3:a3:bf:b4:17:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
        Validity
            Not Before: Jul 27 13:01:22 2026 GMT
            Not After : Jul 28 13:01:22 2026 GMT
        Subject: CN=276073e3fff99bffd6d9d031258aa6f2b4ee1adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8f:c4:10:25:ea:c2:77:3e:ce:1e:7b:a3:4f:
                    49:8c:a6:ac:63:dc:c8:4e:88:99:42:db:d6:59:1f:
                    4b:f1:0c:67:4f:d8:f7:3f:56:ad:51:f5:6a:f7:d4:
                    83:29:dd:48:b8:75:c2:02:e3:5d:66:b2:5d:fd:31:
                    a1:2d:87:ca:ef:49:42:2b:dd:db:bd:e4:58:c0:42:
                    6a:fe:55:ff:10:32:4c:95:fa:19:54:63:b5:11:7a:
                    fa:aa:6c:96:01:48:f5:c6:55:9a:4a:c2:85:b1:74:
                    8c:c9:6b:6d:0f:80:69:f2:e9:ff:99:b8:f9:22:76:
                    22:cb:e0:ab:b5:07:c6:3a:1e:d8:14:26:14:98:d7:
                    70:d0:ea:e9:2c:2f:0b:e9:47:d5:79:da:ab:ae:3f:
                    f0:f1:3a:01:3c:d7:d4:e2:49:45:fc:b8:79:36:a0:
                    e3:45:0b:76:aa:b4:4d:19:43:5a:59:b3:dd:36:86:
                    fe:2f:08:db:bd:33:03:77:1f:2c:af:e3:58:e0:73:
                    70:4c:52:e3:3e:54:94:3b:1a:77:f6:46:74:8c:67:
                    02:1f:1f:f3:b0:21:a9:d9:f4:01:b0:0b:6a:71:59:
                    2a:ec:43:a5:82:89:f0:b6:a3:da:01:ac:e2:0a:2b:
                    0d:be:04:8c:25:d5:3c:bc:a6:12:f2:d8:aa:07:5d:
                    44:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:60:73:E3:FF:F9:9B:FF:D6:D9:D0:31:25:8A:A6:F2:B4:EE:1A:DC
            X509v3 Authority Key Identifier:
                keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b6:5e:06:82:9e:e0:16:c0:7a:27:16:8f:14:5c:9c:58:74:
         d2:6c:1c:6f:40:78:2d:33:91:3e:42:3d:9b:52:e1:61:7c:b0:
         09:a0:e2:30:aa:a5:66:6f:6b:54:82:50:4c:45:f7:a3:94:0c:
         0c:c2:8b:ba:fc:51:ca:ce:8a:fc:20:66:db:36:7a:27:f8:85:
         fb:02:70:23:29:05:cf:c4:fa:7b:c4:c6:9a:85:06:64:37:2a:
         db:2e:1a:be:d5:c8:c6:70:46:c2:f5:44:e0:63:e2:7b:7d:a6:
         dc:0d:5a:e1:7d:d4:29:eb:84:87:c6:10:94:ed:a7:05:0a:8a:
         55:a2:d3:0f:7a:55:ec:da:73:fa:17:76:0f:a9:06:10:fd:a8:
         68:f9:c5:97:6b:40:85:a6:ed:b1:53:fb:bb:9b:41:ce:c4:b9:
         f7:00:b0:2c:e4:98:96:eb:61:f7:32:0c:77:15:05:09:c4:d2:
         c6:f3:4f:ac:60:8f:8a:6b:c8:6f:c4:11:31:d6:9d:52:e9:25:
         68:f3:73:0e:0e:7b:e4:9e:f1:aa:91:82:a9:64:cf:1c:89:c0:
         90:c2:e2:a0:0c:28:c3:1c:0f:b0:18:ae:b5:68:0d:88:36:b2:
         ff:b5:aa:4b:c7:6f:0f:58:65:d4:a4:bf:94:39:9a:e4:91:67:
         ce:79:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:31:04 2026 by rpki-client