Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft
File:                     S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft (raw, json)
Hash identifier:          UoRqEY435TYdC97FXb4IQaJDb/I56np636BbErqrPpE=
Subject key identifier:   3F:DB:9A:D9:14:18:F6:73:8D:8A:84:D8:45:9E:02:FA:C7:C6:3C:AF
Authority key identifier: 4B:BD:A9:A6:84:2D:43:D2:6B:7E:7D:85:2F:17:47:39:1E:A8:3E:D9
Certificate issuer:       /CN=4bbda9a6842d43d26b7e7d852f1747391ea83ed9
Certificate serial:       019FA0E00274CB6E5539E96D9799B1996AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:01:02 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:02 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:02 +0000
Files and hashes:         1: 8MQUhAj6ypfAOVIXA3WVcUTM-FI.roa (hash: lP1KOaToLMkzKCUhCgsJfBnES1ippDW8Bx45uFNVy+s=)
                          2: LSv85TytJIoQEWmVbakWmpSzsXg.roa (hash: OKx3aDH8rGZoQUqJkmp0PYp64vZE196GR3ZKNSKRsgo=)
                          3: Mvq5_h43dWzt9mHvmap3eYaeghk.roa (hash: oKSBlneD3omI+6CmJDNFtmpUSxOP+wKnKeL6BVktnZg=)
                          4: S72ppoQtQ9Jrfn2FLxdHOR6oPtk.crl (hash: OT/S+lApEgP8Knq4WAZ9kK5JhpiR82ncDyTNR6hSfok=)
                          5: rDUifGekk8qVhQiSXv8_kmhjei8.roa (hash: 72Tx5XdGphLCZt+gBuxxEvQiHolN3IZYceUsTAMmbFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:02:74:cb:6e:55:39:e9:6d:97:99:b1:99:6a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbda9a6842d43d26b7e7d852f1747391ea83ed9
        Validity
            Not Before: Jul 27 00:01:02 2026 GMT
            Not After : Jul 28 00:01:02 2026 GMT
        Subject: CN=3fdb9ad91418f6738d8a84d8459e02fac7c63caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:f5:62:d5:73:ba:cc:74:27:7d:8d:aa:d5:
                    39:6f:f9:2f:93:5d:3c:bf:dd:67:ec:43:2e:6a:82:
                    a9:d7:52:93:a2:20:48:67:ef:ad:1c:55:b4:6b:ba:
                    83:93:91:0a:5c:2b:95:4f:32:41:7b:ba:20:33:2a:
                    f7:a0:35:17:38:64:24:86:e7:84:81:a8:5b:bb:ba:
                    a3:7e:bc:32:82:7d:67:9e:44:35:7e:f3:7e:e5:08:
                    3d:f9:6f:0c:78:43:4d:45:8e:14:90:75:c9:5e:94:
                    cc:ea:9c:c1:70:88:e9:cf:11:e3:00:0d:0e:94:c6:
                    04:12:8f:4b:9b:0e:4e:fe:16:39:10:c4:fd:46:48:
                    c4:ba:c5:76:cc:b6:6c:82:b7:e1:1c:a7:77:8c:1a:
                    bb:0f:09:d2:c2:b9:56:1e:c8:5f:93:df:e1:ac:3d:
                    2c:1a:94:66:84:3f:b6:8d:86:46:87:9c:fc:60:56:
                    75:cf:33:33:35:b7:21:1d:5b:85:8f:58:89:e6:de:
                    6b:8b:11:b6:4d:0f:40:e2:30:61:7b:c2:bd:f0:1a:
                    39:5b:4b:b6:fe:ee:2c:53:b4:02:a4:6b:6b:5d:e7:
                    e6:3b:dd:a0:df:fb:4f:39:c8:81:c8:8c:1d:ab:bd:
                    f9:84:05:ca:a8:90:f3:72:ac:2d:d1:96:9c:84:9d:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DB:9A:D9:14:18:F6:73:8D:8A:84:D8:45:9E:02:FA:C7:C6:3C:AF
            X509v3 Authority Key Identifier:
                keyid:4B:BD:A9:A6:84:2D:43:D2:6B:7E:7D:85:2F:17:47:39:1E:A8:3E:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:83:00:9f:0e:66:65:2b:5a:51:9c:3f:65:fd:81:55:b9:6b:
         4e:1b:b4:4c:ca:1d:be:83:00:4b:91:d2:56:65:69:7b:f8:01:
         16:c1:b0:1d:36:d5:c6:d5:a5:1b:03:c9:18:60:a8:a8:0a:26:
         61:6d:66:5d:bb:dc:99:68:94:bf:c8:e9:8a:6b:65:a8:8d:6a:
         fd:87:e5:fc:46:4b:7b:88:d1:c6:73:de:83:61:45:9f:4d:9f:
         25:69:51:a5:00:8a:97:c7:7e:99:b5:88:ed:a8:ee:31:a7:92:
         57:08:2c:da:a8:7b:55:70:89:d1:5b:de:8b:6f:a7:b0:26:eb:
         fb:4f:83:b7:2d:ec:4c:af:3d:cc:54:7e:7d:89:47:2e:b7:06:
         dd:1d:df:ac:ff:a8:88:46:b0:c1:ed:e4:dc:bf:47:74:0b:6d:
         9c:d7:91:e9:29:cd:96:29:3e:48:05:41:63:91:99:4a:fd:1d:
         3a:f6:1c:31:c0:ba:f8:64:7b:ec:0a:9e:73:d0:6d:74:07:0f:
         ff:b4:37:e0:3a:a9:b5:65:94:97:ab:83:b7:1d:ef:77:38:72:
         2f:6d:a3:2c:4e:e2:b2:ef:75:e9:76:e0:f1:61:15:fb:e6:32:
         25:cf:87:4f:ef:52:19:d7:e7:06:58:d1:e9:d6:0b:17:8a:c3:
         d3:74:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:06:32 2026 by rpki-client